last executing test programs: 2.880587188s ago: executing program 1 (id=865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x10008, 0x8, 0x7, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f0000000280)={0x10, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x7f, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) 2.738253078s ago: executing program 1 (id=872): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) 2.362503969s ago: executing program 0 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r2, 0x0, 0xfffffbdffffffffd}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) 2.314182143s ago: executing program 0 (id=881): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r3 = socket$inet(0x10, 0x5, 0xa96) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000940)={0x0, 0x8}, &(0x7f0000000980)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000340)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000440)="561d4ec927d986912070", 0xa}, {&(0x7f0000000480)="08bb1adbd3dc122ee3fcd75862b5cce35b81b61ac25ea749719b063c0d4b23bb74f79a812ab770da4a7842e71ce5c1b32972b4490b945d6f8d97c3a4299a89f5a2a5caf1030a5d7b4770706c2236484e2147504e718d8fc8a594ab3f118c53e5642ad6c63eacbfd94fef1cd7459c94b1a036e4455a472f6aa9c9184f6903c99c84dcac50360b289d7d59ae6785a59146f6951e7e4f92ca0b0373001f39c6ff4fefedbd3ef884a7c49f65f538200b7138c21b7308166fa25b4f122c5480287a31c4d766aa539635e8602e648d", 0xcc}, {&(0x7f0000000580)="4ce21400c912a1a654a2df14b7991eb53435e4243014853d11b2781408dd6ded85b87059822c6a32cd576821d13065365ecb51079deb57405871c8edf13d10a520", 0x41}, {&(0x7f0000000600)="86ed77e0a3634358912966f22c8e25c289ce", 0x12}, {&(0x7f0000000640)="7965bb64dc0994e35103974b6e2d38228a946eb5", 0x14}, {&(0x7f0000000680)="74bdd5428cd5be3fbc79650eeef7982dca8bb96a29f916cdc9aa020083e981ca49a428b4381860d6f93b73ab94f961484c53aab7fff780ed54a3d83f23765d28db56aab1d3570465a2ce1539c25acc2c8d1f75fac527ae131bddfa56104bc21440c9ff4f05c27e1f30fd50872a0533d1fce23303e5a12f2f9d1baa13db964f9b631e982741b651e15e", 0x89}, {&(0x7f0000000800)="3f819cffbbd5372833efa1a5a6a727a7e1ee4c4a24ba38fe31f94f14ae079abea2e26063a25d7f07306904748f5ba2be85ef889b2cbd7358f8118126a8006281f366", 0x42}, {&(0x7f0000000740)="06fb99aa2a2b5df37811faeea412bf682f84d151f045cd565b15c4f2ff3d7c72ceebd64b88fb0ce54b7ce4ff9c88c564e511e35e", 0x34}], 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000840000000600000005000000000000003000000000000000840000000100000029000801000000000000000000000000090021000000010009000000", @ANYRES32=r5, @ANYBLOB="18000000000000008400000006000000ac77000000000000180000000000000084000000050000002000000003000000180000000000000084000000000000000300440b0800ea04"], 0x90, 0x40000}, 0x81) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b14f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x89}}, './file0\x00'}) sendmsg$nl_netfilter(r12, &(0x7f0000000d80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000003a40)={0x1bbc, 0xd, 0x2, 0x201, 0x70bd2c, 0x25dfdbfb, {0xa}, [@generic="69cb93b8a038283e610352dab4e47681c9bfe18279c8ea0433210c4423c9c32f69418f1ea3bb3bc2ce92e17bc993c1c27c9d276533e1fd9bfe6f23b1b4d015e4cf72742751a6d5d43d5c537b47fbb34909f153e6a974332d4303", @nested={0x1673, 0x9f, 0x0, 0x1, [@nested={0x1500, 0xe9, 0x0, 0x1, [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0xc7}, @nested={0x125, 0xeb, 0x0, 0x1, [@nested={0x4, 0x10b}, @typed={0x6f, 0x112, 0x0, 0x0, @binary="65c9fbaa1e03472b650123d9d625af252d66386b9db32dcbbe40c4a043a03887ec81ba82ec6e98cb5426703e5e9276ac172a4577055e669a8afe8a8c0ae5fbe63687a09fcddd82d7dee3b54df281e2bc7011d1ff8fe6a64ea6c62ec29576dc4689a5738b118d99cf3b9fe4"}, @generic="2b9d145d194fcfb2bf1ead49e2417d363db509f68f16eb27ead23fc0ba3c8ef941684400894793ebc4400cae28f2863821b2cc6cffd2ca54d6e9dce81d1a92022cd5a701ca0b65a555f1bc389da553eb869c82476d8585ab59b683a46013e3f0af267cdabe8637f5061d5cbbe03b1f2ca12574ebc73cffd88cdcb8269d3ad4896460b9ff3cba45a821ae57dd0e0883ce4a7add0382", @nested={0x4, 0x7a}, @typed={0x11, 0x11c, 0x0, 0x0, @str='team_slave_1\x00'}]}, @nested={0x1be, 0x44, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @fd=r9}, @typed={0x94, 0x7, 0x0, 0x0, @binary="12af4367f84fa808ab96f68ab1f9a75218b76fa3e034c7f87777fcdd643484e884b6a1226b3337474f8285b64a7d9c9d057a84a04fe4ed6931c2a1f78c0f9f733fd3268e491150897ea219ee33ac38ea1ebe81ed2d0ee2e9d890fddcc2e639d95a6f955e1f53e28995b2df90024f724aa8bbb99bc10223580a2af3848b0f220d4f35effe39b8824a378cc8bf303e2e57"}, @typed={0x90, 0x78, 0x0, 0x0, @binary="6ddf2a2651dc08f2ceddb1fbf5ea7521685c82ca30a460a2c7c4ccf05ba60ac048872017105a61573e59407c2dae84d6134f517a7cb51dda9714a78e5e61bf596f0635c945bf7615e18e83cabc5e1fee9490cc9f18bab52e97bbf329e018650d520606b3b4dbd926f84458e848738b459cda19f9f31aa830f3f9c60cf2c25b8cd5d27d78c8dc9d0919a065ab"}, @nested={0x4, 0x30}, @typed={0x8, 0xcb, 0x0, 0x0, @uid}, @generic="f8d2e8f92b6b017af2feff0d71cf7fdea3a3f1a9cf5037b51f0392dff3172e811b30e7e8dfa5c6004fc75f1681725afaa644aabc6cef90b3263ceec178da4d77efaa027def12228da1017c5a09e9b8e37328cd798d5319d81529a59b49b0cdbf3e4b0a4444a0e4c3a68c776fc697fbc14c5fb105bfbdbc6346e8", @typed={0x8, 0x147, 0x0, 0x0, @ipv4=@local}]}, @generic="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", @nested={0x114, 0xaa, 0x0, 0x1, [@typed={0x4, 0x2}, @generic="22a43f3cfe2fb24d007b8038a78a788652dd52db86bf2def03534c1c411aaeb2c3f6416286f271e1395e85bcc1d165887b3e0cc70fb9b6f8f60dce2f78e2ec8127ff1b26476f9c4678f87b695dc058ce4da3e622cc", @typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}, @nested={0xffffffffffffffb8, 0x145}, @generic="f6ee143dcc997ad853d6c93d9be6ac4c4011d28297e61b3c2925e51e849b9b38c2b8b9f80e516b02325b9e81b3707339d17f65bc01b1a744134fecf6bf01269c9fb7b48c041617e52435344de20e3661fe35338b5db60ade488facf0fc3ffdc861c98be5145a443de87f1b6d717b87276955380931829e423fd0c538c8c8ef44fac212d6c37964fbe5cd5c6eabb86cfaadeb178dbecb91ea2a8fda559a3e837932d68d7e2770bc5a98fe5f"]}, @nested={0xef, 0x3a, 0x0, 0x1, [@nested={0x4, 0x2f}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0xc4}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@empty}, @generic="5faf65bc3307c875ee8e7169b7c2881af6b2185bd8d4e91e9e00544a74a3da408689f3c48c6fb4de8931d8e007c31088b941a6fc5f55783e4704f05cc1209e62f1f4e7156bf555282e06d61d9d7167a53bf3f92e0132fa6aa630467fe610f69e2cb8c42f8f63c48101af966cf20df125a17d0897c1c384f501cf1f36e13a001c6b59ecf4ac2659f485df2e0f4047db5b3aa347d4623bb52a807a3f81585bf96c1645536066c8ec4beeb87b8a2bd0434780d6c72f897cd60001ba1da5a1729045550e6f641a0a3bd8e075f0c860fc0fc5b80f36"]}]}, @generic="9f49b79cacb1114946dbf759fff7ff49916a5922b2b1a121c55557bd8d256ccd0a232d6dd46d0be3a611e31ad2e1bf2015667be383702bfd049862c13d47dd26f7f3c9d039b51cb68ef85ac8515f2555a5a90b5fa373ceb9ccfb79ce30d969df37f4ea28b0f8f572cb6422d36058d3655f6572f957a4ee8ca2dbc2fc99a6892297f6", @generic="1dbc54459d49b135d3c14899b4e2f317369394cb05aef901ddc36ec96135afa5df8ffe9efafe3227796ddbd356534d6a6baa69c4b6205fd3e7292ffbacaff33d4bb1b0cde7de4d0ececfa0e81cc323de563293c90a7fdf61dc144721a3c6bf087b60b9206bae990e8bb876073ec4c5fab7c783f779cbcee209204346cf52549f2b93ed6c7cf30edacc94517f2a48c0989580cc9365dcee7bb65510fc874f13d91ae4c70c0dcee79154ae9189f40c2ad97dfd6a9c47f6d9be2890907c94339a83137045ff48cbcbfdf77ec8787a27c084745017a4ed2ac63c3cf2cadb226ea00772d2b2be51b9a78721ce467551"]}, @typed={0xc, 0x131, 0x0, 0x0, @u64=0xa909}, @typed={0xfd, 0x11f, 0x0, 0x0, @binary="d4eb26c68a3172bd81f9eb98e767b14a0b7a830c2532192364f5180aeeb91cc9310516968b82509ac80b6c1de006c05fc5bf3c81187af4add8fa68d05ae47ee796f687d9c7f513f67f385a5d66f539bffd2782aab707a03e179afc57ab358a44209ba3e4778313bfd9834b618d8829200912151d870aa4d8b325c198e51661a73114d2b0d40c75ca037431de19d57c64f240bab682c450f4b26378cf4bc72224d61af2b6421abf98b1ef59ba93250707d51e9f411cc715b3bb423b021db7f7489cdb00dd310db07a1d113016d37195be97f39c4629bd3b86843534442151a8939807160f47ccf4eed869a3bead52d71684643e2041a0a13fc3"}, @generic="f95e0bfa6d6647b0875ec9a597b4c10d8f87cc46ee18ea56c7622a054b3b5b356a1606f3523cfe9cf85b58df40bbe6af8e949627e9f6e355b5fa2d7d667484f54d01a082381abe041744ce3b63bd78a1d32c3440380f9bb75c8f341b4e749c89cd8b03d57bac94cb0e0779cfabfc8bc488e31b99d50bf0f0ee9330d699ccf83392e4c03375f06e34d4d35fd4b5d630c7117518f31fbfa3dc16b3203855bd6f08102efdbf99185ed89816552a37d7c628dc4541c98bc5ced335a0efb41eb44bed8bfe4eea6e2426e758f98a9490a1484be4b419ce0fb7fda201f9475af0af68f26151fdcf8b", @nested={0xf2, 0xc9, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0x52}, @nested={0x4, 0x12c}, @generic="6a5ec578ffd9f0651b2912243475f60c2a55dd21a28499a552ae2ee72968bf9ad95ecde26eac31c40beec401ea9a06e6cb15925ba3203c451f70de68e5adc9810b7b24daf20b494855967175be52facb6a815838567bcc02b526e694470f0ffaaec5b72f042084be651954f58df9b125575c8bb9f9004db6a08c58f95220414bf0e51c0cce3b2f2f9954175d08fdf2bb15d3995c4e0e7d9e4bf62f0537b0a876a1b89cf03312acd56c620a4977e825410fd88dadb8ec5141a7de6bf69e146b7278c9fe9a7ebb", @typed={0xc, 0xc8, 0x0, 0x0, @str='skbedit\x00'}, @nested={0x4, 0x66}, @nested={0x4, 0xbd}, @typed={0x8, 0xed, 0x0, 0x0, @u32=0x7}]}, @nested={0x66, 0x90, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xd0}, @generic="d7c9bbf7fa42c6ef3f770766cd4ca64c126ade16e305496529bb47876c5555c80d2acd7d04693d73e01b2fc9bc0383a397a3fe0a6225f942044013b5c049bb635bc6085dea91fd9a3b614cf94abe1288e3603fa414a8"]}, @generic="ad1185e77666c13b95", @nested={0x182, 0x134, 0x0, 0x1, [@typed={0x0, 0x118, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x54}, @generic="ba090d2b540b6dc7a46902bea96131eaee6411be313200c721dd8f851d3adb7050b6d18a5ce1ac9dd1f95270faaa6e146695eca68946f9437cc6ae80e4e3ce3dfbe261a6ccb127aceb19da33b296381da74e531e22e6eb95d51b29f03c54e02a30734bc0329dc74d17770888fb060769a15ed5093c04761cd22be5209f2dc81238a6e75b7f00dcb25f6cdb20e6f72d69e26cc53d18a4e053c473c2df02096625b714c0429ab2b89e12ac6811b873262f62e449a6858d8e35025c94fcbe271c86596f3810", @generic="e1ec40fc0018b68bd1ba655ad53baac62c2dbfb9a76c2d69169382929caebe9b09b5a623bc85321afdbe08635665d72ecfef6c2452f4831ab0e6968c14a083af0685a55d6b111920680bc91808d91ac39dcbc4eec124c3b52778e81637168ebdb9c1212a4525a992d4c371f81c7a41fdb86c0d29820a4fc1cc1d6488a7bc5ce055928a434ccbdb12d474ab8ad847854d17df", @typed={0x8, 0x9b, 0x0, 0x0, @pid}, @typed={0xf, 0x3c, 0x0, 0x0, @str='tunnel_key\x00'}, @nested={0x4, 0x13}, @nested={0x4, 0xe9}]}]}, 0x1bbc}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@deltaction={0x1bc, 0x31, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbbc6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x1bc}}, 0x0) r14 = socket(0x10, 0x803, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x114, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r16, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x7, 0x6, [{0x1, 0xffff, 0x7706, 0x18}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0x40, 0x2, 0x1000}, {0xf, 0x3a1, 0x8, 0x405}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0x11, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x3000}, {0x6, 0xc25a0, 0x3, 0x1000}]}}]}}]}, 0x114}}, 0x24040084) 2.275061436s ago: executing program 0 (id=882): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x10008, 0x8, 0x7, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f0000000280)={0x10, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x7f, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) 2.152416466s ago: executing program 0 (id=884): syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000102505a8a440000102030109021b0001010690920925a8e49e21179a5d0905010220000902fd"], 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) listen(r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 2.051709934s ago: executing program 3 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x1, {0x2}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000918115f0c52daaff9bf1dcadf40a57ab58152000080c576cccb2c99e8d48a31b3d361097228de3dd8f359d3d10dbf783891f2786717205fbca808d863bb906c64eb3e3b6344cf66a220129a144a403927e037b53190cba0d5", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00010010008105000050f1fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d80400000000002c00128009000100626fd9cd000000001c00028008000800ffffff7ff6988e95376deb348843d92d1a4d0800"], 0x4c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 1.901005336s ago: executing program 4 (id=893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r3 = socket$inet(0x10, 0x5, 0xa96) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000940)={0x0, 0x8}, &(0x7f0000000980)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000340)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000440)="561d4ec927d986912070", 0xa}, {&(0x7f0000000480)="08bb1adbd3dc122ee3fcd75862b5cce35b81b61ac25ea749719b063c0d4b23bb74f79a812ab770da4a7842e71ce5c1b32972b4490b945d6f8d97c3a4299a89f5a2a5caf1030a5d7b4770706c2236484e2147504e718d8fc8a594ab3f118c53e5642ad6c63eacbfd94fef1cd7459c94b1a036e4455a472f6aa9c9184f6903c99c84dcac50360b289d7d59ae6785a59146f6951e7e4f92ca0b0373001f39c6ff4fefedbd3ef884a7c49f65f538200b7138c21b7308166fa25b4f122c5480287a31c4d766aa539635e8602e648d", 0xcc}, {&(0x7f0000000580)="4ce21400c912a1a654a2df14b7991eb53435e4243014853d11b2781408dd6ded85b87059822c6a32cd576821d13065365ecb51079deb57405871c8edf13d10a520", 0x41}, {&(0x7f0000000600)="86ed77e0a3634358912966f22c8e25c289ce", 0x12}, {&(0x7f0000000640)="7965bb64dc0994e35103974b6e2d38228a946eb5", 0x14}, {&(0x7f0000000680)="74bdd5428cd5be3fbc79650eeef7982dca8bb96a29f916cdc9aa020083e981ca49a428b4381860d6f93b73ab94f961484c53aab7fff780ed54a3d83f23765d28db56aab1d3570465a2ce1539c25acc2c8d1f75fac527ae131bddfa56104bc21440c9ff4f05c27e1f30fd50872a0533d1fce23303e5a12f2f9d1baa13db964f9b631e982741b651e15e", 0x89}, {&(0x7f0000000800)="3f819cffbbd5372833efa1a5a6a727a7e1ee4c4a24ba38fe31f94f14ae079abea2e26063a25d7f07306904748f5ba2be85ef889b2cbd7358f8118126a8006281f366", 0x42}, {&(0x7f0000000740)="06fb99aa2a2b5df37811faeea412bf682f84d151f045cd565b15c4f2ff3d7c72ceebd64b88fb0ce54b7ce4ff9c88c564e511e35e", 0x34}], 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000840000000600000005000000000000003000000000000000840000000100000029000801000000000000000000000000090021000000010009000000", @ANYRES32=r5, @ANYBLOB="18000000000000008400000006000000ac77000000000000180000000000000084000000050000002000000003000000180000000000000084000000000000000300440b0800ea04"], 0x90, 0x40000}, 0x81) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b14f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x89}}, './file0\x00'}) sendmsg$nl_netfilter(r12, &(0x7f0000000d80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000003a40)={0x1bbc, 0xd, 0x2, 0x201, 0x70bd2c, 0x25dfdbfb, {0xa}, [@generic="69cb93b8a038283e610352dab4e47681c9bfe18279c8ea0433210c4423c9c32f69418f1ea3bb3bc2ce92e17bc993c1c27c9d276533e1fd9bfe6f23b1b4d015e4cf72742751a6d5d43d5c537b47fbb34909f153e6a974332d4303", @nested={0x1673, 0x9f, 0x0, 0x1, [@nested={0x1500, 0xe9, 0x0, 0x1, [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0xc7}, @nested={0x125, 0xeb, 0x0, 0x1, [@nested={0x4, 0x10b}, @typed={0x6f, 0x112, 0x0, 0x0, @binary="65c9fbaa1e03472b650123d9d625af252d66386b9db32dcbbe40c4a043a03887ec81ba82ec6e98cb5426703e5e9276ac172a4577055e669a8afe8a8c0ae5fbe63687a09fcddd82d7dee3b54df281e2bc7011d1ff8fe6a64ea6c62ec29576dc4689a5738b118d99cf3b9fe4"}, @generic="2b9d145d194fcfb2bf1ead49e2417d363db509f68f16eb27ead23fc0ba3c8ef941684400894793ebc4400cae28f2863821b2cc6cffd2ca54d6e9dce81d1a92022cd5a701ca0b65a555f1bc389da553eb869c82476d8585ab59b683a46013e3f0af267cdabe8637f5061d5cbbe03b1f2ca12574ebc73cffd88cdcb8269d3ad4896460b9ff3cba45a821ae57dd0e0883ce4a7add0382", @nested={0x4, 0x7a}, @typed={0x11, 0x11c, 0x0, 0x0, @str='team_slave_1\x00'}]}, @nested={0x1be, 0x44, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @fd=r9}, @typed={0x94, 0x7, 0x0, 0x0, @binary="12af4367f84fa808ab96f68ab1f9a75218b76fa3e034c7f87777fcdd643484e884b6a1226b3337474f8285b64a7d9c9d057a84a04fe4ed6931c2a1f78c0f9f733fd3268e491150897ea219ee33ac38ea1ebe81ed2d0ee2e9d890fddcc2e639d95a6f955e1f53e28995b2df90024f724aa8bbb99bc10223580a2af3848b0f220d4f35effe39b8824a378cc8bf303e2e57"}, @typed={0x90, 0x78, 0x0, 0x0, @binary="6ddf2a2651dc08f2ceddb1fbf5ea7521685c82ca30a460a2c7c4ccf05ba60ac048872017105a61573e59407c2dae84d6134f517a7cb51dda9714a78e5e61bf596f0635c945bf7615e18e83cabc5e1fee9490cc9f18bab52e97bbf329e018650d520606b3b4dbd926f84458e848738b459cda19f9f31aa830f3f9c60cf2c25b8cd5d27d78c8dc9d0919a065ab"}, @nested={0x4, 0x30}, @typed={0x8, 0xcb, 0x0, 0x0, @uid}, @generic="f8d2e8f92b6b017af2feff0d71cf7fdea3a3f1a9cf5037b51f0392dff3172e811b30e7e8dfa5c6004fc75f1681725afaa644aabc6cef90b3263ceec178da4d77efaa027def12228da1017c5a09e9b8e37328cd798d5319d81529a59b49b0cdbf3e4b0a4444a0e4c3a68c776fc697fbc14c5fb105bfbdbc6346e8", @typed={0x8, 0x147, 0x0, 0x0, @ipv4=@local}]}, @generic="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", @nested={0x114, 0xaa, 0x0, 0x1, [@typed={0x4, 0x2}, @generic="22a43f3cfe2fb24d007b8038a78a788652dd52db86bf2def03534c1c411aaeb2c3f6416286f271e1395e85bcc1d165887b3e0cc70fb9b6f8f60dce2f78e2ec8127ff1b26476f9c4678f87b695dc058ce4da3e622cc", @typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}, @nested={0xffffffffffffffb8, 0x145}, @generic="f6ee143dcc997ad853d6c93d9be6ac4c4011d28297e61b3c2925e51e849b9b38c2b8b9f80e516b02325b9e81b3707339d17f65bc01b1a744134fecf6bf01269c9fb7b48c041617e52435344de20e3661fe35338b5db60ade488facf0fc3ffdc861c98be5145a443de87f1b6d717b87276955380931829e423fd0c538c8c8ef44fac212d6c37964fbe5cd5c6eabb86cfaadeb178dbecb91ea2a8fda559a3e837932d68d7e2770bc5a98fe5f"]}, @nested={0xef, 