last executing test programs: 3.709224884s ago: executing program 3 (id=2425): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8) 3.617061415s ago: executing program 3 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000003c0)={[{@i_version}, {@mblk_io_submit}, {@norecovery}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") 3.480839577s ago: executing program 3 (id=2431): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 3.440340388s ago: executing program 3 (id=2433): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x40, r4, 0x1, 0x10000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x24, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "837100080000000009000000004000"}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x40}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x2) 2.054892339s ago: executing program 3 (id=2468): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) 1.99063876s ago: executing program 3 (id=2469): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xa, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0xd6503c93e8f44fb2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) 1.491817757s ago: executing program 0 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%pB \x00'}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x325}, 0x14}}, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b80000007000000030000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1438c2, 0x19) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 1.420627708s ago: executing program 0 (id=2482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x7fdf, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) time(0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0xa) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) 1.29866195s ago: executing program 0 (id=2484): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/3412], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) 1.142710862s ago: executing program 4 (id=2486): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0) 1.034878114s ago: executing program 4 (id=2487): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x256) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x404001c}, 0x4000810) 994.231935ms ago: executing program 4 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%pB \x00'}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x325}, 0x14}}, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b80000007000000030000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1438c2, 0x19) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffe, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) 592.020801ms ago: executing program 2 (id=2490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) memfd_create(0x0, 0x3) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x82) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006f3000/0x2000)=nil, 0x2000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 591.827011ms ago: executing program 1 (id=2491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000012"], 0x110}, 0x1, 0x7}, 0x48010) 591.381751ms ago: executing program 1 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x440, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @empty, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x4, 0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}}}}], 0x18}}], 0x1, 0x4000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) fchdir(0xffffffffffffffff) 561.021191ms ago: executing program 4 (id=2493): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000001c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xffffffc0}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c081}, 0x890) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000100)="b9ff030768", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 528.300522ms ago: executing program 1 (id=2494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 497.136152ms ago: executing program 1 (id=2495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x7fdf, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) time(0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0xa) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) 452.921903ms ago: executing program 4 (id=2496): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) 339.035335ms ago: executing program 1 (id=2497): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0) 292.255115ms ago: executing program 2 (id=2498): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xfffffff9}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0xdf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x300, 0x0, 0x0, 0x0, 0x2}, 0x48) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:public_content_rw_t:s0\x00', 0x29, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) write$selinux_load(0xffffffffffffffff, 0x0, 0x2d) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) 260.815256ms ago: executing program 0 (id=2499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 260.223706ms ago: executing program 2 (id=2500): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) bind$packet(r0, &(0x7f0000000100)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) 249.489936ms ago: executing program 1 (id=2501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x54, 0x8800, 0x0, {0x0, 0x6}, {0x0, 0x101}, @ramp={0x6, 0x800, {0x6, 0x3, 0x0, 0x2}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0000e520b99a213c280012800a0001090000850a35"], 0x3}, 0x1, 0x0, 0x0, 0x20000004}, 0x4041) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYBLOB="2180a19c13", @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000001b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) accept$inet(r5, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000001100)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000060000000030a01040000000000000000010000000b00070066696c74657200000900010073797a3100000000340008800c00014080000000000000010c00014000000000000000040c00014000000000000066000c000240fffffffffffff80128000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095", @ANYRESOCT=0x0, @ANYRESDEC=r9, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e21, 0x2, 0x2}, {0x0, 0x1}, {}, 0x0, 0x3, 0x0, 0x0, 0x9833bf88d1b218f5}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x1, 0x7}}, 0xe8) 201.423136ms ago: executing program 2 (id=2502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000012"], 0x110}, 0x1, 0x7}, 0x48010) 136.281247ms ago: executing program 2 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) 136.001738ms ago: executing program 2 (id=2504): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) 110.231518ms ago: executing program 0 (id=2505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f00000000c0)) semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010001fff000000200000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00200000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x10434, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084) 92.305238ms ago: executing program 4 (id=2506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r3, r4, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2507): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ack_lvl+0xe8/0x140 [ 162.076745][ T9274] dump_stack+0x15/0x1b [ 162.076766][ T9274] should_fail_ex+0x265/0x280 [ 162.076869][ T9274] should_fail+0xb/0x20 [ 162.076913][ T9274] should_fail_usercopy+0x1a/0x20 [ 162.077011][ T9274] _copy_from_user+0x1c/0xb0 [ 162.077038][ T9274] do_ipv6_setsockopt+0x220/0x22e0 [ 162.077070][ T9274] ? kstrtoull+0x111/0x140 [ 162.077105][ T9274] ? __rcu_read_unlock+0x4f/0x70 [ 162.077159][ T9274] ? avc_has_perm_noaudit+0x1b1/0x200 [ 162.077274][ T9274] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 162.077324][ T9274] ipv6_setsockopt+0x59/0x130 [ 162.077348][ T9274] sctp_setsockopt+0x116/0xe30 [ 162.077381][ T9274] sock_common_setsockopt+0x69/0x80 [ 162.077414][ T9274] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 