0x3a, 0x0, 0x1, [@nested={0x4, 0x2f}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0xc4}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@empty}, @generic="5faf65bc3307c875ee8e7169b7c2881af6b2185bd8d4e91e9e00544a74a3da408689f3c48c6fb4de8931d8e007c31088b941a6fc5f55783e4704f05cc1209e62f1f4e7156bf555282e06d61d9d7167a53bf3f92e0132fa6aa630467fe610f69e2cb8c42f8f63c48101af966cf20df125a17d0897c1c384f501cf1f36e13a001c6b59ecf4ac2659f485df2e0f4047db5b3aa347d4623bb52a807a3f81585bf96c1645536066c8ec4beeb87b8a2bd0434780d6c72f897cd60001ba1da5a1729045550e6f641a0a3bd8e075f0c860fc0fc5b80f36"]}]}, @generic="9f49b79cacb1114946dbf759fff7ff49916a5922b2b1a121c55557bd8d256ccd0a232d6dd46d0be3a611e31ad2e1bf2015667be383702bfd049862c13d47dd26f7f3c9d039b51cb68ef85ac8515f2555a5a90b5fa373ceb9ccfb79ce30d969df37f4ea28b0f8f572cb6422d36058d3655f6572f957a4ee8ca2dbc2fc99a6892297f6", @generic="1dbc54459d49b135d3c14899b4e2f317369394cb05aef901ddc36ec96135afa5df8ffe9efafe3227796ddbd356534d6a6baa69c4b6205fd3e7292ffbacaff33d4bb1b0cde7de4d0ececfa0e81cc323de563293c90a7fdf61dc144721a3c6bf087b60b9206bae990e8bb876073ec4c5fab7c783f779cbcee209204346cf52549f2b93ed6c7cf30edacc94517f2a48c0989580cc9365dcee7bb65510fc874f13d91ae4c70c0dcee79154ae9189f40c2ad97dfd6a9c47f6d9be2890907c94339a83137045ff48cbcbfdf77ec8787a27c084745017a4ed2ac63c3cf2cadb226ea00772d2b2be51b9a78721ce467551"]}, @typed={0xc, 0x131, 0x0, 0x0, @u64=0xa909}, @typed={0xfd, 0x11f, 0x0, 0x0, @binary="d4eb26c68a3172bd81f9eb98e767b14a0b7a830c2532192364f5180aeeb91cc9310516968b82509ac80b6c1de006c05fc5bf3c81187af4add8fa68d05ae47ee796f687d9c7f513f67f385a5d66f539bffd2782aab707a03e179afc57ab358a44209ba3e4778313bfd9834b618d8829200912151d870aa4d8b325c198e51661a73114d2b0d40c75ca037431de19d57c64f240bab682c450f4b26378cf4bc72224d61af2b6421abf98b1ef59ba93250707d51e9f411cc715b3bb423b021db7f7489cdb00dd310db07a1d113016d37195be97f39c4629bd3b86843534442151a8939807160f47ccf4eed869a3bead52d71684643e2041a0a13fc3"}, @generic="f95e0bfa6d6647b0875ec9a597b4c10d8f87cc46ee18ea56c7622a054b3b5b356a1606f3523cfe9cf85b58df40bbe6af8e949627e9f6e355b5fa2d7d667484f54d01a082381abe041744ce3b63bd78a1d32c3440380f9bb75c8f341b4e749c89cd8b03d57bac94cb0e0779cfabfc8bc488e31b99d50bf0f0ee9330d699ccf83392e4c03375f06e34d4d35fd4b5d630c7117518f31fbfa3dc16b3203855bd6f08102efdbf99185ed89816552a37d7c628dc4541c98bc5ced335a0efb41eb44bed8bfe4eea6e2426e758f98a9490a1484be4b419ce0fb7fda201f9475af0af68f26151fdcf8b", @nested={0xf2, 0xc9, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0x52}, @nested={0x4, 0x12c}, @generic="6a5ec578ffd9f0651b2912243475f60c2a55dd21a28499a552ae2ee72968bf9ad95ecde26eac31c40beec401ea9a06e6cb15925ba3203c451f70de68e5adc9810b7b24daf20b494855967175be52facb6a815838567bcc02b526e694470f0ffaaec5b72f042084be651954f58df9b125575c8bb9f9004db6a08c58f95220414bf0e51c0cce3b2f2f9954175d08fdf2bb15d3995c4e0e7d9e4bf62f0537b0a876a1b89cf03312acd56c620a4977e825410fd88dadb8ec5141a7de6bf69e146b7278c9fe9a7ebb", @typed={0xc, 0xc8, 0x0, 0x0, @str='skbedit\x00'}, @nested={0x4, 0x66}, @nested={0x4, 0xbd}, @typed={0x8, 0xed, 0x0, 0x0, @u32=0x7}]}, @nested={0x66, 0x90, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xd0}, @generic="d7c9bbf7fa42c6ef3f770766cd4ca64c126ade16e305496529bb47876c5555c80d2acd7d04693d73e01b2fc9bc0383a397a3fe0a6225f942044013b5c049bb635bc6085dea91fd9a3b614cf94abe1288e3603fa414a8"]}, @generic="ad1185e77666c13b95", @nested={0x182, 0x134, 0x0, 0x1, [@typed={0x0, 0x118, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x54}, @generic="ba090d2b540b6dc7a46902bea96131eaee6411be313200c721dd8f851d3adb7050b6d18a5ce1ac9dd1f95270faaa6e146695eca68946f9437cc6ae80e4e3ce3dfbe261a6ccb127aceb19da33b296381da74e531e22e6eb95d51b29f03c54e02a30734bc0329dc74d17770888fb060769a15ed5093c04761cd22be5209f2dc81238a6e75b7f00dcb25f6cdb20e6f72d69e26cc53d18a4e053c473c2df02096625b714c0429ab2b89e12ac6811b873262f62e449a6858d8e35025c94fcbe271c86596f3810", @generic="e1ec40fc0018b68bd1ba655ad53baac62c2dbfb9a76c2d69169382929caebe9b09b5a623bc85321afdbe08635665d72ecfef6c2452f4831ab0e6968c14a083af0685a55d6b111920680bc91808d91ac39dcbc4eec124c3b52778e81637168ebdb9c1212a4525a992d4c371f81c7a41fdb86c0d29820a4fc1cc1d6488a7bc5ce055928a434ccbdb12d474ab8ad847854d17df", @typed={0x8, 0x9b, 0x0, 0x0, @pid}, @typed={0xf, 0x3c, 0x0, 0x0, @str='tunnel_key\x00'}, @nested={0x4, 0x13}, @nested={0x4, 0xe9}]}]}, 0x1bbc}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@deltaction={0x1bc, 0x31, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbbc6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x1bc}}, 0x0) r14 = socket(0x10, 0x803, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x114, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r16, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x7, 0x6, [{0x1, 0xffff, 0x7706, 0x18}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0x40, 0x2, 0x1000}, {0xf, 0x3a1, 0x8, 0x405}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0x11, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x3000}, {0x6, 0xc25a0, 0x3, 0x1000}]}}]}}]}, 0x114}}, 0x24040084) 1.882520928s ago: executing program 1 (id=894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 1.85186828s ago: executing program 4 (id=895): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) pread64(r0, &(0x7f0000000180)=""/59, 0x3b, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 1.849623231s ago: executing program 1 (id=896): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) setgroups(0x0, 0x0) 1.835573242s ago: executing program 1 (id=897): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ipi_raise\x00', r1, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nombcache}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x500082c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000380)="54dd7fc1b172fa99163057848c3d22f01a167f9026c85331b16b53fbd019e8c481eca198207f2c0604c345c558a4fb468a35fe623c07fec95283e8e852e2edbb60d731f9a2ffba60e8d3d18fb742a8d903f87e921a595a7d03624646f48e58b5ed88706b6d367d87bc1a002dff6398de1d287553420d", 0x76}, {0x0}], 0x2) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0xd4}, 0x20000004) 1.709190182s ago: executing program 3 (id=900): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) 1.48196308s ago: executing program 0 (id=903): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='xprtrdma_post_recv\x00', r2, 0x0, 0xfffffffffffffffc}, 0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180), 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x3, 0xd, 0xc9, 0x0, 0x1, 0x0, 0x80, 0x2, 0x5, 0x2, 0x8, 0x6}, 0xe) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x2000000a, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pread64(r7, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000940)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000a00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1ff, @remote}, r9}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r9, 0x10}}, 0x10) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f00000002c0)={0x6, 0x10}) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r7) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/101, 0x65}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005b80)={@loopback, 0x35, r5}) 1.256809608s ago: executing program 2 (id=906): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 988.27795ms ago: executing program 2 (id=907): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) setgroups(0x0, 0x0) 972.921191ms ago: executing program 2 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 971.004781ms ago: executing program 4 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x3c0, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x398, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @loopback, 0xf4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6d, @mcast1, 0x4}}]}, {0x184, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x54d8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "424911db29a68b661fb520e23791129d8b76445290f62f939e70135f84470051"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x170, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 926.168525ms ago: executing program 4 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x1, {0x2}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000918115f0c52daaff9bf1dcadf40a57ab58152000080c576cccb2c99e8d48a31b3d361097228de3dd8f359d3d10dbf783891f2786717205fbca808d863bb906c64eb3e3b6344cf66a220129a144a403927e037b53190cba0d5", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00010010008105000050f1fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d80400000000002c00128009000100626fd9cd000000001c00028008000800ffffff7ff6988e95376deb348843d92d1a4d0800"], 0x4c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 918.251746ms ago: executing program 2 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x8) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r4, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003980)=ANY=[@ANYBLOB="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"/4213], 0x1074}, 0x1, 0x0, 0x0, 0x5}, 0x0) io_setup(0x7f, 0x0) r5 = eventfd(0x8e) r6 = io_uring_setup(0x2678, &(0x7f0000000400)={0x0, 0xf534, 0x40, 0x0, 0x20b, 0x0, r5}) syz_io_uring_setup(0x4001840, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0xffffffff, 0x0, r6}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r7, 0x0) r8 = socket(0x10, 0x2, 0x0) recvmmsg(r8, &(0x7f0000002ec0), 0x0, 0x42, &(0x7f00000001c0)) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x20, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x38}]}}]}, 0x38}}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getqdisc={0x34, 0x26, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0xc}, {0x0, 0x1}, {0x10, 0xfff2}}, [{0x4}, {0x4}, {0xff92}, {0x4}]}, 0x34}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[], [{@euid_eq}]}, 0x2, 0x57a, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) 845.551162ms ago: executing program 3 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 810.865594ms ago: executing program 1 (id=913): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbca, &(0x7f0000002ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc5ae7f57654166e0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000180)={'batadv0\x00', {0x2, 0x0, @multicast2}}) fcntl$notify(r1, 0x402, 0x8000002c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x985201) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000000c0)={r5, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1c, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1cb9c99189819ff4", [0x80, 0x40000087]}}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") pipe2(&(0x7f0000000380), 0x7864af15ae870357) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x50) open(0x0, 0x14927e, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) cachestat(r0, &(0x7f00000002c0)={0x8000000000000001, 0x6}, &(0x7f0000000280), 0x0) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) 721.711301ms ago: executing program 3 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000064b127e31a140000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 668.911506ms ago: executing program 3 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x1, {0x2}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000918115f0c52daaff9bf1dcadf40a57ab58152000080c576cccb2c99e8d48a31b3d361097228de3dd8f359d3d10dbf783891f2786717205fbca808d863bb906c64eb3e3b6344cf66a220129a144a403927e037b53190cba0d5", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00010010008105000050f1fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d80400000000002c00128009000100626fd9cd000000001c00028008000800ffffff7ff6988e95376deb348843d92d1a4d0800"], 0x4c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 551.805685ms ago: executing program 0 (id=916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@discard}, {@auto_da_alloc}, {@resgid}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@nodioread_nolock}]}, 0x1, 0x43a, &(0x7f0000000d80)="$eJzs28tvG0UYAPBv7aQhfSVU5dG0QKAgIh5Jk5ZSIS4gkDiAhASHcgxJWoW6DWqCRKsIAkLliCpxRxyR+As4wQUBJySucEeVKpRLCyejtdeJ7dh51YkL+/tJ287srj3zeWfsmZ1sALk1nP6TROyPiN8jYqCabTxhuPrf7eXFqb+XF6eSKJff+iupnHdreXEqe4uV1+2r7eiJKHyWxNEW5c5fuXphslSauZzlxxYuvj82f+Xqs7MXJ8/PnJ+5NHHmzKmT48+fnniuI3Gmcd0a+mju2JHX3rn+xtTZ6+/+/G1Si78ujg4aXu/gE+Vyh4vrrgN16aSnixVhS4rVbhq9lf4/EMVYvXgD8eqnXa0csKPK5XL5/vaHl8rA/1gS3a4B0B21H/p0/lvbdmnocVe4+VJ1ApTGfTvbqkd6opCd09s0v+2k4Yg4u/TPV+kWO3MfAgCgwffp+OeZVuO/QtTfFzqYraEMRsS9EXEoIk5HxOGIuC+icu4DEfHgFstvXiRZO/4p3NhWYJuUjv9ezNa2Gsd/tdFfDBaz3IFK/L3JudnSzInsMxmJ3r40P75OGT+88tsX7Y7Vj//SLS2/NhbM6nGjp6/xNdOTC5N3EnO9m59EDPW0ij9ZWQlIIuJIRAxt/HZ9rXbOPvXNsXYv2Dj+dXRgnan8dcST1eu/FE3x1yTrr0+O3ROlmRNjtVax1i+/XnuzXfl3FH8HpNd/b8v2vxL/YFK/Xju/9TKu/fF52znNdtv/nuTthn0fTi4sXB6P2JO8Xq10/f6JpvMmVs9P4x853rr/H4rVT+JoRKSN+KGIeDgiHsnq/mhEPBYRx9eJ/6eXH39v+/HvrDT+6S1d/9XEnmje0zpRvPDjdw2FDm4l/vT6n6qkRrI9m/n+20y9tteaAQAA4L+nEBH7IymMrqQLhdHR6t/wH469hdLc/MLT5+Y+uDRdfUZgMHoLtTtdA3X3Q8ezaX0tP9GUP5ndN/6y2F/Jj07Nlaa7HTzk3L42/T/1Z7HbtQN2nOe1IL/0f8gv/R/yS/+H/GrR//u7UQ9g97X6/f+4C/UAdl9T/7fsBzli/g/5pf9Dfun/kEvz/bHxQ/ISEmsSUdjJIl44WG2fd0Ok+Ux0+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//5y947A=") r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x0, {0x0, 0x8, 0xffff, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000003c0)={0xfffffffa, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x3, [{{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @empty}}]}, 0x210) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000000380)="ba748b991a", 0x5) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) membarrier(0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'b', ' *:* ', 'rm\x00'}, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r4], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(r3) 176.098756ms ago: executing program 4 (id=917): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0000230000119078000000000000000000004e200018907804000000030000000300000000000000"], 0x0) 159.167647ms ago: executing program 4 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_usbip_server_init(0x1) unshare(0x2040400) unshare(0x2c020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x9, 0x4, 0x78e, 0x401, 0x7}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) fremovexattr(r3, &(0x7f0000000080)=@random={'system.', '!],)[\x00'}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) socketpair(0x18, 0x80804, 0x1, &(0x7f0000000000)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x247d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 96.045272ms ago: executing program 2 (id=919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) setgroups(0x0, 0x0) 53.647005ms ago: executing program 2 (id=920): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) pread64(r0, &(0x7f0000000180)=""/59, 0x3b, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=921): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ipi_raise\x00', r1, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nombcache}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x500082c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000380)="54dd7fc1b172fa99163057848c3d22f01a167f9026c85331b16b53fbd019e8c481eca198207f2c0604c345c558a4fb468a35fe623c07fec95283e8e852e2edbb60d731f9a2ffba60e8d3d18fb742a8d903f87e921a595a7d03624646f48e58b5ed88706b6d367d87bc1a002dff6398de1d287553420d", 0x76}, {&(0x7f00000017c0)}], 0x2) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0xd4}, 0x20000004) kernel console output (not intermixed with test programs): type=1326 audit(1754967344.618:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4db44ebe9 code=0x7ffc0000 [ 64.938233][ T4529] tipc: Resetting bearer [ 64.974642][ T4529] tipc: Disabling bearer [ 65.003932][ T70] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.020663][ T70] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.030320][ T70] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.043073][ T4555] loop4: detected capacity change from 0 to 512 [ 65.060471][ T70] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.088631][ T4555] EXT4-fs: Ignoring removed bh option [ 65.101580][ T4555] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 65.265611][ T4555] EXT4-fs (loop4): 1 truncate cleaned up [ 65.380268][ T4575] loop0: detected capacity change from 0 to 512 [ 65.430903][ T4575] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.359: bg 0: block 393: padding at end of block bitmap is not set [ 65.448502][ T4575] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 65.459665][ T4575] EXT4-fs (loop0): 2 truncates cleaned up [ 66.976200][ T4600] netlink: 240 bytes leftover after parsing attributes in process `syz.3.370'. [ 67.761067][ T4686] FAULT_INJECTION: forcing a failure. [ 67.761067][ T4686] name failslab, interval 1, probability 0, space 0, times 0 [ 67.773892][ T4686] CPU: 0 UID: 0 PID: 4686 Comm: syz.1.385 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 67.773921][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.773945][ T4686] Call Trace: [ 67.773952][ T4686] [ 67.773960][ T4686] __dump_stack+0x1d/0x30 [ 67.773981][ T4686] dump_stack_lvl+0xe8/0x140 [ 67.774000][ T4686] dump_stack+0x15/0x1b [ 67.774074][ T4686] should_fail_ex+0x265/0x280 [ 67.774093][ T4686] should_failslab+0x8c/0xb0 [ 67.774118][ T4686] kmem_cache_alloc_noprof+0x50/0x310 [ 67.774148][ T4686] ? skb_clone+0x151/0x1f0 [ 67.774228][ T4686] skb_clone+0x151/0x1f0 [ 67.774250][ T4686] __netlink_deliver_tap+0x2c9/0x500 [ 67.774275][ T4686] netlink_unicast+0x66b/0x690 [ 67.774310][ T4686] netlink_sendmsg+0x58b/0x6b0 [ 67.774369][ T4686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.774424][ T4686] __sock_sendmsg+0x145/0x180 [ 67.774465][ T4686] ____sys_sendmsg+0x31e/0x4e0 [ 67.774541][ T4686] ___sys_sendmsg+0x17b/0x1d0 [ 67.774646][ T4686] __x64_sys_sendmsg+0xd4/0x160 [ 67.774693][ T4686] x64_sys_call+0x191e/0x2ff0 [ 67.774713][ T4686] do_syscall_64+0xd2/0x200 [ 67.774743][ T4686] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.774776][ T4686] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.774868][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.774893][ T4686] RIP: 0033:0x7f1d403eebe9 [ 67.774911][ T4686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.774931][ T4686] RSP: 002b:00007f1d3ee4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.774953][ T4686] RAX: ffffffffffffffda RBX: 00007f1d40615fa0 RCX: 00007f1d403eebe9 [ 67.774968][ T4686] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 67.775001][ T4686] RBP: 00007f1d3ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.775014][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.775028][ T4686] R13: 00007f1d40616038 R14: 00007f1d40615fa0 R15: 00007fffe64a60c8 [ 67.775095][ T4686] [ 68.111135][ T4686] vlan2: entered allmulticast mode [ 68.135231][ T4682] loop4: detected capacity change from 0 to 2048 [ 68.175272][ T4682] EXT4-fs mount: 8 callbacks suppressed [ 68.175291][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.600411][ T4743] random: crng reseeded on system resumption [ 68.687335][ T4747] loop0: detected capacity change from 0 to 1024 [ 68.696594][ T4747] EXT4-fs: Ignoring removed orlov option [ 68.702367][ T4747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.715825][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.774151][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.260397][ T4765] tipc: Started in network mode [ 69.265349][ T4765] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 69.272743][ T4765] tipc: Enabled bearer , priority 10 [ 69.282934][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 69.282951][ T29] audit: type=1326 audit(1754967349.128:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.323655][ T29] audit: type=1326 audit(1754967349.128:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.347559][ T29] audit: type=1326 audit(1754967349.128:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.370937][ T29] audit: type=1326 audit(1754967349.128:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.394207][ T29] audit: type=1326 audit(1754967349.128:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.417984][ T29] audit: type=1326 audit(1754967349.128:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.441842][ T29] audit: type=1326 audit(1754967349.128:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.465055][ T29] audit: type=1326 audit(1754967349.138:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.488406][ T29] audit: type=1326 audit(1754967349.138:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 69.511845][ T29] audit: type=1400 audit(1754967349.138:2064): avc: denied { create } for pid=4762 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.603295][ T4773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 69.610657][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.682392][ T4780] FAULT_INJECTION: forcing a failure. [ 69.682392][ T4780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.695895][ T4780] CPU: 0 UID: 0 PID: 4780 Comm: syz.3.404 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 69.695949][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.695962][ T4780] Call Trace: [ 69.695969][ T4780] [ 69.695976][ T4780] __dump_stack+0x1d/0x30 [ 69.696064][ T4780] dump_stack_lvl+0xe8/0x140 [ 69.696084][ T4780] dump_stack+0x15/0x1b [ 69.696116][ T4780] should_fail_ex+0x265/0x280 [ 69.696139][ T4780] should_fail+0xb/0x20 [ 69.696186][ T4780] should_fail_usercopy+0x1a/0x20 [ 69.696210][ T4780] _copy_from_user+0x1c/0xb0 [ 69.696313][ T4780] ___sys_sendmsg+0xc1/0x1d0 [ 69.696350][ T4780] __x64_sys_sendmsg+0xd4/0x160 [ 69.696445][ T4780] x64_sys_call+0x191e/0x2ff0 [ 69.696465][ T4780] do_syscall_64+0xd2/0x200 [ 69.696494][ T4780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.696558][ T4780] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.696601][ T4780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.696641][ T4780] RIP: 0033:0x7fdd622cebe9 [ 69.696656][ T4780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.696675][ T4780] RSP: 002b:00007fdd60d0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.696698][ T4780] RAX: ffffffffffffffda RBX: 00007fdd624f6090 RCX: 00007fdd622cebe9 [ 69.696726][ T4780] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000009 [ 69.696740][ T4780] RBP: 00007fdd60d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 69.696753][ T4780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.696766][ T4780] R13: 00007fdd624f6128 R14: 00007fdd624f6090 R15: 00007ffccc7171f8 [ 69.696787][ T4780] [ 69.964119][ T4778] loop1: detected capacity change from 0 to 1024 [ 70.038313][ T4796] nfs: Unknown parameter 'uçoã' [ 70.100349][ T4778] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.105391][ T4796] SELinux: ebitmap: truncated map [ 70.118088][ T4778] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.133606][ T4796] SELinux: failed to load policy [ 70.149912][ T4778] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.406: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 70.170325][ T4778] EXT4-fs (loop1): no journal found [ 70.210247][ T4778] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 70.287018][ T3382] tipc: Node number set to 9480874 [ 70.659528][ T4822] infiniband syz!: set active [ 70.664297][ T4822] infiniband syz!: added team_slave_0 [ 70.695808][ T4827] process 'syz.1.422' launched '/dev/fd/9' with NULL argv: empty string added [ 70.709136][ T4822] RDS/IB: syz!: added [ 70.713501][ T4822] smc: adding ib device syz! with port count 1 [ 70.725433][ T4822] smc: ib device syz! port 1 has pnetid [ 70.857869][ T4831] loop0: detected capacity change from 0 to 512 [ 70.883452][ T4831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.904775][ T4831] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.926219][ T4831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.944351][ T4838] 9pnet_fd: Insufficient options for proto=fd [ 70.971014][ T4838] loop3: detected capacity change from 0 to 512 [ 70.992587][ T4841] loop0: detected capacity change from 0 to 512 [ 70.996444][ T4838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.015487][ T4838] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.037547][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.047173][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.060660][ T4841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.076367][ T4841] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.093262][ T4823] loop4: detected capacity change from 0 to 1024 [ 71.101867][ T4823] EXT4-fs: Ignoring removed nobh option [ 71.107687][ T4823] EXT4-fs: Ignoring removed bh option [ 71.137881][ T4841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.173285][ T4823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.357949][ T4864] loop1: detected capacity change from 0 to 2048 [ 71.402556][ T4861] loop0: detected capacity change from 0 to 8192 [ 71.412492][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.432'. [ 71.493353][ T4864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 71.517293][ T4864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.554370][ T4864] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 71.567128][ T4864] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.567128][ T4864] [ 71.577010][ T4864] EXT4-fs (loop1): Total free blocks count 0 [ 71.583164][ T4864] EXT4-fs (loop1): Free/Dirty block details [ 71.589248][ T4864] EXT4-fs (loop1): free_blocks=2415919104 [ 71.595121][ T4864] EXT4-fs (loop1): dirty_blocks=32 [ 71.600328][ T4864] EXT4-fs (loop1): Block reservation details [ 71.606408][ T4864] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 71.673437][ T4864] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.433: inline data xattr refers to an external xattr inode [ 71.716675][ T4864] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.433: inline data xattr refers to an external xattr inode [ 71.794198][ T4864] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.433: inline data xattr refers to an external xattr inode [ 71.885043][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.977426][ T4885] loop2: detected capacity change from 0 to 164 [ 72.007025][ T4885] iso9660: Unknown parameter '–' [ 72.086087][ T2992] udevd[2992]: worker [3528] terminated by signal 33 (Unknown signal 33) [ 72.104659][ T2992] udevd[2992]: worker [3528] failed while handling '/devices/virtual/block/loop2' [ 72.130229][ T4897] loop9: detected capacity change from 0 to 7 [ 72.194981][ T4897] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.203012][ T4897] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.210998][ T4897] loop9: unable to read partition table [ 72.267193][ T4897] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 72.267193][ T4897] ) failed (rc=-5) [ 72.268078][ T4185] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.319513][ T4185] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.337135][ T4870] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 72.354851][ T4185] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.375191][ T4185] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.407959][ T4185] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.357463][ T4931] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.428172][ T4931] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.487385][ T4931] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.537338][ T4931] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.707769][ T2600] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.717802][ T2600] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.123206][ T2600] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.213162][ T2600] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.239183][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.260336][ T4943] loop3: detected capacity change from 0 to 1024 [ 74.306683][ T4943] EXT4-fs: Ignoring removed orlov option [ 74.363220][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.447898][ T4948] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 74.481743][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 74.481762][ T29] audit: type=1400 audit(1754967354.328:2156): avc: denied { read open } for pid=4941 comm="syz.3.457" path="/108/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.511326][ T29] audit: type=1400 audit(1754967354.328:2157): avc: denied { write } for pid=4941 comm="syz.3.457" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.562558][ T4952] loop4: detected capacity change from 0 to 2048 [ 74.657598][ T4952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.691020][ T4962] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.457: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 74.730657][ T4952] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.776734][ T29] audit: type=1326 audit(1754967354.598:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.800768][ T29] audit: type=1326 audit(1754967354.598:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.821533][ T4952] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 74.825842][ T29] audit: type=1326 audit(1754967354.598:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.836707][ T4952] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.836707][ T4952] [ 74.836728][ T4952] EXT4-fs (loop4): Total free blocks count 0 [ 74.860546][ T29] audit: type=1326 audit(1754967354.598:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.870218][ T4952] EXT4-fs (loop4): Free/Dirty block details [ 74.870233][ T4952] EXT4-fs (loop4): free_blocks=2415919104 [ 74.870250][ T4952] EXT4-fs (loop4): dirty_blocks=32 [ 74.870261][ T4952] EXT4-fs (loop4): Block reservation details [ 74.870271][ T4952] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 74.929526][ T29] audit: type=1326 audit(1754967354.598:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.953386][ T29] audit: type=1326 audit(1754967354.608:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.977338][ T29] audit: type=1326 audit(1754967354.608:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 74.977375][ T29] audit: type=1326 audit(1754967354.608:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 75.039953][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 75.042447][ T4973] netlink: 200 bytes leftover after parsing attributes in process `syz.0.469'. [ 75.069937][ T4952] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.458: inline data xattr refers to an external xattr inode [ 75.070416][ T4952] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.458: inline data xattr refers to an external xattr inode [ 75.070888][ T4952] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.458: inline data xattr refers to an external xattr inode [ 75.071777][ T4952] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.458: inline data xattr refers to an external xattr inode [ 75.296985][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.400533][ T4965] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 75.542818][ T4998] loop1: detected capacity change from 0 to 512 [ 75.696154][ T4998] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 75.704911][ T4998] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.713493][ T4998] EXT4-fs (loop1): 1 orphan inode deleted [ 75.747664][ T5001] tipc: Started in network mode [ 75.752702][ T5001] tipc: Node identity 42ebd318b78b, cluster identity 4711 [ 75.760204][ T5001] tipc: Enabled bearer , priority 0 [ 75.837024][ T5005] syzkaller0: entered promiscuous mode [ 75.839022][ T4712] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 75.842813][ T5005] syzkaller0: entered allmulticast mode [ 75.889531][ T4998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.909603][ T5001] tipc: Resetting bearer [ 75.925556][ T4999] tipc: Resetting bearer [ 75.933133][ T4999] tipc: Disabling bearer [ 76.023366][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.135693][ T5019] FAULT_INJECTION: forcing a failure. [ 76.135693][ T5019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.148958][ T5019] CPU: 1 UID: 0 PID: 5019 Comm: syz.2.488 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 76.148991][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.149076][ T5019] Call Trace: [ 76.149084][ T5019] [ 76.149093][ T5019] __dump_stack+0x1d/0x30 [ 76.149117][ T5019] dump_stack_lvl+0xe8/0x140 [ 76.149140][ T5019] dump_stack+0x15/0x1b [ 76.149158][ T5019] should_fail_ex+0x265/0x280 [ 76.149241][ T5019] should_fail+0xb/0x20 [ 76.149259][ T5019] should_fail_usercopy+0x1a/0x20 [ 76.149286][ T5019] _copy_from_user+0x1c/0xb0 [ 76.149318][ T5019] snd_seq_ioctl+0x127/0x2e0 [ 76.149431][ T5019] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 76.149456][ T5019] __se_sys_ioctl+0xcb/0x140 [ 76.149503][ T5019] __x64_sys_ioctl+0x43/0x50 [ 76.149533][ T5019] x64_sys_call+0x1816/0x2ff0 [ 76.149556][ T5019] do_syscall_64+0xd2/0x200 [ 76.149595][ T5019] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.149621][ T5019] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.149672][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.149694][ T5019] RIP: 0033:0x7f8f56c4ebe9 [ 76.149711][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.149797][ T5019] RSP: 002b:00007f8f556af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.149820][ T5019] RAX: ffffffffffffffda RBX: 00007f8f56e75fa0 RCX: 00007f8f56c4ebe9 [ 76.149835][ T5019] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000007 [ 76.149848][ T5019] RBP: 00007f8f556af090 R08: 0000000000000000 R09: 0000000000000000 [ 76.149862][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.149875][ T5019] R13: 00007f8f56e76038 R14: 00007f8f56e75fa0 R15: 00007fff15208458 [ 76.149895][ T5019] [ 76.418058][ T5029] loop3: detected capacity change from 0 to 1024 [ 76.428590][ T5029] EXT4-fs: Ignoring removed oldalloc option [ 76.434705][ T5029] EXT4-fs: Ignoring removed bh option [ 76.466125][ T5029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.552508][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.651716][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 76.839935][ T5082] loop1: detected capacity change from 0 to 1024 [ 76.905130][ T5082] EXT4-fs: Ignoring removed oldalloc option [ 76.911262][ T5082] EXT4-fs: Ignoring removed bh option [ 76.947680][ T5093] pim6reg1: entered promiscuous mode [ 76.953116][ T5093] pim6reg1: entered allmulticast mode [ 76.971637][ T5082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.037568][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.112490][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.141372][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.157004][ T5111] FAULT_INJECTION: forcing a failure. [ 77.157004][ T5111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.170320][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.3.523 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 77.170390][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.170409][ T5111] Call Trace: [ 77.170415][ T5111] [ 77.170423][ T5111] __dump_stack+0x1d/0x30 [ 77.170445][ T5111] dump_stack_lvl+0xe8/0x140 [ 77.170528][ T5111] dump_stack+0x15/0x1b [ 77.170543][ T5111] should_fail_ex+0x265/0x280 [ 77.170563][ T5111] should_fail+0xb/0x20 [ 77.170648][ T5111] should_fail_usercopy+0x1a/0x20 [ 77.170724][ T5111] _copy_to_user+0x20/0xa0 [ 77.170749][ T5111] simple_read_from_buffer+0xb5/0x130 [ 77.170775][ T5111] proc_fail_nth_read+0x10e/0x150 [ 77.170836][ T5111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.170866][ T5111] vfs_read+0x1a8/0x770 [ 77.170890][ T5111] ? __rcu_read_unlock+0x4f/0x70 [ 77.170914][ T5111] ? __fget_files+0x184/0x1c0 [ 77.170943][ T5111] ksys_read+0xda/0x1a0 [ 77.170964][ T5111] __x64_sys_read+0x40/0x50 [ 77.170990][ T5111] x64_sys_call+0x27bc/0x2ff0 [ 77.171072][ T5111] do_syscall_64+0xd2/0x200 [ 77.171112][ T5111] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.171140][ T5111] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.171226][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.171320][ T5111] RIP: 0033:0x7fdd622cd5fc [ 77.171420][ T5111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.171440][ T5111] RSP: 002b:00007fdd60d2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.171464][ T5111] RAX: ffffffffffffffda RBX: 00007fdd624f5fa0 RCX: 00007fdd622cd5fc [ 77.171479][ T5111] RDX: 000000000000000f RSI: 00007fdd60d2f0a0 RDI: 0000000000000006 [ 77.171494][ T5111] RBP: 00007fdd60d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.171507][ T5111] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 77.171561][ T5111] R13: 00007fdd624f6038 R14: 00007fdd624f5fa0 R15: 00007ffccc7171f8 [ 77.171583][ T5111] [ 77.525472][ T5124] netlink: 100 bytes leftover after parsing attributes in process `syz.1.524'. [ 77.737966][ T5146] netlink: 'syz.4.535': attribute type 21 has an invalid length. [ 77.752227][ T5147] 9pnet_fd: Insufficient options for proto=fd [ 78.022300][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 78.058525][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5179 comm=syz.0.549 [ 78.197390][ T5201] FAULT_INJECTION: forcing a failure. [ 78.197390][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 78.210273][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.1.558 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 78.210304][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.210315][ T5201] Call Trace: [ 78.210324][ T5201] [ 78.210332][ T5201] __dump_stack+0x1d/0x30 [ 78.210352][ T5201] dump_stack_lvl+0xe8/0x140 [ 78.210369][ T5201] dump_stack+0x15/0x1b [ 78.210384][ T5201] should_fail_ex+0x265/0x280 [ 78.210403][ T5201] should_failslab+0x8c/0xb0 [ 78.210429][ T5201] kmem_cache_alloc_noprof+0x50/0x310 [ 78.210467][ T5201] ? vm_area_dup+0x33/0x2c0 [ 78.210498][ T5201] vm_area_dup+0x33/0x2c0 [ 78.210529][ T5201] __split_vma+0xe9/0x650 [ 78.210554][ T5201] ? obj_cgroup_charge_account+0x122/0x1a0 [ 78.210588][ T5201] ? should_fail_ex+0x30/0x280 [ 78.210609][ T5201] vms_gather_munmap_vmas+0x17a/0x7b0 [ 78.210636][ T5201] ? mas_find+0x608/0x700 [ 78.210664][ T5201] mmap_region+0x53f/0x1630 [ 78.210692][ T5201] ? mntput+0x4b/0x80 [ 78.210734][ T5201] do_mmap+0x9b3/0xbe0 [ 78.210769][ T5201] do_shmat+0x59a/0x790 [ 78.210804][ T5201] __x64_sys_shmat+0x61/0xb0 [ 78.210835][ T5201] x64_sys_call+0x2f0a/0x2ff0 [ 78.210858][ T5201] do_syscall_64+0xd2/0x200 [ 78.210883][ T5201] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.210908][ T5201] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.210933][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.210956][ T5201] RIP: 0033:0x7f1d403eebe9 [ 78.210971][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.210987][ T5201] RSP: 002b:00007f1d3ee4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 78.211008][ T5201] RAX: ffffffffffffffda RBX: 00007f1d40615fa0 RCX: 00007f1d403eebe9 [ 78.211019][ T5201] RDX: 000000000000400c RSI: 0000200000ff1000 RDI: 0000000000000000 [ 78.211031][ T5201] RBP: 00007f1d3ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.211044][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.211057][ T5201] R13: 00007f1d40616038 R14: 00007f1d40615fa0 R15: 00007fffe64a60c8 [ 78.211077][ T5201] [ 78.523119][ T5208] ref_ctr_offset mismatch. inode: 0x2e7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 78.574583][ T5210] loop0: detected capacity change from 0 to 1024 [ 78.582457][ T5210] EXT4-fs: Ignoring removed oldalloc option [ 78.588876][ T5210] EXT4-fs: Ignoring removed bh option [ 78.607692][ T5210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.633217][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.996116][ T5239] rdma_op ffff88813dd24d80 conn xmit_rdma 0000000000000000 [ 79.099857][ T5242] loop2: detected capacity change from 0 to 1024 [ 79.126224][ T5242] EXT4-fs: Ignoring removed oldalloc option [ 79.132228][ T5242] EXT4-fs: Ignoring removed bh option [ 79.188632][ T5242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.244426][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.279312][ T5250] loop3: detected capacity change from 0 to 256 [ 79.305428][ T5250] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.382962][ T5250] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.391783][ T5250] FAT-fs (loop3): Filesystem has been set read-only [ 79.491676][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 79.491693][ T29] audit: type=1400 audit(1754967359.338:2657): avc: denied { connect } for pid=5257 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.523123][ T29] audit: type=1326 audit(1754967359.338:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.547628][ T29] audit: type=1326 audit(1754967359.338:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.572012][ T29] audit: type=1326 audit(1754967359.338:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.596037][ T29] audit: type=1326 audit(1754967359.368:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.620087][ T29] audit: type=1326 audit(1754967359.368:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.643956][ T29] audit: type=1326 audit(1754967359.368:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.667796][ T29] audit: type=1326 audit(1754967359.368:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.691493][ T29] audit: type=1326 audit(1754967359.368:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.715058][ T29] audit: type=1326 audit(1754967359.368:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd622cebe9 code=0x7ffc0000 [ 79.804779][ T5270] netlink: 'syz.1.584': attribute type 21 has an invalid length. [ 79.812554][ T5270] netlink: 128 bytes leftover after parsing attributes in process `syz.1.584'. [ 79.832176][ T5272] loop2: detected capacity change from 0 to 2048 [ 79.835736][ T5270] netlink: 'syz.1.584': attribute type 6 has an invalid length. [ 79.846509][ T5270] netlink: 3 bytes leftover after parsing attributes in process `syz.1.584'. [ 79.901578][ T5272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 80.053746][ T5272] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.076313][ T5279] Falling back ldisc for ttyS3. [ 80.102093][ T5272] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 80.114796][ T5272] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.114796][ T5272] [ 80.124645][ T5272] EXT4-fs (loop2): Total free blocks count 0 [ 80.130669][ T5272] EXT4-fs (loop2): Free/Dirty block details [ 80.136693][ T5272] EXT4-fs (loop2): free_blocks=2415919104 [ 80.142433][ T5272] EXT4-fs (loop2): dirty_blocks=32 [ 80.147763][ T5272] EXT4-fs (loop2): Block reservation details [ 80.153849][ T5272] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 80.242780][ T5300] pim6reg1: entered promiscuous mode [ 80.248233][ T5300] pim6reg1: entered allmulticast mode [ 80.328838][ T5272] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.585: inline data xattr refers to an external xattr inode [ 80.361707][ T5272] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.585: inline data xattr refers to an external xattr inode [ 80.440858][ T5307] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.686898][ T5307] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.767118][ T5307] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.856726][ T5307] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.011449][ T4717] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.261373][ T4717] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.293615][ T5308] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.585: inline data xattr refers to an external xattr inode [ 81.316945][ T4717] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.378839][ T5319] bond1: entered allmulticast mode [ 81.390079][ T5309] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.585: inline data xattr refers to an external xattr inode [ 81.416629][ T5319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.434994][ T5319] bridge0: port 3(bond1) entered blocking state [ 81.441518][ T5319] bridge0: port 3(bond1) entered disabled state [ 81.482421][ T5329] loop0: detected capacity change from 0 to 1024 [ 81.507672][ T5299] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1244 with error 28 [ 81.523003][ T5319] bond1: entered promiscuous mode [ 81.529902][ T5329] EXT4-fs: Ignoring removed oldalloc option [ 81.536473][ T5329] EXT4-fs: Ignoring removed bh option [ 81.566987][ T5319] bridge0: port 3(bond1) entered blocking state [ 81.573811][ T5319] bridge0: port 3(bond1) entered forwarding state [ 81.581729][ T4717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.606231][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.696989][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.934004][ T5341] loop1: detected capacity change from 0 to 512 [ 81.980274][ T5341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.991175][ T5346] ªªªªª: renamed from vlan1 (while UP) [ 82.045260][ T5341] EXT4-fs (loop1): 1 truncate cleaned up [ 82.053843][ T5341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.084606][ T5341] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.179687][ T5365] macvtap0: refused to change device tx_queue_len [ 82.196896][ T5341] netlink: 830 bytes leftover after parsing attributes in process `syz.1.603'. [ 82.210573][ T5369] loop0: detected capacity change from 0 to 164 [ 82.260677][ T5341] pim6reg1: entered promiscuous mode [ 82.266404][ T5341] pim6reg1: entered allmulticast mode [ 82.278659][ T5375] loop3: detected capacity change from 0 to 2048 [ 82.294820][ T3423] bridge0: port 3(bond1) entered disabled state [ 82.318591][ T5382] loop0: detected capacity change from 0 to 1024 [ 82.330880][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 82.346029][ T5375] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.348092][ T5382] EXT4-fs: Ignoring removed oldalloc option [ 82.367649][ T5382] EXT4-fs: Ignoring removed bh option [ 82.402768][ T5375] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 82.415680][ T5375] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.415680][ T5375] [ 82.427411][ T5375] EXT4-fs (loop3): Total free blocks count 0 [ 82.434152][ T5375] EXT4-fs (loop3): Free/Dirty block details [ 82.440128][ T5375] EXT4-fs (loop3): free_blocks=2415919104 [ 82.446092][ T5375] EXT4-fs (loop3): dirty_blocks=160 [ 82.447095][ T5382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.451419][ T5375] EXT4-fs (loop3): Block reservation details [ 82.451434][ T5375] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 82.453918][ T5395] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.610: inline data xattr refers to an external xattr inode [ 82.506205][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.509303][ T5375] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.610: inline data xattr refers to an external xattr inode [ 82.534791][ T5375] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.610: inline data xattr refers to an external xattr inode [ 82.552290][ T5375] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.610: inline data xattr refers to an external xattr inode [ 82.599383][ T5402] FAULT_INJECTION: forcing a failure. [ 82.599383][ T5402] name failslab, interval 1, probability 0, space 0, times 0 [ 82.612827][ T5402] CPU: 0 UID: 0 PID: 5402 Comm: syz.2.618 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 82.612861][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.612875][ T5402] Call Trace: [ 82.612883][ T5402] [ 82.612892][ T5402] __dump_stack+0x1d/0x30 [ 82.612916][ T5402] dump_stack_lvl+0xe8/0x140 [ 82.613053][ T5402] dump_stack+0x15/0x1b [ 82.613071][ T5402] should_fail_ex+0x265/0x280 [ 82.613091][ T5402] should_failslab+0x8c/0xb0 [ 82.613175][ T5402] __kvmalloc_node_noprof+0x123/0x4e0 [ 82.613206][ T5402] ? file_tty_write+0x19e/0x690 [ 82.613237][ T5402] file_tty_write+0x19e/0x690 [ 82.613405][ T5402] tty_write+0x25/0x30 [ 82.613442][ T5402] iter_file_splice_write+0x666/0x9e0 [ 82.613475][ T5402] ? __pfx_iter_file_splice_write+0x10/0x10 [ 82.613496][ T5402] direct_splice_actor+0x153/0x2a0 [ 82.613520][ T5402] ? shmem_mmap+0x31/0xb0 [ 82.613540][ T5402] splice_direct_to_actor+0x30f/0x680 [ 82.613564][ T5402] ? __pfx_direct_splice_actor+0x10/0x10 [ 82.613596][ T5402] do_splice_direct+0xda/0x150 [ 82.613618][ T5402] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 82.613647][ T5402] do_sendfile+0x380/0x650 [ 82.613675][ T5402] __x64_sys_sendfile64+0x105/0x150 [ 82.613768][ T5402] x64_sys_call+0x2bb0/0x2ff0 [ 82.613787][ T5402] do_syscall_64+0xd2/0x200 [ 82.613815][ T5402] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.613905][ T5402] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.613934][ T5402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.613959][ T5402] RIP: 0033:0x7f8f56c4ebe9 [ 82.613978][ T5402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.614012][ T5402] RSP: 002b:00007f8f556af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 82.614034][ T5402] RAX: ffffffffffffffda RBX: 00007f8f56e75fa0 RCX: 00007f8f56c4ebe9 [ 82.614046][ T5402] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 82.614058][ T5402] RBP: 00007f8f556af090 R08: 0000000000000000 R09: 0000000000000000 [ 82.614072][ T5402] R10: 00008000fffefffe R11: 0000000000000246 R12: 0000000000000001 [ 82.614086][ T5402] R13: 00007f8f56e76038 R14: 00007f8f56e75fa0 R15: 00007fff15208458 [ 82.614106][ T5402] [ 82.899610][ T5410] macvtap0: refused to change device tx_queue_len [ 83.007135][ T5417] loop0: detected capacity change from 0 to 2048 [ 83.052455][ T5390] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 83.066720][ T4183] loop0: p3 p4 < > [ 83.072546][ T4183] loop0: p3 size 57344 extends beyond EOD, truncated [ 83.083988][ T5417] loop0: p3 p4 < > [ 83.088364][ T5417] loop0: p3 size 57344 extends beyond EOD, truncated [ 83.184694][ T5425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5425 comm=syz.2.627 [ 83.236922][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.244302][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.310799][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.322037][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.381435][ T3423] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.399626][ T3423] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.432000][ T3423] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.458664][ T3423] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.662563][ T5454] FAULT_INJECTION: forcing a failure. [ 83.662563][ T5454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.675984][ T5454] CPU: 1 UID: 0 PID: 5454 Comm: syz.0.638 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 83.676015][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.676026][ T5454] Call Trace: [ 83.676033][ T5454] [ 83.676040][ T5454] __dump_stack+0x1d/0x30 [ 83.676064][ T5454] dump_stack_lvl+0xe8/0x140 [ 83.676106][ T5454] dump_stack+0x15/0x1b [ 83.676123][ T5454] should_fail_ex+0x265/0x280 [ 83.676146][ T5454] should_fail+0xb/0x20 [ 83.676167][ T5454] should_fail_usercopy+0x1a/0x20 [ 83.676193][ T5454] _copy_from_iter+0xcf/0xe40 [ 83.676280][ T5454] ? __build_skb_around+0x1a0/0x200 [ 83.676317][ T5454] ? __alloc_skb+0x223/0x320 [ 83.676377][ T5454] netlink_sendmsg+0x471/0x6b0 [ 83.676413][ T5454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.676473][ T5454] __sock_sendmsg+0x145/0x180 [ 83.676497][ T5454] ____sys_sendmsg+0x31e/0x4e0 [ 83.676523][ T5454] ___sys_sendmsg+0x17b/0x1d0 [ 83.676572][ T5454] __x64_sys_sendmsg+0xd4/0x160 [ 83.676600][ T5454] x64_sys_call+0x191e/0x2ff0 [ 83.676691][ T5454] do_syscall_64+0xd2/0x200 [ 83.676729][ T5454] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.676758][ T5454] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.676784][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.676865][ T5454] RIP: 0033:0x7f772867ebe9 [ 83.676880][ T5454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.676901][ T5454] RSP: 002b:00007f77270df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.676922][ T5454] RAX: ffffffffffffffda RBX: 00007f77288a5fa0 RCX: 00007f772867ebe9 [ 83.676987][ T5454] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 83.677002][ T5454] RBP: 00007f77270df090 R08: 0000000000000000 R09: 0000000000000000 [ 83.677016][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.677031][ T5454] R13: 00007f77288a6038 R14: 00007f77288a5fa0 R15: 00007ffdeff64468 [ 83.677050][ T5454] [ 84.060657][ T5459] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 84.122582][ T5465] FAULT_INJECTION: forcing a failure. [ 84.122582][ T5465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.136104][ T5465] CPU: 1 UID: 0 PID: 5465 Comm: syz.4.642 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 84.136131][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.136148][ T5465] Call Trace: [ 84.136153][ T5465] [ 84.136161][ T5465] __dump_stack+0x1d/0x30 [ 84.136256][ T5465] dump_stack_lvl+0xe8/0x140 [ 84.136322][ T5465] dump_stack+0x15/0x1b [ 84.136337][ T5465] should_fail_ex+0x265/0x280 [ 84.136356][ T5465] should_fail+0xb/0x20 [ 84.136371][ T5465] should_fail_usercopy+0x1a/0x20 [ 84.136398][ T5465] _copy_to_user+0x20/0xa0 [ 84.136446][ T5465] simple_read_from_buffer+0xb5/0x130 [ 84.136465][ T5465] proc_fail_nth_read+0x10e/0x150 [ 84.136489][ T5465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.136557][ T5465] vfs_read+0x1a8/0x770 [ 84.136575][ T5465] ? __rcu_read_unlock+0x4f/0x70 [ 84.136594][ T5465] ? __fget_files+0x184/0x1c0 [ 84.136614][ T5465] ? kmem_cache_free+0xdf/0x300 [ 84.136660][ T5465] ksys_read+0xda/0x1a0 [ 84.136680][ T5465] __x64_sys_read+0x40/0x50 [ 84.136772][ T5465] x64_sys_call+0x27bc/0x2ff0 [ 84.136791][ T5465] do_syscall_64+0xd2/0x200 [ 84.136815][ T5465] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.136837][ T5465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.136905][ T5465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.136924][ T5465] RIP: 0033:0x7fe4db44d5fc [ 84.136944][ T5465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.136960][ T5465] RSP: 002b:00007fe4d9eaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.136979][ T5465] RAX: ffffffffffffffda RBX: 00007fe4db675fa0 RCX: 00007fe4db44d5fc [ 84.136990][ T5465] RDX: 000000000000000f RSI: 00007fe4d9eaf0a0 RDI: 0000000000000004 [ 84.137001][ T5465] RBP: 00007fe4d9eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 84.137012][ T5465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.137083][ T5465] R13: 00007fe4db676038 R14: 00007fe4db675fa0 R15: 00007fffe6df3288 [ 84.137099][ T5465] [ 84.399631][ T5471] loop4: detected capacity change from 0 to 2048 [ 84.429161][ T5471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 84.489418][ T5471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.533366][ T5471] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 84.546184][ T5471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.546184][ T5471] [ 84.556312][ T5471] EXT4-fs (loop4): Total free blocks count 0 [ 84.562332][ T5471] EXT4-fs (loop4): Free/Dirty block details [ 84.568353][ T5471] EXT4-fs (loop4): free_blocks=2415919104 [ 84.574206][ T5471] EXT4-fs (loop4): dirty_blocks=32 [ 84.579478][ T5471] EXT4-fs (loop4): Block reservation details [ 84.582992][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 84.583007][ T29] audit: type=1400 audit(1754967364.428:2865): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.585912][ T5471] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 84.620171][ T5483] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.645: inline data xattr refers to an external xattr inode [ 84.650525][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 84.702346][ T5485] loop2: detected capacity change from 0 to 512 [ 84.712488][ T5485] ext4: Unknown parameter 'fowner<00000000000000060928' [ 84.719771][ T5471] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.645: inline data xattr refers to an external xattr inode [ 84.737151][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 84.766332][ T5485] loop2: detected capacity change from 0 to 512 [ 84.774452][ T5483] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.645: inline data xattr refers to an external xattr inode [ 84.833660][ T5471] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.645: inline data xattr refers to an external xattr inode [ 84.972358][ T29] audit: type=1326 audit(1754967364.818:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.2.653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f56c4ebe9 code=0x0 [ 85.019276][ T5482] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 85.176649][ T29] audit: type=1400 audit(1754967365.028:2867): avc: denied { create } for pid=5510 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.290326][ T29] audit: type=1400 audit(1754967365.128:2868): avc: denied { getopt } for pid=5510 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.310608][ T29] audit: type=1400 audit(1754967365.128:2869): avc: denied { read } for pid=5510 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.414587][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 85.467589][ T5520] FAULT_INJECTION: forcing a failure. [ 85.467589][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 85.480300][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz.4.662 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 85.480401][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.480419][ T5520] Call Trace: [ 85.480424][ T5520] [ 85.480432][ T5520] __dump_stack+0x1d/0x30 [ 85.480476][ T5520] dump_stack_lvl+0xe8/0x140 [ 85.480493][ T5520] dump_stack+0x15/0x1b [ 85.480513][ T5520] should_fail_ex+0x265/0x280 [ 85.480532][ T5520] should_failslab+0x8c/0xb0 [ 85.480559][ T5520] kmem_cache_alloc_node_noprof+0x57/0x320 [ 85.480592][ T5520] ? __alloc_skb+0x101/0x320 [ 85.480663][ T5520] __alloc_skb+0x101/0x320 [ 85.480775][ T5520] netlink_alloc_large_skb+0xba/0xf0 [ 85.480804][ T5520] netlink_sendmsg+0x3cf/0x6b0 [ 85.480887][ T5520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.480907][ T5520] __sock_sendmsg+0x145/0x180 [ 85.480947][ T5520] ____sys_sendmsg+0x31e/0x4e0 [ 85.480975][ T5520] ___sys_sendmsg+0x17b/0x1d0 [ 85.481010][ T5520] __x64_sys_sendmsg+0xd4/0x160 [ 85.481039][ T5520] x64_sys_call+0x191e/0x2ff0 [ 85.481062][ T5520] do_syscall_64+0xd2/0x200 [ 85.481144][ T5520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.481175][ T5520] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.481201][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.481224][ T5520] RIP: 0033:0x7fe4db44ebe9 [ 85.481242][ T5520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.481354][ T5520] RSP: 002b:00007fe4d9e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.481455][ T5520] RAX: ffffffffffffffda RBX: 00007fe4db676090 RCX: 00007fe4db44ebe9 [ 85.481469][ T5520] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 85.481481][ T5520] RBP: 00007fe4d9e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 85.481556][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.481569][ T5520] R13: 00007fe4db676128 R14: 00007fe4db676090 R15: 00007fffe6df3288 [ 85.481602][ T5520] [ 85.700745][ T5522] loop0: detected capacity change from 0 to 512 [ 85.738341][ T5522] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 85.749982][ T5522] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.663: invalid indirect mapped block 256 (level 1) [ 85.764562][ T5522] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.663: invalid indirect mapped block 2683928664 (level 1) [ 85.833112][ T5522] EXT4-fs (loop0): 1 truncate cleaned up [ 85.839367][ T29] audit: type=1326 audit(1754967365.688:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4db44ebe9 code=0x7ffc0000 [ 85.865071][ T5522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.901436][ T29] audit: type=1326 audit(1754967365.688:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4db44ebe9 code=0x7ffc0000 [ 85.925256][ T29] audit: type=1326 audit(1754967365.688:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4db44ebe9 code=0x7ffc0000 [ 85.948928][ T29] audit: type=1326 audit(1754967365.688:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4db44ebe9 code=0x7ffc0000 [ 85.972721][ T29] audit: type=1326 audit(1754967365.688:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4db44ebe9 code=0x7ffc0000 [ 86.010767][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.047360][ T5542] loop2: detected capacity change from 0 to 2048 [ 86.079138][ T5542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 86.117960][ T5542] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.144673][ T5542] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 86.157307][ T5542] EXT4-fs (loop2): This should not happen!! Data will be lost [ 86.157307][ T5542] [ 86.167179][ T5542] EXT4-fs (loop2): Total free blocks count 0 [ 86.173184][ T5542] EXT4-fs (loop2): Free/Dirty block details [ 86.179168][ T5542] EXT4-fs (loop2): free_blocks=2415919104 [ 86.183994][ T5548] pimreg: entered allmulticast mode [ 86.185366][ T5542] EXT4-fs (loop2): dirty_blocks=160 [ 86.196016][ T5542] EXT4-fs (loop2): Block reservation details [ 86.202209][ T5542] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 86.202614][ T5548] pimreg: left allmulticast mode [ 86.225897][ T5554] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.669: inline data xattr refers to an external xattr inode [ 86.260763][ T5555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 86.355071][ T5542] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.669: inline data xattr refers to an external xattr inode [ 86.388164][ T5557] loop0: detected capacity change from 0 to 2048 [ 86.420910][ T5554] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.669: inline data xattr refers to an external xattr inode [ 86.471654][ T5557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 86.495808][ T5557] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.511518][ T5542] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.669: inline data xattr refers to an external xattr inode [ 86.512893][ T5557] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 86.539529][ T5557] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.539529][ T5557] [ 86.549650][ T5557] EXT4-fs (loop0): Total free blocks count 0 [ 86.555933][ T5557] EXT4-fs (loop0): Free/Dirty block details [ 86.562208][ T5557] EXT4-fs (loop0): free_blocks=2415919104 [ 86.567977][ T5557] EXT4-fs (loop0): dirty_blocks=160 [ 86.573720][ T5557] EXT4-fs (loop0): Block reservation details [ 86.579936][ T5557] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 86.723000][ T5557] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.674: inline data xattr refers to an external xattr inode [ 86.819096][ T5567] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.674: inline data xattr refers to an external xattr inode [ 86.846662][ T5566] loop3: detected capacity change from 0 to 2048 [ 86.872229][ T5557] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.674: inline data xattr refers to an external xattr inode [ 86.894226][ T5553] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 86.920138][ T5557] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.674: inline data xattr refers to an external xattr inode [ 86.935528][ T5566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 86.957018][ T5566] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.982423][ T5576] FAULT_INJECTION: forcing a failure. [ 86.982423][ T5576] name failslab, interval 1, probability 0, space 0, times 0 [ 86.992004][ T5566] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 86.995737][ T5576] CPU: 1 UID: 0 PID: 5576 Comm: syz.4.679 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 86.995840][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.995853][ T5576] Call Trace: [ 86.995859][ T5576] [ 86.995866][ T5576] __dump_stack+0x1d/0x30 [ 86.995888][ T5576] dump_stack_lvl+0xe8/0x140 [ 86.995908][ T5576] dump_stack+0x15/0x1b [ 86.995924][ T5576] should_fail_ex+0x265/0x280 [ 86.996000][ T5576] should_failslab+0x8c/0xb0 [ 86.996045][ T5576] kmem_cache_alloc_noprof+0x50/0x310 [ 86.996072][ T5576] ? skb_clone+0x151/0x1f0 [ 86.996095][ T5576] skb_clone+0x151/0x1f0 [ 86.996118][ T5576] __netlink_deliver_tap+0x2c9/0x500 [ 86.996143][ T5576] netlink_unicast+0x66b/0x690 [ 86.996255][ T5576] netlink_sendmsg+0x58b/0x6b0 [ 86.996324][ T5576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.996345][ T5576] __sock_sendmsg+0x145/0x180 [ 86.996442][ T5576] ____sys_sendmsg+0x31e/0x4e0 [ 86.996465][ T5576] ___sys_sendmsg+0x17b/0x1d0 [ 86.996496][ T5576] __x64_sys_sendmsg+0xd4/0x160 [ 86.996593][ T5576] x64_sys_call+0x191e/0x2ff0 [ 86.996614][ T5576] do_syscall_64+0xd2/0x200 [ 86.996647][ T5576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.996709][ T5576] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.996733][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.996755][ T5576] RIP: 0033:0x7fe4db44ebe9 [ 86.996792][ T5576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.996811][ T5576] RSP: 002b:00007fe4d9eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.996832][ T5576] RAX: ffffffffffffffda RBX: 00007fe4db675fa0 RCX: 00007fe4db44ebe9 [ 86.996845][ T5576] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 86.996858][ T5576] RBP: 00007fe4d9eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 86.996871][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.996886][ T5576] R13: 00007fe4db676038 R14: 00007fe4db675fa0 R15: 00007fffe6df3288 [ 86.996904][ T5576] [ 87.180006][ T5579] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.676: inline data xattr refers to an external xattr inode [ 87.181461][ T5566] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.181461][ T5566] [ 87.205347][ T5579] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.676: inline data xattr refers to an external xattr inode [ 87.205874][ T5566] EXT4-fs (loop3): Total free blocks count 0 [ 87.240891][ T5579] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.676: inline data xattr refers to an external xattr inode [ 87.241681][ T5566] EXT4-fs (loop3): Free/Dirty block details [ 87.284389][ T5566] EXT4-fs (loop3): free_blocks=2415919104 [ 87.286624][ T5579] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.676: inline data xattr refers to an external xattr inode [ 87.290502][ T5566] EXT4-fs (loop3): dirty_blocks=160 [ 87.310804][ T5566] EXT4-fs (loop3): Block reservation details [ 87.317165][ T5566] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 87.694207][ T5591] loop2: detected capacity change from 0 to 128 [ 88.050480][ T5593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.149195][ T5593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.189356][ T5593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.577669][ T5593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.850978][ T5564] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 88.879837][ T4717] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912151][ T4717] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.924774][ T5578] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 88.954569][ T4717] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.003432][ T4717] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603951][ T5609] FAULT_INJECTION: forcing a failure. [ 89.603951][ T5609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.617357][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz.0.689 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 89.617396][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.617410][ T5609] Call Trace: [ 89.617418][ T5609] [ 89.617426][ T5609] __dump_stack+0x1d/0x30 [ 89.617447][ T5609] dump_stack_lvl+0xe8/0x140 [ 89.617516][ T5609] dump_stack+0x15/0x1b [ 89.617646][ T5609] should_fail_ex+0x265/0x280 [ 89.617732][ T5609] should_fail+0xb/0x20 [ 89.617753][ T5609] should_fail_usercopy+0x1a/0x20 [ 89.617788][ T5609] _copy_from_user+0x1c/0xb0 [ 89.617823][ T5609] __se_sys_mount+0x10d/0x2e0 [ 89.617966][ T5609] ? fput+0x8f/0xc0 [ 89.617999][ T5609] ? ksys_write+0x192/0x1a0 [ 89.618028][ T5609] __x64_sys_mount+0x67/0x80 [ 89.618051][ T5609] x64_sys_call+0x2b4d/0x2ff0 [ 89.618125][ T5609] do_syscall_64+0xd2/0x200 [ 89.618156][ T5609] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.618184][ T5609] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.618212][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.618232][ T5609] RIP: 0033:0x7f772867ebe9 [ 89.618309][ T5609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.618358][ T5609] RSP: 002b:00007f77270df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.618378][ T5609] RAX: ffffffffffffffda RBX: 00007f77288a5fa0 RCX: 00007f772867ebe9 [ 89.618422][ T5609] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 89.618497][ T5609] RBP: 00007f77270df090 R08: 