162.077494][ T9274] __sys_setsockopt+0x184/0x200 [ 162.077534][ T9274] __x64_sys_setsockopt+0x64/0x80 [ 162.077580][ T9274] x64_sys_call+0x2bd5/0x2fb0 [ 162.077609][ T9274] do_syscall_64+0xd2/0x200 [ 162.077626][ T9274] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.077653][ T9274] ? clear_bhb_loop+0x40/0x90 [ 162.077696][ T9274] ? clear_bhb_loop+0x40/0x90 [ 162.077719][ T9274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.077835][ T9274] RIP: 0033:0x7fc56b0ae929 [ 162.077850][ T9274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.077886][ T9274] RSP: 002b:00007fc569717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.077907][ T9274] RAX: ffffffffffffffda RBX: 00007fc56b2d5fa0 RCX: 00007fc56b0ae929 [ 162.077919][ T9274] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 162.077991][ T9274] RBP: 00007fc569717090 R08: 0000000000000008 R09: 0000000000000000 [ 162.078084][ T9274] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 162.078096][ T9274] R13: 0000000000000000 R14: 00007fc56b2d5fa0 R15: 00007ffebeecd578 [ 162.078114][ T9274] [ 162.089208][ T9259] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1890: bg 0: block 16: invalid block bitmap [ 162.226504][ T9289] loop2: detected capacity change from 0 to 1024 [ 162.233478][ T9259] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 162.259930][ T9289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.261213][ T9259] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1890: attempt to clear invalid blocks 1669132790 len 1 [ 162.270795][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.297381][ T9259] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1890: invalid indirect mapped block 4294967295 (level 1) [ 162.382532][ T9259] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1890: invalid indirect mapped block 4294967295 (level 2) [ 162.406153][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.406707][ T9259] EXT4-fs (loop4): 1 truncate cleaned up [ 162.440132][ T9259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.520290][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.553663][ T9313] loop4: detected capacity change from 0 to 512 [ 162.595974][ T9318] SELinux: ebitmap: truncated map [ 162.601928][ T9318] SELinux: failed to load policy [ 162.681009][ T9324] loop3: detected capacity change from 0 to 1024 [ 162.688045][ T9324] EXT4-fs: Ignoring removed orlov option [ 162.693760][ T9324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.716844][ T9313] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 162.728009][ T9313] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1911: bad orphan inode 15 [ 162.741003][ T9313] ext4_test_bit(bit=14, block=18) = 1 [ 162.746420][ T9313] is_bad_inode(inode)=0 [ 162.750665][ T9313] NEXT_ORPHAN(inode)=1023 [ 162.755085][ T9313] max_ino=32 [ 162.758414][ T9313] i_nlink=0 [ 162.762473][ T9313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 162.774971][ T9313] ext2 filesystem being mounted at /375/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 162.791637][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 162.802188][ T9324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.815150][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 162.834530][ T9324] openvswitch: netlink: Message has 6 unknown bytes. [ 162.876229][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.951198][ T9336] loop1: detected capacity change from 0 to 512 [ 163.000152][ T9336] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1921: bg 0: block 16: invalid block bitmap [ 163.024980][ T9347] SELinux: ebitmap: truncated map [ 163.051616][ T9347] SELinux: failed to load policy [ 163.067794][ T9336] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 163.093619][ T9355] FAULT_INJECTION: forcing a failure. [ 163.093619][ T9355] name failslab, interval 1, probability 0, space 0, times 0 [ 163.106359][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.4.1928 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 163.106396][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.106410][ T9355] Call Trace: [ 163.106416][ T9355] [ 163.106424][ T9355] __dump_stack+0x1d/0x30 [ 163.106523][ T9355] dump_stack_lvl+0xe8/0x140 [ 163.106576][ T9355] dump_stack+0x15/0x1b [ 163.106592][ T9355] should_fail_ex+0x265/0x280 [ 163.106676][ T9355] should_failslab+0x8c/0xb0 [ 163.106714][ T9355] kmem_cache_alloc_noprof+0x50/0x310 [ 163.106749][ T9355] ? getname_flags+0x80/0x3b0 [ 163.106781][ T9355] getname_flags+0x80/0x3b0 [ 163.106819][ T9355] __se_sys_move_mount+0x16d/0x440 [ 163.106850][ T9355] __x64_sys_move_mount+0x67/0x80 [ 163.106872][ T9355] x64_sys_call+0x1f00/0x2fb0 [ 163.106893][ T9355] do_syscall_64+0xd2/0x200 [ 163.106986][ T9355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.107040][ T9355] ? clear_bhb_loop+0x40/0x90 [ 163.107064][ T9355] ? clear_bhb_loop+0x40/0x90 [ 163.107086][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.107107][ T9355] RIP: 0033:0x7f87d489e929 [ 163.107162][ T9355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.107183][ T9355] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 163.107202][ T9355] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 163.107219][ T9355] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 163.107235][ T9355] RBP: 00007f87d2f07090 R08: 0000000000000011 R09: 0000000000000000 [ 163.107249][ T9355] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 163.107261][ T9355] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 163.107280][ T9355] [ 163.219115][ T9336] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1921: attempt to clear invalid blocks 1669132790 len 1 [ 163.246575][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1929'. [ 163.306965][ T9336] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1921: invalid indirect mapped block 4294967295 (level 1) [ 163.368806][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 163.383118][ T9368] FAULT_INJECTION: forcing a failure. [ 163.383118][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 163.388389][ T9336] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1921: invalid indirect mapped block 4294967295 (level 2) [ 163.395992][ T9368] CPU: 0 UID: 0 PID: 9368 Comm: syz.4.1933 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 163.396034][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.396053][ T9368] Call Trace: [ 163.396083][ T9368] [ 163.396094][ T9368] __dump_stack+0x1d/0x30 [ 163.396183][ T9368] dump_stack_lvl+0xe8/0x140 [ 163.396211][ T9368] dump_stack+0x15/0x1b [ 163.396281][ T9368] should_fail_ex+0x265/0x280 [ 163.396376][ T9368] should_failslab+0x8c/0xb0 [ 163.396478][ T9368] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 163.396522][ T9368] ? sidtab_sid2str_get+0xa0/0x130 [ 163.396596][ T9368] kmemdup_noprof+0x2b/0x70 [ 163.396631][ T9368] sidtab_sid2str_get+0xa0/0x130 [ 163.396750][ T9368] security_sid_to_context_core+0x1eb/0x2e0 [ 163.396853][ T9368] security_sid_to_context+0x27/0x40 [ 163.396885][ T9368] selinux_lsmprop_to_secctx+0x67/0xf0 [ 163.396919][ T9368] security_lsmprop_to_secctx+0x43/0x80 [ 163.396974][ T9368] audit_log_task_context+0x77/0x190 [ 163.397058][ T9368] audit_log_task+0xf4/0x250 [ 163.397103][ T9368] audit_seccomp+0x61/0x100 [ 163.397268][ T9368] ? __seccomp_filter+0x68c/0x10d0 [ 163.397302][ T9368] __seccomp_filter+0x69d/0x10d0 [ 163.397337][ T9368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.397448][ T9368] ? vfs_write+0x75e/0x8e0 [ 163.397493][ T9368] ? __rcu_read_unlock+0x4f/0x70 [ 163.397526][ T9368] ? __fget_files+0x184/0x1c0 [ 163.397557][ T9368] __secure_computing+0x82/0x150 [ 163.397591][ T9368] syscall_trace_enter+0xcf/0x1e0 [ 163.397728][ T9368] do_syscall_64+0xac/0x200 [ 163.397755][ T9368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.397793][ T9368] ? clear_bhb_loop+0x40/0x90 [ 163.397823][ T9368] ? clear_bhb_loop+0x40/0x90 [ 163.397856][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.397896][ T9368] RIP: 