0000200000000080 R09: 0000000000000000 [ 89.618509][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.618521][ T5609] R13: 00007f77288a6038 R14: 00007f77288a5fa0 R15: 00007ffdeff64468 [ 89.618569][ T5609] [ 89.838786][ T5611] loop3: detected capacity change from 0 to 2048 [ 89.979511][ T5611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 90.025799][ T5611] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.042857][ T5611] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 90.055406][ T5611] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.055406][ T5611] [ 90.065273][ T5611] EXT4-fs (loop3): Total free blocks count 0 [ 90.071478][ T5611] EXT4-fs (loop3): Free/Dirty block details [ 90.077901][ T5611] EXT4-fs (loop3): free_blocks=2415919104 [ 90.083905][ T5611] EXT4-fs (loop3): dirty_blocks=32 [ 90.089158][ T5611] EXT4-fs (loop3): Block reservation details [ 90.095373][ T5611] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 90.153131][ T5611] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.690: inline data xattr refers to an external xattr inode [ 90.217720][ T5611] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.690: inline data xattr refers to an external xattr inode [ 90.262399][ T5611] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.690: inline data xattr refers to an external xattr inode [ 90.308439][ T5627] pim6reg1: entered promiscuous mode [ 90.314167][ T5627] pim6reg1: entered allmulticast mode [ 90.360575][ T5634] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.690: inline data xattr refers to an external xattr inode [ 90.378223][ T5631] FAULT_INJECTION: forcing a failure. [ 90.378223][ T5631] name failslab, interval 1, probability 0, space 0, times 0 [ 90.391060][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz.4.698 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 90.391095][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.391109][ T5631] Call Trace: [ 90.391116][ T5631] [ 90.391124][ T5631] __dump_stack+0x1d/0x30 [ 90.391147][ T5631] dump_stack_lvl+0xe8/0x140 [ 90.391233][ T5631] dump_stack+0x15/0x1b [ 90.391315][ T5631] should_fail_ex+0x265/0x280 [ 90.391340][ T5631] should_failslab+0x8c/0xb0 [ 90.391369][ T5631] __kmalloc_noprof+0xa5/0x3e0 [ 90.391430][ T5631] ? alloc_trace_uprobe+0x2f/0x1e0 [ 90.391453][ T5631] alloc_trace_uprobe+0x2f/0x1e0 [ 90.391476][ T5631] ? create_local_trace_uprobe+0x91/0x2c0 [ 90.391503][ T5631] create_local_trace_uprobe+0xb5/0x2c0 [ 90.391530][ T5631] perf_uprobe_init+0xc0/0x150 [ 90.391620][ T5631] perf_uprobe_event_init+0xc4/0x140 [ 90.391644][ T5631] perf_try_init_event+0xd6/0x540 [ 90.391674][ T5631] ? perf_event_alloc+0xb1c/0x1740 [ 90.391751][ T5631] perf_event_alloc+0xb27/0x1740 [ 90.391788][ T5631] __se_sys_perf_event_open+0x615/0x11c0 [ 90.391817][ T5631] ? __rcu_read_unlock+0x4f/0x70 [ 90.391898][ T5631] __x64_sys_perf_event_open+0x67/0x80 [ 90.391925][ T5631] x64_sys_call+0x7bd/0x2ff0 [ 90.391948][ T5631] do_syscall_64+0xd2/0x200 [ 90.391985][ T5631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.392012][ T5631] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.392036][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.392059][ T5631] RIP: 0033:0x7fe4db44ebe9 [ 90.392132][ T5631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.392153][ T5631] RSP: 002b:00007fe4d9eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 90.392175][ T5631] RAX: ffffffffffffffda RBX: 00007fe4db675fa0 RCX: 00007fe4db44ebe9 [ 90.392187][ T5631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 90.392199][ T5631] RBP: 00007fe4d9eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 90.392210][ T5631] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 90.392308][ T5631] R13: 00007fe4db676038 R14: 00007fe4db675fa0 R15: 00007fffe6df3288 [ 90.392327][ T5631] [ 90.392334][ T5631] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 90.628946][ T5636] loop4: detected capacity change from 0 to 736 [ 90.681877][ T5613] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 90.684136][ T5636] iso9660: Unknown parameter '' [ 90.746275][ T5640] loop1: detected capacity change from 0 to 2048 [ 90.795705][ T5640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 90.859002][ T5640] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.898726][ T5640] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 90.911311][ T5640] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.911311][ T5640] [ 90.921117][ T5640] EXT4-fs (loop1): Total free blocks count 0 [ 90.927151][ T5640] EXT4-fs (loop1): Free/Dirty block details [ 90.933067][ T5640] EXT4-fs (loop1): free_blocks=2415919104 [ 90.939142][ T5640] EXT4-fs (loop1): dirty_blocks=32 [ 90.939161][ T5640] EXT4-fs (loop1): Block reservation details [ 90.939174][ T5640] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 90.969584][ T5654] loop0: detected capacity change from 0 to 1024 [ 90.979642][ T5654] EXT4-fs: Ignoring removed oldalloc option [ 90.979679][ T5654] EXT4-fs: Ignoring removed bh option [ 91.023901][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 91.023920][ T29] audit: type=1400 audit(1754967370.868:2993): avc: denied { read } for pid=5657 comm="syz.3.703" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.023961][ T29] audit: type=1400 audit(1754967370.868:2994): avc: denied { open } for pid=5657 comm="syz.3.703" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.023989][ T29] audit: type=1400 audit(1754967370.868:2995): avc: denied { ioctl } for pid=5657 comm="syz.3.703" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.024020][ T29] audit: type=1400 audit(1754967370.868:2996): avc: denied { append } for pid=5657 comm="syz.3.703" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.027919][ T5654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.032293][ T5662] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.700: inline data xattr refers to an external xattr inode [ 91.033353][ T5662] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.700: inline data xattr refers to an external xattr inode [ 91.034652][ T5662] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.700: inline data xattr refers to an external xattr inode [ 91.043275][ T5662] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.700: inline data xattr refers to an external xattr inode [ 91.047354][ T5663] netlink: 'syz.4.705': attribute type 25 has an invalid length. [ 91.051773][ T5663] random: crng reseeded on system resumption [ 91.052340][ T29] audit: type=1400 audit(1754967370.898:2997): avc: denied { write } for pid=5651 comm="syz.4.705" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.056299][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.216321][ T29] audit: type=1400 audit(1754967371.028:2998): avc: denied { write } for pid=5657 comm="syz.3.703" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.443685][ T29] audit: type=1326 audit(1754967371.288:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 91.486645][ T29] audit: type=1326 audit(1754967371.318:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 91.510051][ T29] audit: type=1326 audit(1754967371.318:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 91.525630][ T5655] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 91.533496][ T29] audit: type=1326 audit(1754967371.318:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772867ebe9 code=0x7ffc0000 [ 91.690354][ T5681] FAULT_INJECTION: forcing a failure. [ 91.690354][ T5681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.703850][ T5681] CPU: 0 UID: 0 PID: 5681 Comm: syz.1.712 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 91.703882][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.703895][ T5681] Call Trace: [ 91.703903][ T5681] [ 91.703912][ T5681] __dump_stack+0x1d/0x30 [ 91.703964][ T5681] dump_stack_lvl+0xe8/0x140 [ 91.704004][ T5681] dump_stack+0x15/0x1b [ 91.704021][ T5681] should_fail_ex+0x265/0x280 [ 91.704043][ T5681] should_fail+0xb/0x20 [ 91.704060][ T5681] should_fail_usercopy+0x1a/0x20 [ 91.704083][ T5681] _copy_from_user+0x1c/0xb0 [ 91.704183][ T5681] __sys_bpf+0x178/0x7b0 [ 91.704215][ T5681] __x64_sys_bpf+0x41/0x50 [ 91.704303][ T5681] x64_sys_call+0x2aea/0x2ff0 [ 91.704325][ T5681] do_syscall_64+0xd2/0x200 [ 91.704350][ T5681] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.704375][ T5681] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.704421][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.704443][ T5681] RIP: 0033:0x7f1d403eebe9 [ 91.704459][ T5681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.704477][ T5681] RSP: 002b:00007f1d3ee4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.704509][ T5681] RAX: ffffffffffffffda RBX: 00007f1d40615fa0 RCX: 00007f1d403eebe9 [ 91.704528][ T5681] RDX: 0000000000000048 RSI: 00002000000008c0 RDI: 0000000000000000 [ 91.704541][ T5681] RBP: 00007f1d3ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.704561][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.704574][ T5681] R13: 00007f1d40616038 R14: 00007f1d40615fa0 R15: 00007fffe64a60c8 [ 91.704592][ T5681] [ 91.929371][ T5691] tipc: Enabled bearer , priority 0 [ 91.937249][ T5691] syzkaller0: entered promiscuous mode [ 91.942922][ T5691] syzkaller0: entered allmulticast mode [ 91.973099][ T5694] wireguard0: entered promiscuous mode [ 91.979042][ T5694] wireguard0: entered allmulticast mode [ 92.041014][ T5695] macvtap0: refused to change device tx_queue_len [ 92.044606][ T5703] loop2: detected capacity change from 0 to 1024 [ 92.049466][ T5691] tipc: Resetting bearer [ 92.096325][ T5703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.114232][ T5690] tipc: Resetting bearer [ 92.125615][ T5690] tipc: Disabling bearer [ 92.220512][ T5710] IPv6: Can't replace route, no match found [ 92.305919][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.315442][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.440257][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.557197][ T5724] IPv6: Can't replace route, no match found [ 92.660285][ T5712] loop4: detected capacity change from 0 to 32768 [ 92.716957][ T5712] loop4: p1 p3 < > [ 92.880619][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 92.895540][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 93.121666][ T5757] loop4: detected capacity change from 0 to 8192 [ 93.792439][ T5776] FAULT_INJECTION: forcing a failure. [ 93.792439][ T5776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.805651][ T5776] CPU: 1 UID: 0 PID: 5776 Comm: syz.2.748 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 93.805682][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.805694][ T5776] Call Trace: [ 93.805700][ T5776] [ 93.805708][ T5776] __dump_stack+0x1d/0x30 [ 93.805732][ T5776] dump_stack_lvl+0xe8/0x140 [ 93.805796][ T5776] dump_stack+0x15/0x1b [ 93.805848][ T5776] should_fail_ex+0x265/0x280 [ 93.805893][ T5776] should_fail+0xb/0x20 [ 93.805912][ T5776] should_fail_usercopy+0x1a/0x20 [ 93.805979][ T5776] _copy_from_user+0x1c/0xb0 [ 93.806010][ T5776] __sys_bind+0x106/0x2a0 [ 93.806041][ T5776] __x64_sys_bind+0x3f/0x50 [ 93.806067][ T5776] x64_sys_call+0x2b6e/0x2ff0 [ 93.806125][ T5776] do_syscall_64+0xd2/0x200 [ 93.806148][ T5776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.806172][ T5776] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.806221][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.806241][ T5776] RIP: 0033:0x7f8f56c4ebe9 [ 93.806258][ T5776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.806291][ T5776] RSP: 002b:00007f8f556af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 93.806311][ T5776] RAX: ffffffffffffffda RBX: 00007f8f56e75fa0 RCX: 00007f8f56c4ebe9 [ 93.806325][ T5776] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 93.806375][ T5776] RBP: 00007f8f556af090 R08: 0000000000000000 R09: 0000000000000000 [ 93.806387][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.806398][ T5776] R13: 00007f8f56e76038 R14: 00007f8f56e75fa0 R15: 00007fff15208458 [ 93.806415][ T5776] [ 94.104796][ T5799] FAULT_INJECTION: forcing a failure. [ 94.104796][ T5799] name failslab, interval 1, probability 0, space 0, times 0 [ 94.117966][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.3.758 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 94.118000][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.118066][ T5799] Call Trace: [ 94.118073][ T5799] [ 94.118081][ T5799] __dump_stack+0x1d/0x30 [ 94.118105][ T5799] dump_stack_lvl+0xe8/0x140 [ 94.118127][ T5799] dump_stack+0x15/0x1b [ 94.118182][ T5799] should_fail_ex+0x265/0x280 [ 94.118206][ T5799] should_failslab+0x8c/0xb0 [ 94.118234][ T5799] kmem_cache_alloc_node_noprof+0x57/0x320 [ 94.118298][ T5799] ? __alloc_skb+0x101/0x320 [ 94.118335][ T5799] __alloc_skb+0x101/0x320 [ 94.118369][ T5799] netlink_alloc_large_skb+0xba/0xf0 [ 94.118405][ T5799] netlink_sendmsg+0x3cf/0x6b0 [ 94.118443][ T5799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.118513][ T5799] __sock_sendmsg+0x145/0x180 [ 94.118618][ T5799] ____sys_sendmsg+0x345/0x4e0 [ 94.118702][ T5799] ___sys_sendmsg+0x17b/0x1d0 [ 94.118737][ T5799] __sys_sendmmsg+0x178/0x300 [ 94.118771][ T5799] __x64_sys_sendmmsg+0x57/0x70 [ 94.118867][ T5799] x64_sys_call+0x1c4a/0x2ff0 [ 94.118890][ T5799] do_syscall_64+0xd2/0x200 [ 94.118918][ T5799] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.118942][ T5799] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.119022][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.119046][ T5799] RIP: 0033:0x7fdd622cebe9 [ 94.119133][ T5799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.119186][ T5799] RSP: 002b:00007fdd60d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.119223][ T5799] RAX: ffffffffffffffda RBX: 00007fdd624f5fa0 RCX: 00007fdd622cebe9 [ 94.119237][ T5799] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 94.119296][ T5799] RBP: 00007fdd60d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.119321][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.119392][ T5799] R13: 00007fdd624f6038 R14: 00007fdd624f5fa0 R15: 00007ffccc7171f8 [ 94.119412][ T5799] [ 94.349776][ T2955] kernel write not supported for file /327/attr/exec (pid: 2955 comm: kworker/0:2) [ 94.405893][ T5809] netlink: 256 bytes leftover after parsing attributes in process `syz.3.761'. [ 94.417982][ T5809] netlink: 10 bytes leftover after parsing attributes in process `syz.3.761'. [ 94.506184][ T5825] macvtap0: refused to change device tx_queue_len [ 94.556893][ T5830] loop2: detected capacity change from 0 to 1024 [ 94.576287][ T5830] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 94.588755][ T5837] FAULT_INJECTION: forcing a failure. [ 94.588755][ T5837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.601896][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz.0.772 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 94.601925][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.601936][ T5837] Call Trace: [ 94.601942][ T5837] [ 94.601950][ T5837] __dump_stack+0x1d/0x30 [ 94.601972][ T5837] dump_stack_lvl+0xe8/0x140 [ 94.602005][ T5837] dump_stack+0x15/0x1b [ 94.602021][ T5837] should_fail_ex+0x265/0x280 [ 94.602045][ T5837] should_fail+0xb/0x20 [ 94.602063][ T5837] should_fail_usercopy+0x1a/0x20 [ 94.602085][ T5837] _copy_from_user+0x1c/0xb0 [ 94.602144][ T5837] perf_event_query_prog_array+0xad/0x250 [ 94.602249][ T5837] perf_ioctl+0x53c/0x12e0 [ 94.602282][ T5837] ? ioctl_has_perm+0x289/0x2a0 [ 94.602314][ T5837] ? do_vfs_ioctl+0x866/0xe10 [ 94.602360][ T5837] ? selinux_file_ioctl+0x308/0x3a0 [ 94.602382][ T5837] ? __fget_files+0x184/0x1c0 [ 94.602430][ T5837] ? __pfx_perf_ioctl+0x10/0x10 [ 94.602524][ T5837] __se_sys_ioctl+0xcb/0x140 [ 94.602559][ T5837] __x64_sys_ioctl+0x43/0x50 [ 94.602593][ T5837] x64_sys_call+0x1816/0x2ff0 [ 94.602681][ T5837] do_syscall_64+0xd2/0x200 [ 94.602707][ T5837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.602729][ T5837] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.602752][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.602835][ T5837] RIP: 0033:0x7f772867ebe9 [ 94.602852][ T5837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.602870][ T5837] RSP: 002b:00007f77270df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.602891][ T5837] RAX: ffffffffffffffda RBX: 00007f77288a5fa0 RCX: 00007f772867ebe9 [ 94.602905][ T5837] RDX: 0000200000000080 RSI: 00000000c008240a RDI: 0000000000000003 [ 94.602918][ T5837] RBP: 00007f77270df090 R08: 0000000000000000 R09: 0000000000000000 [ 94.602976][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.602989][ T5837] R13: 00007f77288a6038 R14: 00007f77288a5fa0 R15: 00007ffdeff64468 [ 94.603050][ T5837] [ 94.616086][ T5830] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.828369][ T5830] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.770: iget: special inode unallocated [ 94.841518][ T5830] EXT4-fs (loop2): Remounting filesystem read-only [ 94.848158][ T5830] EXT4-fs (loop2): no journal found [ 94.853439][ T5830] EXT4-fs (loop2): can't get journal size [ 94.859614][ T5830] EXT4-fs (loop2): filesystem is read-only [ 94.866025][ T5830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.893092][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.041347][ T5860] IPv6: Can't