0033:0x7f87d489e929 [ 163.397918][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.398007][ T9368] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 163.398033][ T9368] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 163.398052][ T9368] RDX: 000000000000000c RSI: 0000000000000001 RDI: 0000000000000003 [ 163.398069][ T9368] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 163.398087][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.398109][ T9368] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 163.398180][ T9368] [ 163.572929][ T9372] loop3: detected capacity change from 0 to 1024 [ 163.648749][ T9336] EXT4-fs (loop1): 1 truncate cleaned up [ 163.674386][ T9336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.700214][ T9372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.752181][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.779825][ T9381] siw: device registration error -23 [ 163.791006][ T9381] loop4: detected capacity change from 0 to 512 [ 163.797834][ T9381] EXT4-fs: Ignoring removed orlov option [ 163.809967][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.819435][ T9381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.830915][ T9381] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.837829][ T9381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1939: bg 0: block 248: padding at end of block bitmap is not set [ 163.853275][ T9381] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1939: Failed to acquire dquot type 1 [ 163.877287][ T9381] EXT4-fs (loop4): 1 truncate cleaned up [ 163.887178][ T9381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.979745][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.041499][ T9401] loop3: detected capacity change from 0 to 1024 [ 164.057278][ T9401] EXT4-fs: Ignoring removed orlov option [ 164.071108][ T9401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.172536][ T9409] loop1: detected capacity change from 0 to 512 [ 164.219799][ T9409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1951: bg 0: block 16: invalid block bitmap [ 164.245852][ T9409] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 164.277506][ T9409] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1951: attempt to clear invalid blocks 1669132790 len 1 [ 164.307739][ T9409] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1951: invalid indirect mapped block 4294967295 (level 1) [ 164.409029][ T9409] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1951: invalid indirect mapped block 4294967295 (level 2) [ 164.457611][ T9409] EXT4-fs (loop1): 1 truncate cleaned up [ 164.463905][ T9409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.563679][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.614015][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.699521][ T9441] only policy match revision 0 supported [ 164.699539][ T9441] unable to load match [ 164.730804][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1959'. [ 164.814633][ T9463] loop4: detected capacity change from 0 to 1024 [ 164.843804][ T9463] EXT4-fs: Ignoring removed orlov option [ 164.851290][ T9460] loop1: detected capacity change from 0 to 512 [ 164.854641][ T9463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.873509][ T9460] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1971: bg 0: block 16: invalid block bitmap [ 164.890590][ T9460] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 164.899983][ T9460] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1971: attempt to clear invalid blocks 1669132790 len 1 [ 164.914766][ T9460] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1971: invalid indirect mapped block 4294967295 (level 1) [ 164.929584][ T9460] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1971: invalid indirect mapped block 4294967295 (level 2) [ 164.946423][ T9460] EXT4-fs (loop1): 1 truncate cleaned up [ 164.970724][ T9460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.996684][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 164.996703][ T29] audit: type=1326 audit(1751494423.203:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0bdab19 code=0x7ffc0000 [ 165.026367][ T29] audit: type=1326 audit(1751494423.203:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 165.152740][ T29] audit: type=1326 audit(1751494423.293:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0c358e7 code=0x7ffc0000 [ 165.176715][ T29] audit: type=1326 audit(1751494423.293:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0bdab19 code=0x7ffc0000 [ 165.200160][ T29] audit: type=1326 audit(1751494423.293:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 165.223755][ T29] audit: type=1326 audit(1751494423.293:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0c358e7 code=0x7ffc0000 [ 165.247085][ T29] audit: type=1326 audit(1751494423.293:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0bdab19 code=0x7ffc0000 [ 165.270471][ T29] audit: type=1326 audit(1751494423.293:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 165.293989][ T29] audit: type=1326 audit(1751494423.313:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bc0c358e7 code=0x7ffc0000 [ 165.317403][ T29] audit: type=1326 audit(1751494423.313:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bc0bdab19 code=0x7ffc0000 [ 165.343907][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.400168][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.460802][ T9486] only policy match revision 0 supported [ 165.460838][ T9486] unable to load match [ 165.653971][ T9500] loop1: detected capacity change from 0 to 1024 [ 165.690323][ T9500] EXT4-fs: Ignoring removed orlov option [ 165.696229][ T9500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.760308][ T9500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.776862][ T9509] unsupported nla_type 52263 [ 165.884257][ T9500] openvswitch: netlink: Message has 6 unknown bytes. [ 165.931556][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.044303][ T9521] lo speed is unknown, defaulting to 1000 [ 166.481287][ T9537] loop1: detected capacity change from 0 to 512 [ 166.512894][ T9539] loop4: detected capacity change from 0 to 512 [ 166.526749][ T9537] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.538391][ T9537] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 166.548532][ T9537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1999: Corrupt directory, running e2fsck is recommended [ 166.603285][ T9539] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.615070][ T9539] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 166.625228][ T9539] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2000: Corrupt directory, running e2fsck is recommended [ 166.651270][ T9537] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 166.661279][ T9539] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 166.683107][ T9537] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1999: corrupted in-inode xattr: invalid ea_ino [ 166.707079][ T9539] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2000: corrupted in-inode xattr: invalid ea_ino [ 166.728249][ T9537] EXT4-fs (loop1): Remounting filesystem read-only [ 166.735243][ T9537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.747872][ T9539] EXT4-fs (loop4): Remounting filesystem read-only [ 166.755023][ T9539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.908264][ T9539] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 166.916550][ T9537] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 167.002311][ T9571] lo speed is unknown, defaulting to 1000 [ 167.076295][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.092971][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.253395][ T9589] loop1: detected capacity change from 0 to 1024 [ 167.272179][ T9589] EXT4-fs: Ignoring removed orlov option [ 167.293209][ T9589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.031797][ T9600] loop4: detected capacity change from 0 to 512 [ 168.063973][ T9600] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.075629][ T9600] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 168.085765][ T9600] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2021: Corrupt directory, running e2fsck is recommended [ 168.099032][ T9600] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 168.107480][ T9600] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2021: corrupted in-inode xattr: invalid ea_ino [ 168.121097][ T9600] EXT4-fs (loop4): Remounting filesystem read-only [ 168.128126][ T9600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.147941][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.157055][ T9600] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 168.226183][ T9610] lo speed is unknown, defaulting to 1000 [ 168.339350][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.935921][ T9667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2045'. [ 168.944991][ T9667] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2045'. [ 168.954041][ T9667] netlink: 'syz.2.2045': attribute type 6 has an invalid length. [ 168.961891][ T9667] netlink: 'syz.2.2045': attribute type 5 has an invalid length. [ 168.969681][ T9667] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2045'. [ 168.981457][ T9668] loop4: detected capacity change from 0 to 512 [ 168.990710][ T9668] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.002291][ T9668] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 169.012408][ T9668] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2036: Corrupt directory, running e2fsck is recommended [ 169.025491][ T9668] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 169.034674][ T9668] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2036: corrupted in-inode xattr: invalid ea_ino [ 169.048317][ T9668] EXT4-fs (loop4): Remounting filesystem read-only [ 169.055258][ T9668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.083557][ T9668] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 169.194916][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.292996][ T9695] loop2: detected capacity change from 0 to 1024 [ 169.308372][ T9695] EXT4-fs: inline encryption not supported [ 169.314252][ T9695] EXT4-fs: Ignoring removed i_version option [ 169.327664][ T9695] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.357816][ T9697] FAULT_INJECTION: forcing a failure. [ 169.357816][ T9697] name failslab, interval 1, probability 0, space 0, times 0 [ 169.370530][ T9697] CPU: 1 UID: 0 PID: 9697 Comm: syz.4.2048 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 169.370621][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.370638][ T9697] Call Trace: [ 169.370646][ T9697] [ 169.370656][ T9697] __dump_stack+0x1d/0x30 [ 169.370759][ T9697] dump_stack_lvl+0xe8/0x140 [ 169.370780][ T9697] dump_stack+0x15/0x1b [ 169.370798][ T9697] should_fail_ex+0x265/0x280 [ 169.370835][ T9697] ? assoc_array_insert+0x75/0x1990 [ 169.370864][ T9697] should_failslab+0x8c/0xb0 [ 169.370958][ T9697] __kmalloc_cache_noprof+0x4c/0x320 [ 169.370997][ T9697] assoc_array_insert+0x75/0x1990 [ 169.371137][ T9697] ? assoc_array_delete+0x58/0x950 [ 169.371159][ T9697] ? bcmp+0x5e/0x90 [ 169.371179][ T9697] ? keyring_compare_object+0xda/0x100 [ 169.371285][ T9697] ? assoc_array_delete+0x6e2/0x950 [ 169.371314][ T9697] __key_link_begin+0x8a/0x140 [ 169.371337][ T9697] key_move+0x160/0x550 [ 169.371359][ T9697] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 169.371449][ T9697] ? __pfx_keyring_search_iterator+0x10/0x10 [ 169.371477][ T9697] keyctl_keyring_move+0xd6/0x110 [ 169.371507][ T9697] __se_sys_keyctl+0x5f7/0xb80 [ 169.371543][ T9697] ? __rcu_read_unlock+0x4f/0x70 [ 169.371645][ T9697] ? __fget_files+0x184/0x1c0 [ 169.371671][ T9697] ? fput+0x8f/0xc0 [ 169.371714][ T9697] __x64_sys_keyctl+0x67/0x80 [ 169.371751][ T9697] x64_sys_call+0x2e7f/0x2fb0 [ 169.371847][ T9697] do_syscall_64+0xd2/0x200 [ 169.371867][ T9697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.371902][ T9697] ? clear_bhb_loop+0x40/0x90 [ 169.371939][ T9697] ? clear_bhb_loop+0x40/0x90 [ 169.371987][ T9697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.372023][ T9697] RIP: 0033:0x7f87d489e929 [ 169.372038][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.372061][ T9697] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 169.372082][ T9697] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 169.372098][ T9697] RDX: ffffffffffffffff RSI: 000000003415dff4 RDI: 000000000000001e [ 169.372112][ T9697] RBP: 00007f87d2f07090 R08: 0000000000000001 R09: 0000000000000000 [ 169.372124][ T9697] R10: 0000000030fe4e58 R11: 0000000000000246 R12: 0000000000000001 [ 169.372136][ T9697] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 169.372230][ T9697] [ 169.650001][ T9695] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.2053: lblock 2 mapped to illegal pblock 2 (length 1) [ 169.735219][ T9703] only policy match revision 0 supported [ 169.735237][ T9703] unable to load match [ 169.745267][ T9695] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.2053: lblock 0 mapped to illegal pblock 48 (length 1) [ 169.765110][ T9705] only policy match revision 0 supported [ 169.765122][ T9705] unable to load match [ 169.776814][ T9695] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2053: Failed to acquire dquot type 0 [ 169.798638][ T9695] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 169.816697][ T9695] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2053: mark_inode_dirty error [ 169.836914][ T9695] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 169.866753][ T9695] EXT4-fs (loop2): 1 orphan inode deleted [ 169.872952][ T9695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.888119][ T3433] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.914308][ T3433] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 169.919550][ T9711] only policy match revision 0 supported [ 169.925732][ T9711] unable to load match [ 169.939324][ T9695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.950869][ T9695] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.2053: Invalid inode table block 1 in block_group 0 [ 169.976902][ T9695] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 169.989025][ T9720] siw: device registration error -23 [ 169.996707][ T9695] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.2053: mark_inode_dirty error [ 170.014803][ T9720] loop4: detected capacity change from 0 to 512 [ 170.028849][ T9695] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2053'. [ 170.029405][ T9720] EXT4-fs: Ignoring removed orlov option [ 170.044343][ T9720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.053462][ T9720] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.060469][ T9720] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2063: bg 0: block 248: padding at end of block bitmap is not set [ 170.068481][ T9695] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.075298][ T9720] __quota_error: 314 callbacks suppressed [ 170.075317][ T9720] Quota error (device loop4): write_blk: dquota write failed [ 170.095514][ T9720] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 170.096754][ T9695] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 170.105457][ T9720] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2063: Failed to acquire dquot type 1 [ 170.128332][ T9720] EXT4-fs (loop4): 1 truncate cleaned up [ 170.134709][ T9720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.154840][ T9695] loop2: detected capacity change from 0 to 512 [ 170.164110][ T9695] EXT4-fs: Ignoring removed orlov option [ 170.171851][ T9695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.186977][ T9695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.193880][ T9695] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2053: bg 0: block 248: padding at end of block bitmap is not set [ 170.228720][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.239408][ T9695] Quota error (device loop2): write_blk: dquota write failed [ 170.246852][ T9695] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 170.256914][ T9695] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2053: Failed to acquire dquot type 1 [ 170.295470][ T29] audit: type=1326 audit(1751494428.513:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d489e929 code=0x7ffc0000 [ 170.330890][ T29] audit: type=1326 audit(1751494428.513:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d489e929 code=0x7ffc0000 [ 170.354381][ T29] audit: type=1326 audit(1751494428.513:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87d489e929 code=0x7ffc0000 [ 170.359072][ T9695] EXT4-fs (loop2): 1 truncate cleaned up [ 170.377810][ T29] audit: type=1326 audit(1751494428.513:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d489e929 code=0x7ffc0000 [ 170.406964][ T29] audit: type=1326 audit(1751494428.513:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d489e929 code=0x7ffc0000 [ 170.430490][ T29] audit: type=1326 audit(1751494428.513:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f87d489e929 code=0x7ffc0000 [ 170.455179][ T9695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.479726][ T9695] EXT4-fs: Ignoring removed orlov option [ 170.492218][ T9695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.523972][ T9722] loop3: detected capacity change from 0 to 512 [ 170.532656][ T9695] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 170.547084][ T9722] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.558871][ T9722] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 170.569018][ T9722] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2064: Corrupt directory, running e2fsck is recommended [ 170.616883][ T9722] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 170.625255][ T9722] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2064: corrupted in-inode xattr: invalid ea_ino [ 170.625259][ T9695] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.2053: Abort forced by user [ 170.625566][ T9722] EXT4-fs (loop3): Remounting filesystem read-only [ 170.656705][ T9695] EXT4-fs (loop2): Remounting filesystem read-only [ 170.662712][ T9722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.663402][ T9695] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 170.711641][ T9695] ext4 filesystem being remounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.746223][ T9722] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.755472][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.785369][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2065'. [ 170.877985][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.985429][ T9755] loop2: detected capacity change from 0 to 128 [ 170.994724][ T9755] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 171.016319][ T9755] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 171.048721][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.073568][ T9765] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2082'. [ 171.126076][ T9769] siw: device registration error -23 [ 171.150116][ T9769] loop2: detected capacity change from 0 to 512 [ 171.187178][ T9769] EXT4-fs: Ignoring removed orlov option [ 171.227082][ T9769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.303799][ T9769] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.315307][ T9769] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2084: bg 0: block 248: padding at end of block bitmap is not set [ 171.330013][ T9769] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2084: Failed to acquire dquot type 1 [ 171.342058][ T9769] EXT4-fs (loop2): 1 truncate cleaned up [ 171.957746][ T9769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.028120][ T9794] FAULT_INJECTION: forcing a failure. [ 172.028120][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 172.040845][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.4.2090 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 172.040936][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.040952][ T9794] Call Trace: [ 172.040961][ T9794] [ 172.040971][ T9794] __dump_stack+0x1d/0x30 [ 172.041010][ T9794] dump_stack_lvl+0xe8/0x140 [ 172.041035][ T9794] dump_stack+0x15/0x1b [ 172.041114][ T9794] should_fail_ex+0x265/0x280 [ 172.041152][ T9794] should_failslab+0x8c/0xb0 [ 172.041182][ T9794] kmem_cache_alloc_noprof+0x50/0x310 [ 172.041247][ T9794] ? skb_clone+0x151/0x1f0 [ 172.041267][ T9794] skb_clone+0x151/0x1f0 [ 172.041343][ T9794] __netlink_deliver_tap+0x2c9/0x500 [ 172.041447][ T9794] netlink_unicast+0x64c/0x670 [ 172.041539][ T9794] netlink_sendmsg+0x58b/0x6b0 [ 172.041563][ T9794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.041582][ T9794] __sock_sendmsg+0x145/0x180 [ 172.041685][ T9794] ____sys_sendmsg+0x31e/0x4e0 [ 172.041721][ T9794] ___sys_sendmsg+0x17b/0x1d0 [ 172.041846][ T9794] __x64_sys_sendmsg+0xd4/0x160 [ 172.041889][ T9794] x64_sys_call+0x2999/0x2fb0 [ 172.041917][ T9794] do_syscall_64+0xd2/0x200 [ 172.041940][ T9794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.041975][ T9794] ? clear_bhb_loop+0x40/0x90 [ 172.042001][ T9794] ? clear_bhb_loop+0x40/0x90 [ 172.042023][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.042088][ T9794] RIP: 0033:0x7f87d489e929 [ 172.042123][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.042143][ T9794] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.042172][ T9794] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 172.042187][ T9794] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.042204][ T9794] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 172.042220][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.042235][ T9794] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 172.042300][ T9794] [ 172.077418][ T9791] IPv6: Can't replace route, no match found [ 172.302693][ T9806] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2094'. [ 172.314090][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.320489][ T9807] only policy match revision 0 supported [ 172.323154][ T9807] unable to load match [ 172.413898][ T9813] siw: device registration error -23 [ 172.425441][ T9815] only policy match revision 0 supported [ 172.425457][ T9815] unable to load match [ 172.475989][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 172.728890][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 172.737914][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2108'. [ 172.755502][ T9835] loop1: detected capacity change from 0 to 512 [ 172.780163][ T9822] loop2: detected capacity change from 0 to 1024 [ 172.786824][ T9822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.796961][ T9822] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 172.813124][ T9835] EXT4-fs: Ignoring removed orlov option [ 172.845645][ T9844] siw: device registration error -23 [ 172.882281][ T9835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.902771][ T9835] EXT4-fs (loop1): orphan cleanup on readonly fs [ 172.928257][ T9835] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2106: bg 0: block 248: padding at end of block bitmap is not set [ 172.956738][ T9835] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2106: Failed to acquire dquot type 1 [ 172.998276][ T9835] EXT4-fs (loop1): 1 truncate cleaned up [ 173.031385][ T9835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.054172][ T9852] loop2: detected capacity change from 0 to 512 [ 173.056273][ T9857] only policy match revision 0 supported [ 173.060903][ T9857] unable to load match [ 173.081082][ T9852] EXT4-fs: Ignoring removed i_version option [ 173.088473][ T9852] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.095803][ T9852] journal_path: Lookup failure for './file2' [ 173.102392][ T9852] EXT4-fs: error: could not find journal device path [ 173.197703][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.243150][ T9873] FAULT_INJECTION: forcing a failure. [ 173.243150][ T9873] name failslab, interval 1, probability 0, space 0, times 0 [ 173.255919][ T9873] CPU: 1 UID: 0 PID: 9873 Comm: syz.2.2125 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 