replace route, no match found [ 95.315584][ T5882] FAULT_INJECTION: forcing a failure. [ 95.315584][ T5882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.329779][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.1.791 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 95.329812][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.329826][ T5882] Call Trace: [ 95.329834][ T5882] [ 95.329877][ T5882] __dump_stack+0x1d/0x30 [ 95.329898][ T5882] dump_stack_lvl+0xe8/0x140 [ 95.329921][ T5882] dump_stack+0x15/0x1b [ 95.329941][ T5882] should_fail_ex+0x265/0x280 [ 95.329966][ T5882] should_fail+0xb/0x20 [ 95.330066][ T5882] should_fail_usercopy+0x1a/0x20 [ 95.330086][ T5882] _copy_from_user+0x1c/0xb0 [ 95.330120][ T5882] __copy_msghdr+0x244/0x300 [ 95.330148][ T5882] ___sys_sendmsg+0x109/0x1d0 [ 95.330208][ T5882] __x64_sys_sendmsg+0xd4/0x160 [ 95.330239][ T5882] x64_sys_call+0x191e/0x2ff0 [ 95.330259][ T5882] do_syscall_64+0xd2/0x200 [ 95.330284][ T5882] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.330342][ T5882] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.330370][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.330395][ T5882] RIP: 0033:0x7f1d403eebe9 [ 95.330438][ T5882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.330461][ T5882] RSP: 002b:00007f1d3ee4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.330485][ T5882] RAX: ffffffffffffffda RBX: 00007f1d40615fa0 RCX: 00007f1d403eebe9 [ 95.330501][ T5882] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000005 [ 95.330569][ T5882] RBP: 00007f1d3ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.330581][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.330592][ T5882] R13: 00007f1d40616038 R14: 00007f1d40615fa0 R15: 00007fffe64a60c8 [ 95.330619][ T5882] [ 95.556908][ T5884] loop4: detected capacity change from 0 to 2048 [ 95.627785][ T5884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 95.644800][ T5884] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.661109][ T5884] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 95.673768][ T5884] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.673768][ T5884] [ 95.683460][ T5884] EXT4-fs (loop4): Total free blocks count 0 [ 95.689500][ T5884] EXT4-fs (loop4): Free/Dirty block details [ 95.695486][ T5884] EXT4-fs (loop4): free_blocks=2415919104 [ 95.701218][ T5884] EXT4-fs (loop4): dirty_blocks=32 [ 95.706383][ T5884] EXT4-fs (loop4): Block reservation details [ 95.712413][ T5884] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 95.802950][ T5900] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.792: inline data xattr refers to an external xattr inode [ 95.824011][ T5899] loop1: detected capacity change from 0 to 512 [ 95.832158][ T5899] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.852664][ T5899] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.795: bg 0: block 248: padding at end of block bitmap is not set [ 95.901715][ T5902] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.792: inline data xattr refers to an external xattr inode [ 95.925188][ T5899] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.795: Failed to acquire dquot type 1 [ 95.981063][ T5907] loop3: detected capacity change from 0 to 1024 [ 95.994385][ T5899] EXT4-fs (loop1): 1 truncate cleaned up [ 96.029329][ T5907] EXT4-fs: Ignoring removed oldalloc option [ 96.035558][ T5907] EXT4-fs: Ignoring removed bh option [ 96.073874][ T5884] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.792: inline data xattr refers to an external xattr inode [ 96.111069][ T5907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.131669][ T5900] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.792: inline data xattr refers to an external xattr inode [ 96.343506][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.371770][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.440798][ T5899] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.795: iget: bad i_size value: 360287970189639690 [ 96.465197][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.487816][ T5925] FAULT_INJECTION: forcing a failure. [ 96.487816][ T5925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.501154][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.3.804 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 96.501229][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.501242][ T5925] Call Trace: [ 96.501250][ T5925] [ 96.501259][ T5925] __dump_stack+0x1d/0x30 [ 96.501347][ T5925] dump_stack_lvl+0xe8/0x140 [ 96.501368][ T5925] dump_stack+0x15/0x1b [ 96.501387][ T5925] should_fail_ex+0x265/0x280 [ 96.501417][ T5925] should_fail+0xb/0x20 [ 96.501435][ T5925] should_fail_usercopy+0x1a/0x20 [ 96.501457][ T5925] strncpy_from_user+0x25/0x230 [ 96.501496][ T5925] strncpy_from_user_nofault+0x68/0xf0 [ 96.501522][ T5925] bpf_bprintf_prepare+0x88f/0xd90 [ 96.501558][ T5925] ? bpf_trace_run2+0xf5/0x1c0 [ 96.501581][ T5925] bpf_trace_printk+0x84/0x1c0 [ 96.501613][ T5925] ? bpf_trace_run2+0xf5/0x1c0 [ 96.501720][ T5925] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 96.501739][ T5925] bpf_trace_run2+0x104/0x1c0 [ 96.501793][ T5925] ? hash_netport6_ahash_destroy+0x1b7/0x220 [ 96.501827][ T5925] ? hash_netport6_ahash_destroy+0x1b7/0x220 [ 96.501871][ T5925] kfree+0x27b/0x320 [ 96.501897][ T5925] hash_netport6_ahash_destroy+0x1b7/0x220 [ 96.501931][ T5925] hash_netport6_destroy+0x48/0x170 [ 96.502005][ T5925] _destroy_all_sets+0x192/0x220 [ 96.502029][ T5925] ip_set_destroy+0x2ae/0x3e0 [ 96.502051][ T5925] nfnetlink_rcv_msg+0x4c6/0x590 [ 96.502121][ T5925] netlink_rcv_skb+0x120/0x220 [ 96.502212][ T5925] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.502247][ T5925] nfnetlink_rcv+0x16b/0x1690 [ 96.502277][ T5925] ? nlmon_xmit+0x4f/0x60 [ 96.502307][ T5925] ? consume_skb+0x49/0x150 [ 96.502348][ T5925] ? nlmon_xmit+0x4f/0x60 [ 96.502373][ T5925] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 96.502399][ T5925] ? __dev_queue_xmit+0x1200/0x2000 [ 96.502420][ T5925] ? __dev_queue_xmit+0x182/0x2000 [ 96.502586][ T5925] ? ref_tracker_free+0x37d/0x3e0 [ 96.502611][ T5925] ? __netlink_deliver_tap+0x4dc/0x500 [ 96.502713][ T5925] netlink_unicast+0x5c0/0x690 [ 96.502746][ T5925] netlink_sendmsg+0x58b/0x6b0 [ 96.502770][ T5925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.502793][ T5925] __sock_sendmsg+0x145/0x180 [ 96.502879][ T5925] ____sys_sendmsg+0x31e/0x4e0 [ 96.502959][ T5925] ___sys_sendmsg+0x17b/0x1d0 [ 96.502991][ T5925] __x64_sys_sendmsg+0xd4/0x160 [ 96.503040][ T5925] x64_sys_call+0x191e/0x2ff0 [ 96.503061][ T5925] do_syscall_64+0xd2/0x200 [ 96.503088][ T5925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.503182][ T5925] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.503208][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.503230][ T5925] RIP: 0033:0x7fdd622cebe9 [ 96.503249][ T5925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.503270][ T5925] RSP: 002b:00007fdd60d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.503366][ T5925] RAX: ffffffffffffffda RBX: 00007fdd624f5fa0 RCX: 00007fdd622cebe9 [ 96.503381][ T5925] RDX: 0000000000008000 RSI: 0000200000000780 RDI: 0000000000000004 [ 96.503395][ T5925] RBP: 00007fdd60d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.503409][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.503423][ T5925] R13: 00007fdd624f6038 R14: 00007fdd624f5fa0 R15: 00007ffccc7171f8 [ 96.503443][ T5925] [ 96.504204][ T5927] macvtap0: refused to change device tx_queue_len [ 96.574394][ T5895] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 96.798214][ T5934] loop0: detected capacity change from 0 to 512 [ 96.879861][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'. [ 96.923483][ T5934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.938482][ T5940] FAULT_INJECTION: forcing a failure. [ 96.938482][ T5940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.948876][ T5934] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.951870][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.1.811 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 96.951900][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.951912][ T5940] Call Trace: [ 96.951919][ T5940] [ 96.951927][ T5940] __dump_stack+0x1d/0x30 [ 96.951949][ T5940] dump_stack_lvl+0xe8/0x140 [ 96.951969][ T5940] dump_stack+0x15/0x1b [ 96.952047][ T5940] should_fail_ex+0x265/0x280 [ 96.952068][ T5940] should_fail+0xb/0x20 [ 96.952087][ T5940] should_fail_usercopy+0x1a/0x20 [ 96.952150][ T5940] _copy_from_user+0x1c/0xb0 [ 96.952177][ T5940] ___sys_sendmsg+0xc1/0x1d0 [ 96.952210][ T5940] __x64_sys_sendmsg+0xd4/0x160 [ 96.952235][ T5940] x64_sys_call+0x191e/0x2ff0 [ 96.952288][ T5940] do_syscall_64+0xd2/0x200 [ 96.952314][ T5940] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.952338][ T5940] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.952362][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.952438][ T5940] RIP: 0033:0x7f1d403eebe9 [ 96.952455][ T5940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.952473][ T5940] RSP: 002b:00007f1d3ee4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.952544][ T5940] RAX: ffffffffffffffda RBX: 00007f1d40615fa0 RCX: 00007f1d403eebe9 [ 96.952558][ T5940] RDX: 0000000000000000 RSI: 000020000000bf00 RDI: 0000000000000003 [ 96.952570][ T5940] RBP: 00007f1d3ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.952583][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.952595][ T5940] R13: 00007f1d40616038 R14: 00007f1d40615fa0 R15: 00007fffe64a60c8 [ 96.952613][ T5940] [ 97.055101][ T5946] loop3: detected capacity change from 0 to 2048 [ 97.179707][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 97.179726][ T29] audit: type=1400 audit(1754967377.028:3204): avc: denied { read append } for pid=5947 comm="syz.1.816" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.179936][ T5948] pim6reg: left allmulticast mode [ 97.186210][ T29] audit: type=1400 audit(1754967377.028:3205): avc: denied { open } for pid=5947 comm="syz.1.816" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.257735][ T5946] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.276614][ T5946] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 97.289382][ T5946] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.289382][ T5946] [ 97.299184][ T5946] EXT4-fs (loop3): Total free blocks count 0 [ 97.305252][ T5946] EXT4-fs (loop3): Free/Dirty block details [ 97.311379][ T5946] EXT4-fs (loop3): free_blocks=2415919104 [ 97.317453][ T5946] EXT4-fs (loop3): dirty_blocks=32 [ 97.322914][ T5946] EXT4-fs (loop3): Block reservation details [ 97.329049][ T5946] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 97.341801][ T29] audit: type=1326 audit(1754967377.188:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4db44ebe9 code=0x0 [ 97.364665][ T5962] wireguard0: entered promiscuous mode [ 97.364687][ T5962] wireguard0: entered allmulticast mode [ 97.411111][ T5967] macvtap0: refused to change device tx_queue_len [ 97.416235][ T29] audit: type=1400 audit(1754967377.258:3207): avc: denied { write } for pid=5965 comm="syz.1.820" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.441452][ T5946] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.814: inline data xattr refers to an external xattr inode [ 97.460113][ T29] audit: type=1326 audit(1754967377.268:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d403eebe9 code=0x7ffc0000 [ 97.463196][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.483911][ T29] audit: type=1326 audit(1754967377.268:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1d403eebe9 code=0x7ffc0000 [ 97.491289][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.514786][ T29] audit: type=1326 audit(1754967377.268:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d403eebe9 code=0x7ffc0000 [ 97.522340][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.545917][ T29] audit: type=1326 audit(1754967377.268:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d403eebe9 code=0x7ffc0000 [ 97.553363][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.553386][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.553408][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.553430][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.577447][ T29] audit: type=1326 audit(1754967377.268:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d403eebe9 code=0x7ffc0000 [ 97.585649][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.593110][ T29] audit: type=1326 audit(1754967377.268:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d403eebe9 code=0x7ffc0000 [ 97.600528][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.670557][ T3387] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 97.678971][ T5969] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.814: inline data xattr refers to an external xattr inode [ 97.703388][ T5970] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.814: inline data xattr refers to an external xattr inode [ 97.721176][ T5946] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.814: inline data xattr refers to an external xattr inode [ 97.734939][ T3387] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 97.788302][ T5977] pim6reg: entered allmulticast mode [ 97.801486][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.804004][ T5977] pim6reg: left allmulticast mode [ 97.880810][ T5985] loop1: detected capacity change from 0 to 512 [ 97.918685][ T5985] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.972293][ T5985] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.826: Failed to acquire dquot type 1 [ 97.997938][ T5964] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 97.999159][ T5985] EXT4-fs (loop1): 1 truncate cleaned up [ 98.010609][ T5964] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.010609][ T5964] [ 98.055020][ T5996] FAULT_INJECTION: forcing a failure. [ 98.055020][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.068312][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.4.831 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 98.068347][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.068420][ T5996] Call Trace: [ 98.068428][ T5996] [ 98.068436][ T5996] __dump_stack+0x1d/0x30 [ 98.068457][ T5996] dump_stack_lvl+0xe8/0x140 [ 98.068592][ T5996] dump_stack+0x15/0x1b [ 98.068681][ T5996] should_fail_ex+0x265/0x280 [ 98.068705][ T5996] should_fail+0xb/0x20 [ 98.068726][ T5996] should_fail_usercopy+0x1a/0x20 [ 98.068820][ T5996] _copy_from_iter+0xcf/0xe40 [ 98.068853][ T5996] ? alloc_pages_mpol+0x201/0x250 [ 98.068893][ T5996] copy_page_from_iter+0x178/0x2a0 [ 98.068925][ T5996] tun_get_user+0x679/0x2680 [ 98.069017][ T5996] ? ref_tracker_alloc+0x1f2/0x2f0 [ 98.069046][ T5996] tun_chr_write_iter+0x15e/0x210 [ 98.069078][ T5996] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 98.069128][ T5996] vfs_write+0x52a/0x960 [ 98.069159][ T5996] ksys_write+0xda/0x1a0 [ 98.069185][ T5996] __x64_sys_write+0x40/0x50 [ 98.069206][ T5996] x64_sys_call+0x27fe/0x2ff0 [ 98.069274][ T5996] do_syscall_64+0xd2/0x200 [ 98.069305][ T5996] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.069327][ T5996] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.069355][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.069437][ T5996] RIP: 0033:0x7fe4db44d69f [ 98.069496][ T5996] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 98.069526][ T5996] RSP: 002b:00007fe4d9eaf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.069551][ T5996] RAX: ffffffffffffffda RBX: 00007fe4db675fa0 RCX: 00007fe4db44d69f [ 98.069563][ T5996] RDX: 000000000000006e RSI: 0000200000000000 RDI: 00000000000000c8 [ 98.069575][ T5996] RBP: 00007fe4d9eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 98.069586][ T5996] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 98.069600][ T5996] R13: 00007fe4db676038 R14: 00007fe4db675fa0 R15: 00007fffe6df3288 [ 98.069622][ T5996] [ 98.335186][ T5985] EXT4-fs unmount: 4 callbacks suppressed [ 98.335201][ T5985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.437718][ T6003] loop3: detected capacity change from 0 to 2048 [ 98.475758][ T6007] macvtap0: refused to change device tx_queue_len [ 98.486974][ T6003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 98.506732][ T6003] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.534713][ T6003] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 98.547851][ T6003] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.547851][ T6003] [ 98.557722][ T6003] EXT4-fs (loop3): Total free blocks count 0 [ 98.563723][ T6003] EXT4-fs (loop3): Free/Dirty block details [ 98.569676][ T6003] EXT4-fs (loop3): free_blocks=2415919104 [ 98.575810][ T6003] EXT4-fs (loop3): dirty_blocks=32 [ 98.580960][ T6003] EXT4-fs (loop3): Block reservation details [ 98.587110][ T6003] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 98.634382][ T6003] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.833: inline data xattr refers to an external xattr inode [ 98.679326][ T6003] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.833: inline data xattr refers to an external xattr inode [ 98.695260][ T6003] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.833: inline data xattr refers to an external xattr inode [ 98.718596][ T6003] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.833: inline data xattr refers to an external xattr inode [ 99.111885][ T6047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25450 sclass=netlink_route_socket pid=6047 comm=syz.0.848 [ 99.145307][ T6049] macvtap0: refused to change device tx_queue_len [ 99.321187][ T6019] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 99.952715][ T6083] loop1: detected capacity change from 0 to 4096 [ 99.996737][ T6083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.236620][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.392759][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 100.478525][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 100.487744][ T6120] netlink: 108 bytes leftover after parsing attributes in process `syz.4.875'. [ 100.515160][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 100.550311][ T6120] netlink: 108 bytes leftover after parsing attributes in process `syz.4.875'. [ 100.559436][ T6120] netlink: 84 bytes leftover after parsing attributes in process `syz.4.875'. [ 100.655078][ T6128] loop4: detected capacity change from 0 to 1024 [ 100.663750][ T6128] EXT4-fs: inline encryption not supported [ 100.670000][ T6128] EXT4-fs: Ignoring removed bh option [ 100.685640][ T6128] EXT4-fs: Mount option(s) incompatible with ext2 [ 100.780004][ T6130] loop4: detected capacity change from 0 to 1024 [ 100.791429][ T6130] EXT4-fs: Ignoring removed oldalloc option [ 100.797685][ T6130] EXT4-fs: Ignoring removed bh option [ 100.819120][ T6130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.845901][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.924067][ T6142] loop4: detected capacity change from 0 to 1024 [ 100.930858][ T6142] ext4: Unknown parameter 'obj_type' [ 100.944649][ T6142] netlink: 60 bytes leftover after parsing attributes in process `syz.4.883'. [ 100.953748][ T6142] netlink: 55 bytes leftover after parsing attributes in process `syz.4.883'. [ 100.971385][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.984965][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.009577][ T6148] macvtap0: refused to change device tx_queue_len [ 101.107237][ T6160] syzkaller0: entered allmulticast mode [ 101.113124][ T6160] syzkaller0: entered promiscuous mode [ 101.119464][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 101.134488][ T6160] loop4: detected capacity change from 0 to 1024 [ 101.157297][ T6160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.176040][ T6160] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.185976][ T6159] syzkaller0: left promiscuous mode [ 101.191392][ T6159] syzkaller0: left allmulticast mode [ 101.208046][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.242775][ T6167] macvtap0: refused to change device tx_queue_len [ 101.302578][ T6173] loop1: detected capacity change from 0 to 2048 [ 101.335969][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 101.353186][ T6173] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.368636][ T6173] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 101.381486][ T6173] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.381486][ T6173] [ 101.391477][ T6173] EXT4-fs (loop1): Total free blocks count 0 [ 101.397623][ T6173] EXT4-fs (loop1): Free/Dirty block details [ 101.403587][ T6173] EXT4-fs (loop1): free_blocks=2415919104 [ 101.409626][ T6173] EXT4-fs (loop1): dirty_blocks=32 [ 101.414889][ T6173] EXT4-fs (loop1): Block reservation details [ 101.421130][ T6173] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 101.456537][ T6185] FAULT_INJECTION: forcing a failure. [ 101.456537][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 101.469400][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.2.901 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 101.469433][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.469447][ T6185] Call Trace: [ 101.469454][ T6185] [ 101.469462][ T6185] __dump_stack+0x1d/0x30 [ 101.469483][ T6185] dump_stack_lvl+0xe8/0x140 [ 101.469585][ T6185] dump_stack+0x15/0x1b [ 101.469605][ T6185] should_fail_ex+0x265/0x280 [ 101.469699][ T6185] should_failslab+0x8c/0xb0 [ 101.469729][ T6185] kmem_cache_alloc_noprof+0x50/0x310 [ 101.469786][ T6185] ? vm_area_alloc+0x2c/0xb0 [ 101.469954][ T6185] vm_area_alloc+0x2c/0xb0 [ 101.469984][ T6185] create_init_stack_vma+0x28/0x390 [ 101.470028][ T6185] alloc_bprm+0x2b9/0x350 [ 101.470052][ T6185] do_execveat_common+0x12e/0x750 [ 101.470133][ T6185] __x64_sys_execve+0x5c/0x70 [ 101.470195][ T6185] x64_sys_call+0x2716/0x2ff0 [ 101.470215][ T6185] do_syscall_64+0xd2/0x200 [ 101.470239][ T6185] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.470280][ T6185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.470311][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.470337][ T6185] RIP: 0033:0x7f8f56c4ebe9 [ 101.470355][ T6185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.470414][ T6185] RSP: 002b:00007f8f556af038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 101.470434][ T6185] RAX: ffffffffffffffda RBX: 00007f8f56e75fa0 RCX: 00007f8f56c4ebe9 [ 101.470446][ T6185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.470460][ T6185] RBP: 00007f8f556af090 R08: 0000000000000000 R09: 0000000000000000 [ 101.470475][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.470490][ T6185] R13: 00007f8f56e76038 R14: 00007f8f56e75fa0 R15: 00007fff15208458 [ 101.470514][ T6185] [ 101.480524][ T6173] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.897: inline data xattr refers to an external xattr inode [ 101.694871][ T6192] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.897: inline data xattr refers to an external xattr inode [ 101.767704][ T6197] loop2: detected capacity change from 0 to 2048 [ 101.783782][ T6189] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.897: inline data xattr refers to an external xattr inode [ 101.803064][ T6197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.816094][ T6173] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.897: inline data xattr refers to an external xattr inode [ 101.832084][ T6197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.871550][ T6206] FAULT_INJECTION: forcing a failure. [ 101.871550][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.884904][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.2.906 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 101.884937][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.884952][ T6206] Call Trace: [ 101.885012][ T6206] [ 101.885022][ T6206] __dump_stack+0x1d/0x30 [ 101.885043][ T6206] dump_stack_lvl+0xe8/0x140 [ 101.885129][ T6206] dump_stack+0x15/0x1b [ 101.885147][ T6206] should_fail_ex+0x265/0x280 [ 101.885166][ T6206] should_fail+0xb/0x20 [ 101.885191][ T6206] should_fail_usercopy+0x1a/0x20 [ 101.885295][ T6206] _copy_to_user+0x20/0xa0 [ 101.885328][ T6206] simple_read_from_buffer+0xb5/0x130 [ 101.885349][ T6206] proc_fail_nth_read+0x10e/0x150 [ 101.885374][ T6206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.885404][ T6206] vfs_read+0x1a8/0x770 [ 101.885441][ T6206] ? __rcu_read_unlock+0x4f/0x70 [ 101.885462][ T6206] ? __fget_files+0x184/0x1c0 [ 101.885514][ T6206] ksys_read+0xda/0x1a0 [ 101.885541][ T6206] __x64_sys_read+0x40/0x50 [ 101.885567][ T6206] x64_sys_call+0x27bc/0x2ff0 [ 101.885613][ T6206] do_syscall_64+0xd2/0x200 [ 101.885637][ T6206] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.885658][ T6206] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.885687][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.885767][ T6206] RIP: 0033:0x7f8f56c4d5fc [ 101.885785][ T6206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.885841][ T6206] RSP: 002b:00007f8f556af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.885866][ T6206] RAX: ffffffffffffffda RBX: 00007f8f56e75fa0 RCX: 00007f8f56c4d5fc [ 101.885881][ T6206] RDX: 000000000000000f RSI: 00007f8f556af0a0 RDI: 0000000000000008 [ 101.885896][ T6206] RBP: 00007f8f556af090 R08: 0000000000000000 R09: 0000000000000000 [ 101.885909][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.885921][ T6206] R13: 00007f8f56e76038 R14: 00007f8f56e75fa0 R15: 00007fff15208458 [ 101.885940][ T6206] [ 102.070098][ T6183] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 102.168949][ T6212] macvtap0: refused to change device tx_queue_len [ 102.241175][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 102.241192][ T29] audit: type=1400 audit(1754967382.088:3499): avc: denied { create } for pid=6215 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 102.283048][ T6216] loop2: detected capacity change from 0 to 128 [ 102.295060][ T29] audit: type=1400 audit(1754967382.138:3500): avc: denied { mounton } for pid=6215 comm="syz.2.911" path="/162/file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.312359][ T6216] syz.2.911: attempt to access beyond end of device [ 102.312359][ T6216] loop2: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 102.318653][ T29] audit: type=1400 audit(1754967382.138:3501): avc: denied { mount } for pid=6215 comm="syz.2.911" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 102.332383][ T6216] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 102.355765][ T29] audit: type=1400 audit(1754967382.148:3502): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.384199][ T6216] syz.2.911: attempt to access beyond end of device [ 102.384199][ T6216] loop2: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 102.397691][ T6216] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 102.438509][ T29] audit: type=1400 audit(1754967382.288:3503): avc: denied { write } for pid=6215 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 102.470627][ T6216] syz.2.911: attempt to access beyond end of device [ 102.470627][ T6216] loop2: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 102.484015][ T6216] Buffer I/O error on dev loop2, logical block 139, lost async page write [ 102.514393][ T6216] syz.2.911: attempt to access beyond end of device [ 102.514393][ T6216] loop2: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 102.527980][ T6216] Buffer I/O error on dev loop2, logical block 140, lost async page write [ 102.552596][ T6225] loop0: detected capacity change from 0 to 512 [ 102.570502][ T6216] syz.2.911: attempt to access beyond end of device [ 102.570502][ T6216] loop2: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 102.584193][ T6216] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 102.603795][ T6225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.614003][ T6225] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 102.622049][ T6216] syz.2.911: attempt to access beyond end of device [ 102.622049][ T6216] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 102.636057][ T6216] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 102.682600][ T29] audit: type=1400 audit(1754967382.508:3504): avc: denied { read } for pid=6224 comm="syz.0.916" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.706389][ T29] audit: type=1400 audit(1754967382.508:3505): avc: denied { open } for pid=6224 comm="syz.0.916" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.730798][ T29] audit: type=1400 audit(1754967382.508:3506): avc: denied { create } for pid=6224 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.730960][ T6227] loop1: detected capacity change from 0 to 4096 [ 102.750738][ T29] audit: type=1400 audit(1754967382.518:3507): avc: denied { create } for pid=6224 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.784702][ T6216] syz.2.911: attempt to access beyond end of device [ 102.784702][ T6216] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 102.798672][ T6216] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 102.807475][ T29] audit: type=1400 audit(1754967382.608:3508): avc: denied { open } for pid=6213 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.825960][ T6216] syz.2.911: attempt to access beyond end of device [ 102.825960][ T6216] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 102.841273][ T6216] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 102.850317][ T6216] syz.2.911: attempt to access beyond end of device [ 102.850317][ T6216] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 102.861216][ T6227] EXT4-fs (loop1): bad geometry: first data block 60416 is beyond end of filesystem (512) [ 102.864034][ T6216] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 102.890891][ T6216] syz.2.911: attempt to access beyond end of device [ 102.890891][ T6216] loop2: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 102.904597][ T6216] Buffer I/O error on dev loop2, logical block 148, lost async page write [ 102.962174][ T6227] syz.1.913 uses obsolete (PF_INET,SOCK_PACKET) [ 102.978279][ T6234] loop4: detected capacity change from 0 to 128 [ 102.988077][ T6234] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.000655][ T6234] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.033201][ T6234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 103.039850][ T6234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.047605][ T6234] vhci_hcd vhci_hcd.0: Device attached [ 103.053340][ T6238] loop1: detected capacity change from 0 to 2048 [ 103.096130][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.109586][ T6238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.131540][ T6246] loop3: detected capacity change from 0 to 2048 [ 103.144808][ T2955] ================================================================== [ 103.153110][ T2955] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 103.161136][ T2955] [ 103.163478][ T2955] read-write to 0xffff888100481e78 of 8 bytes by task 4183 on cpu 1: [ 103.171572][ T2955] __filemap_add_folio+0x5b9/0x7d0 [ 103.176715][ T2955] filemap_add_folio+0x98/0x1b0 [ 103.181699][ T2955] page_cache_ra_unbounded+0x1f3/0x380 [ 103.187503][ T2955] page_cache_sync_ra+0x256/0x6c0 [ 103.192644][ T2955] filemap_get_pages+0x2d0/0x1150 [ 103.197768][ T2955] filemap_read+0x231/0xa00 [ 103.202282][ T2955] blkdev_read_iter+0x22d/0x2e0 [ 103.207325][ T2955] vfs_read+0x649/0x770 [ 103.211489][ T2955] ksys_read+0xda/0x1a0 [ 103.215829][ T2955] __x64_sys_read+0x40/0x50 [ 103.220336][ T2955] x64_sys_call+0x27bc/0x2ff0 [ 103.225029][ T2955] do_syscall_64+0xd2/0x200 [ 103.229628][ T2955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.235542][ T2955] [ 103.237865][ T2955] read to 0xffff888100481e78 of 8 bytes by task 2955 on cpu 0: [ 103.245843][ T2955] nr_blockdev_pages+0x7e/0xd0 [ 103.250790][ T2955] si_meminfo+0x87/0xd0 [ 103.254983][ T2955] update_defense_level+0x47/0x5c0 [ 103.260206][ T2955] defense_work_handler+0x1f/0x80 [ 103.265335][ T2955] process_scheduled_works+0x4cb/0x9d0 [ 103.270980][ T2955] worker_thread+0x582/0x770 [ 103.275666][ T2955] kthread+0x489/0x510 [ 103.279923][ T2955] ret_from_fork+0xda/0x150 [ 103.284614][ T2955] ret_from_fork_asm+0x1a/0x30 [ 103.289469][ T2955] [ 103.291787][ T2955] value changed: 0x0000000000000005 -> 0x0000000000000006 [ 103.298901][ T2955] [ 103.301227][ T2955] Reported by Kernel Concurrency Sanitizer on: [ 103.307557][ T2955] CPU: 0 UID: 0 PID: 2955 Comm: kworker/0:2 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 103.318768][ T2955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.329010][ T2955] Workqueue: events_long defense_work_handler [ 103.335092][ T2955] ================================================================== [ 103.347920][ T6246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 103.362954][ T6246] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.378378][ T6246] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 103.391068][ T6246] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.391068][ T6246] [ 103.401032][ T6246] EXT4-fs (loop3): Total free blocks count 0 [ 103.407082][ T6246] EXT4-fs (loop3): Free/Dirty block details [ 103.413208][ T6246] EXT4-fs (loop3): free_blocks=2415919104 [ 103.419051][ T6246] EXT4-fs (loop3): dirty_blocks=32 [ 103.424154][ T6246] EXT4-fs (loop3): Block reservation details [ 103.430247][ T6246] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 103.464160][ T6246] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.921: inline data xattr refers to an external xattr inode [ 103.480861][ T6246] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.921: inline data xattr refers to an external xattr inode [ 103.497404][ T6246] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.921: inline data xattr refers to an external xattr inode [ 103.504588][ T3387] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 103.546700][ T6246] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.921: inline data xattr refers to an external xattr inode [ 103.730063][ T6250] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 103.779493][ T6239] vhci_hcd: connection reset by peer [ 103.785388][ T4712] vhci_hcd: stop threads [ 103.789843][ T4712] vhci_hcd: release socket [ 103.794363][ T4712] vhci_hcd: disconnect device [ 103.801445][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.584666][ T3387] usb 9-1: enqueue for inactive port 0 [ 108.590445][ T3387] usb 9-1: enqueue for inactive port 0 [ 108.664879][ T3387] vhci_hcd: vhci_device speed not set