173.255948][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.255962][ T9873] Call Trace: [ 173.255968][ T9873] [ 173.255975][ T9873] __dump_stack+0x1d/0x30 [ 173.256010][ T9873] dump_stack_lvl+0xe8/0x140 [ 173.256029][ T9873] dump_stack+0x15/0x1b [ 173.256046][ T9873] should_fail_ex+0x265/0x280 [ 173.256083][ T9873] should_failslab+0x8c/0xb0 [ 173.256107][ T9873] __kvmalloc_node_noprof+0x123/0x4e0 [ 173.256136][ T9873] ? xt_alloc_entry_offsets+0x48/0x50 [ 173.256243][ T9873] ? __account_obj_stock+0x211/0x350 [ 173.256267][ T9873] xt_alloc_entry_offsets+0x48/0x50 [ 173.256370][ T9873] translate_table+0xa9/0xf90 [ 173.256400][ T9873] ? __rcu_read_unlock+0x4f/0x70 [ 173.256423][ T9873] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 173.256480][ T9873] ? should_fail_ex+0xdb/0x280 [ 173.256512][ T9873] ? _copy_from_user+0x89/0xb0 [ 173.256535][ T9873] do_ipt_set_ctl+0x66f/0x820 [ 173.256572][ T9873] nf_setsockopt+0x199/0x1b0 [ 173.256623][ T9873] ip_setsockopt+0x102/0x110 [ 173.256664][ T9873] udp_setsockopt+0x99/0xb0 [ 173.256695][ T9873] sock_common_setsockopt+0x69/0x80 [ 173.256778][ T9873] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 173.256867][ T9873] __sys_setsockopt+0x184/0x200 [ 173.256922][ T9873] __x64_sys_setsockopt+0x64/0x80 [ 173.256956][ T9873] x64_sys_call+0x2bd5/0x2fb0 [ 173.256978][ T9873] do_syscall_64+0xd2/0x200 [ 173.256996][ T9873] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.257048][ T9873] ? clear_bhb_loop+0x40/0x90 [ 173.257071][ T9873] ? clear_bhb_loop+0x40/0x90 [ 173.257108][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.257130][ T9873] RIP: 0033:0x7f00bf79e929 [ 173.257145][ T9873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.257165][ T9873] RSP: 002b:00007f00bde07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.257184][ T9873] RAX: ffffffffffffffda RBX: 00007f00bf9c5fa0 RCX: 00007f00bf79e929 [ 173.257250][ T9873] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000005 [ 173.257262][ T9873] RBP: 00007f00bde07090 R08: 0000000000000258 R09: 0000000000000000 [ 173.257274][ T9873] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.257286][ T9873] R13: 0000000000000000 R14: 00007f00bf9c5fa0 R15: 00007fffb8765ef8 [ 173.257310][ T9873] [ 173.512155][ T9873] veth0_macvtap: left promiscuous mode [ 173.609948][ T9885] loop2: detected capacity change from 0 to 512 [ 173.643136][ T9885] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2128: bg 0: block 16: invalid block bitmap [ 173.668825][ T9892] only policy match revision 0 supported [ 173.668838][ T9892] unable to load match [ 173.680797][ T9885] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 173.709361][ T9885] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2128: attempt to clear invalid blocks 1669132790 len 1 [ 173.741451][ T9885] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2128: invalid indirect mapped block 4294967295 (level 1) [ 173.757782][ T9885] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2128: invalid indirect mapped block 4294967295 (level 2) [ 173.826348][ T9900] loop1: detected capacity change from 0 to 512 [ 173.838749][ T9885] EXT4-fs (loop2): 1 truncate cleaned up [ 173.849846][ T9900] EXT4-fs: Ignoring removed orlov option [ 173.861001][ T9885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.878184][ T9900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.898336][ T9900] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.919429][ T9900] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2132: bg 0: block 248: padding at end of block bitmap is not set [ 173.952741][ T9900] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2132: Failed to acquire dquot type 1 [ 174.007629][ T9900] EXT4-fs (loop1): 1 truncate cleaned up [ 174.013205][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.023143][ T9900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.069989][ T9912] __nla_validate_parse: 5 callbacks suppressed [ 174.070006][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 174.085113][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2137'. [ 174.199313][ T9917] lo speed is unknown, defaulting to 1000 [ 174.389552][ T9938] siw: device registration error -23 [ 174.421484][ T9938] loop2: detected capacity change from 0 to 512 [ 174.428274][ T9938] EXT4-fs: Ignoring removed orlov option [ 174.429031][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'. [ 174.448010][ T9938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.477916][ T9938] EXT4-fs (loop2): orphan cleanup on readonly fs [ 174.497659][ T9938] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2149: bg 0: block 248: padding at end of block bitmap is not set [ 174.548373][ T9938] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2149: Failed to acquire dquot type 1 [ 174.578217][ T9938] EXT4-fs (loop2): 1 truncate cleaned up [ 174.606835][ T9954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2155'. [ 174.680708][ T9954] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 174.760957][ T9944] loop1: detected capacity change from 0 to 512 [ 174.769486][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 174.799090][ T9944] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.810724][ T9944] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 174.820880][ T9944] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2152: Corrupt directory, running e2fsck is recommended [ 174.834004][ T9944] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 174.834029][ T9967] veth0_macvtap: left promiscuous mode [ 174.851321][ T9944] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2152: corrupted in-inode xattr: invalid ea_ino [ 174.876323][ T9944] EXT4-fs (loop1): Remounting filesystem read-only [ 174.892918][ T9944] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.064157][ T9982] loop4: detected capacity change from 0 to 512 [ 175.078504][ T9982] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2166: bg 0: block 16: invalid block bitmap [ 175.091339][ T9982] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 175.120300][ T9982] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2166: attempt to clear invalid blocks 1669132790 len 1 [ 175.145956][ T9978] loop3: detected capacity change from 0 to 512 [ 175.154552][ T9982] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2166: invalid indirect mapped block 4294967295 (level 1) [ 175.169530][ T9978] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.181063][ T9978] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 175.184240][ T9982] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2166: invalid indirect mapped block 4294967295 (level 2) [ 175.191304][ T9978] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2165: Corrupt directory, running e2fsck is recommended [ 175.208285][ T9982] EXT4-fs (loop4): 1 truncate cleaned up [ 175.224639][ T9978] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 175.238016][ T9978] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2165: corrupted in-inode xattr: invalid ea_ino [ 175.263021][ T9978] EXT4-fs (loop3): Remounting filesystem read-only [ 175.263148][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 175.263244][ T29] audit: type=1326 audit(1751494433.483:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.309494][ T29] audit: type=1326 audit(1751494433.523:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.309535][ T9978] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.332981][ T29] audit: type=1326 audit(1751494433.523:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.364595][ T29] audit: type=1326 audit(1751494433.523:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.388319][ T29] audit: type=1326 audit(1751494433.523:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.411935][ T29] audit: type=1326 audit(1751494433.523:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.435523][ T29] audit: type=1326 audit(1751494433.523:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.458977][ T29] audit: type=1326 audit(1751494433.523:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.482428][ T29] audit: type=1326 audit(1751494433.523:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.505873][ T29] audit: type=1326 audit(1751494433.523:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 175.573073][ T9994] loop1: detected capacity change from 0 to 512 [ 175.587122][ T9994] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.598766][ T9994] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 175.608993][ T9994] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2169: Corrupt directory, running e2fsck is recommended [ 175.622682][ T9994] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 175.631857][ T9994] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2169: corrupted in-inode xattr: invalid ea_ino [ 175.647653][ T9994] EXT4-fs (loop1): Remounting filesystem read-only [ 175.674237][ T9994] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.698024][T10007] random: crng reseeded on system resumption [ 175.721648][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 175.798592][T10018] loop2: detected capacity change from 0 to 1024 [ 175.805327][T10018] EXT4-fs: Ignoring removed orlov option [ 175.811112][T10018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.837340][T10020] FAULT_INJECTION: forcing a failure. [ 175.837340][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.850811][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.4.2176 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 175.850843][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.850861][T10020] Call Trace: [ 175.850943][T10020] [ 175.850952][T10020] __dump_stack+0x1d/0x30 [ 175.850973][T10020] dump_stack_lvl+0xe8/0x140 [ 175.850992][T10020] dump_stack+0x15/0x1b [ 175.851047][T10020] should_fail_ex+0x265/0x280 [ 175.851088][T10020] should_fail+0xb/0x20 [ 175.851122][T10020] should_fail_usercopy+0x1a/0x20 [ 175.851155][T10020] _copy_from_user+0x1c/0xb0 [ 175.851188][T10020] ___sys_sendmsg+0xc1/0x1d0 [ 175.851250][T10020] __x64_sys_sendmsg+0xd4/0x160 [ 175.851292][T10020] x64_sys_call+0x2999/0x2fb0 [ 175.851376][T10020] do_syscall_64+0xd2/0x200 [ 175.851419][T10020] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.851491][T10020] ? clear_bhb_loop+0x40/0x90 [ 175.851513][T10020] ? clear_bhb_loop+0x40/0x90 [ 175.851602][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.851623][T10020] RIP: 0033:0x7f87d489e929 [ 175.851638][T10020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.851681][T10020] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.851709][T10020] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 175.851726][T10020] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 000000000000000e [ 175.851742][T10020] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 175.851758][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.851774][T10020] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 175.851799][T10020] [ 176.065308][T10007] infiniband syz!: set active [ 176.070119][T10007] infiniband syz!: added team_slave_0 [ 176.082009][T10007] RDS/IB: syz!: added [ 176.086087][T10007] smc: adding ib device syz! with port count 1 [ 176.092940][T10007] smc: ib device syz! port 1 has pnetid [ 176.137135][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2170'. [ 176.219472][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 176.322031][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'. [ 176.376523][T10061] loop2: detected capacity change from 0 to 512 [ 176.388569][T10061] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.413580][T10061] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2190: corrupted xattr block 33: e_value out of bounds [ 176.444091][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.453235][T10061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 176.462487][T10061] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2190: corrupted xattr block 33: e_value out of bounds [ 176.477344][T10061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 176.486899][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.496670][T10076] FAULT_INJECTION: forcing a failure. [ 176.496670][T10076] name failslab, interval 1, probability 0, space 0, times 0 [ 176.509431][T10076] CPU: 0 UID: 0 PID: 10076 Comm: syz.4.2196 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 176.509485][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.509502][T10076] Call Trace: [ 176.509510][T10076] [ 176.509519][T10076] __dump_stack+0x1d/0x30 [ 176.509573][T10076] dump_stack_lvl+0xe8/0x140 [ 176.509599][T10076] dump_stack+0x15/0x1b [ 176.509680][T10076] should_fail_ex+0x265/0x280 [ 176.509792][T10076] should_failslab+0x8c/0xb0 [ 176.509852][T10076] kmem_cache_alloc_noprof+0x50/0x310 [ 176.509887][T10076] ? security_file_alloc+0x32/0x100 [ 176.509916][T10076] security_file_alloc+0x32/0x100 [ 176.510010][T10076] init_file+0x5c/0x1d0 [ 176.510043][T10076] alloc_empty_file+0x8b/0x200 [ 176.510134][T10076] path_openat+0x68/0x2170 [ 176.510172][T10076] ? _parse_integer_limit+0x170/0x190 [ 176.510206][T10076] ? _parse_integer+0x27/0x40 [ 176.510305][T10076] ? kstrtoull+0x111/0x140 [ 176.510378][T10076] ? kstrtouint+0x76/0xc0 [ 176.510478][T10076] do_filp_open+0x109/0x230 [ 176.510529][T10076] do_sys_openat2+0xa6/0x110 [ 176.510567][T10076] __x64_sys_creat+0x65/0x90 [ 176.510706][T10076] x64_sys_call+0x114d/0x2fb0 [ 176.510734][T10076] do_syscall_64+0xd2/0x200 [ 176.510756][T10076] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.510842][T10076] ? clear_bhb_loop+0x40/0x90 [ 176.510869][T10076] ? clear_bhb_loop+0x40/0x90 [ 176.510899][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.510922][T10076] RIP: 0033:0x7f87d489e929 [ 176.510967][T10076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.510991][T10076] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 176.511015][T10076] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 176.511031][T10076] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000300 [ 176.511056][T10076] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 176.511073][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.511088][T10076] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 176.511113][T10076] [ 176.516377][T10077] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2190: corrupted xattr block 33: e_value out of bounds [ 176.754173][T10077] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 176.775612][T10083] loop1: detected capacity change from 0 to 1024 [ 176.782380][T10083] EXT4-fs: Ignoring removed orlov option [ 176.849924][T10087] loop4: detected capacity change from 0 to 1024 [ 176.873387][T10087] EXT4-fs: Ignoring removed orlov option [ 176.892345][T10090] geneve2: entered promiscuous mode [ 176.897777][T10090] geneve2: entered allmulticast mode [ 177.421767][T10108] loop3: detected capacity change from 0 to 512 [ 177.439562][T10108] EXT4-fs: Ignoring removed i_version option [ 177.446460][T10108] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.459986][T10108] journal_path: Lookup failure for './file2' [ 177.466577][T10108] EXT4-fs: error: could not find journal device path [ 177.481702][T10110] only policy match revision 0 supported [ 177.481720][T10110] unable to load match [ 177.599882][T10112] loop4: detected capacity change from 0 to 512 [ 177.625282][T10112] EXT4-fs: Ignoring removed i_version option [ 177.635533][T10112] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.687855][T10112] journal_path: Lookup failure for './file2' [ 177.694787][T10112] EXT4-fs: error: could not find journal device path [ 177.754865][T10123] loop1: detected capacity change from 0 to 1024 [ 177.768074][T10123] loop1: detected capacity change from 0 to 512 [ 177.799377][T10123] ext4: Bad value for 'commit' [ 177.815699][T10125] loop3: detected capacity change from 0 to 512 [ 177.826465][T10125] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2212: bg 0: block 16: invalid block bitmap [ 177.840373][T10125] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 177.849482][T10125] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2212: attempt to clear invalid blocks 1669132790 len 1 [ 177.863460][T10125] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2212: invalid indirect mapped block 4294967295 (level 1) [ 177.878352][T10125] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2212: invalid indirect mapped block 4294967295 (level 2) [ 177.896839][T10125] EXT4-fs (loop3): 1 truncate cleaned up [ 178.101874][T10145] loop3: detected capacity change from 0 to 128 [ 178.111129][T10145] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.207887][T10150] loop4: detected capacity change from 0 to 512 [ 178.213601][T10145] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 178.224511][T10150] EXT4-fs: Ignoring removed i_version option [ 178.237432][T10150] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.240029][T10145] sd 0:0:1:0: device reset [ 178.249136][T10150] journal_path: Lookup failure for './file2' [ 178.256287][T10150] EXT4-fs: error: could not find journal device path [ 178.301441][T10155] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2221'. [ 178.465529][T10174] loop1: detected capacity change from 0 to 512 [ 178.511222][T10174] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.541342][T10174] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2229: corrupted xattr block 33: e_value out of bounds [ 178.558870][T10188] FAULT_INJECTION: forcing a failure. [ 178.558870][T10188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.559665][T10174] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 178.572007][T10188] CPU: 1 UID: 0 PID: 10188 Comm: syz.4.2235 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 178.572043][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.572084][T10188] Call Trace: [ 178.572094][T10188] [ 178.572106][T10188] __dump_stack+0x1d/0x30 [ 178.572158][T10188] dump_stack_lvl+0xe8/0x140 [ 178.572185][T10188] dump_stack+0x15/0x1b [ 178.572256][T10188] should_fail_ex+0x265/0x280 [ 178.572369][T10188] should_fail+0xb/0x20 [ 178.572409][T10188] should_fail_usercopy+0x1a/0x20 [ 178.572463][T10188] _copy_from_iter+0xcf/0xe40 [ 178.572552][T10188] ? __build_skb_around+0x1a0/0x200 [ 178.572596][T10188] ? __alloc_skb+0x223/0x320 [ 178.572640][T10188] netlink_sendmsg+0x471/0x6b0 [ 178.572671][T10188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.572763][T10188] __sock_sendmsg+0x145/0x180 [ 178.572799][T10188] ____sys_sendmsg+0x31e/0x4e0 [ 178.572887][T10188] ___sys_sendmsg+0x17b/0x1d0 [ 178.572954][T10188] __x64_sys_sendmsg+0xd4/0x160 [ 178.573051][T10188] x64_sys_call+0x2999/0x2fb0 [ 178.573101][T10188] do_syscall_64+0xd2/0x200 [ 178.573150][T10188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.573188][T10188] ? clear_bhb_loop+0x40/0x90 [ 178.573218][T10188] ? clear_bhb_loop+0x40/0x90 [ 178.573279][T10188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.573310][T10188] RIP: 0033:0x7f87d489e929 [ 178.573332][T10188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.573359][T10188] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.573386][T10188] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 178.573404][T10188] RDX: 0000000000004004 RSI: 0000200000000100 RDI: 0000000000000006 [ 178.573433][T10188] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 178.573454][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.573471][T10188] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 178.573499][T10188] [ 178.788880][T10174] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2229: corrupted xattr block 33: e_value out of bounds [ 178.806971][T10174] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 178.817366][T10189] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2229: corrupted xattr block 33: e_value out of bounds [ 178.854119][T10189] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 178.897745][T10191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.921062][T10195] lo speed is unknown, defaulting to 1000 [ 179.038212][T10200] loop2: detected capacity change from 0 to 512 [ 179.103470][T10200] EXT4-fs: Ignoring removed i_version option [ 179.110162][T10200] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.166846][T10200] journal_path: Lookup failure for './file2' [ 179.173465][T10200] EXT4-fs: error: could not find journal device path [ 179.514048][T10223] __nla_validate_parse: 1 callbacks suppressed [ 179.514151][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 179.559347][T10226] siw: device registration error -23 [ 179.569658][T10226] loop3: detected capacity change from 0 to 512 [ 179.581386][T10225] FAULT_INJECTION: forcing a failure. [ 179.581386][T10225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.594601][T10225] CPU: 1 UID: 0 PID: 10225 Comm: syz.4.2246 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 179.594635][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.594717][T10225] Call Trace: [ 179.594724][T10225] [ 179.594730][T10225] __dump_stack+0x1d/0x30 [ 179.594755][T10225] dump_stack_lvl+0xe8/0x140 [ 179.594781][T10225] dump_stack+0x15/0x1b [ 179.594802][T10225] should_fail_ex+0x265/0x280 [ 179.594840][T10225] should_fail+0xb/0x20 [ 179.594949][T10225] should_fail_usercopy+0x1a/0x20 [ 179.594989][T10225] _copy_from_iter+0xcf/0xe40 [ 179.595029][T10225] ? __build_skb_around+0x1a0/0x200 [ 179.595081][T10225] ? __alloc_skb+0x223/0x320 [ 179.595130][T10225] netlink_sendmsg+0x471/0x6b0 [ 179.595154][T10225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.595179][T10225] __sock_sendmsg+0x145/0x180 [ 179.595212][T10225] ____sys_sendmsg+0x31e/0x4e0 [ 179.595263][T10225] ___sys_sendmsg+0x17b/0x1d0 [ 179.595381][T10225] __x64_sys_sendmsg+0xd4/0x160 [ 179.595458][T10225] x64_sys_call+0x2999/0x2fb0 [ 179.595510][T10225] do_syscall_64+0xd2/0x200 [ 179.595532][T10225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.595566][T10225] ? clear_bhb_loop+0x40/0x90 [ 179.595592][T10225] ? clear_bhb_loop+0x40/0x90 [ 179.595683][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.595742][T10225] RIP: 0033:0x7f87d489e929 [ 179.595759][T10225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.595900][T10225] RSP: 002b:00007f87d2ee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.595919][T10225] RAX: ffffffffffffffda RBX: 00007f87d4ac6080 RCX: 00007f87d489e929 [ 179.595991][T10225] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a [ 179.596004][T10225] RBP: 00007f87d2ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.596016][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.596029][T10225] R13: 0000000000000000 R14: 00007f87d4ac6080 R15: 00007fffb5ac8ff8 [ 179.596049][T10225] [ 179.810209][T10226] EXT4-fs: Ignoring removed orlov option [ 179.864590][T10226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.896594][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 179.921798][T10226] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.951577][T10226] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2248: bg 0: block 248: padding at end of block bitmap is not set [ 179.983944][T10238] lo speed is unknown, defaulting to 1000 [ 180.024147][T10226] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2248: Failed to acquire dquot type 1 [ 180.046442][T10226] EXT4-fs (loop3): 1 truncate cleaned up [ 180.056064][T10244] loop4: detected capacity change from 0 to 512 [ 180.071988][T10244] EXT4-fs: Ignoring removed i_version option [ 180.080486][T10244] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.090371][T10244] journal_path: Lookup failure for './file2' [ 180.097042][T10244] EXT4-fs: error: could not find journal device path [ 180.193416][T10252] loop2: detected capacity change from 0 to 1024 [ 180.201044][T10254] FAULT_INJECTION: forcing a failure. [ 180.201044][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 180.204117][T10252] EXT4-fs: Ignoring removed orlov option [ 180.213721][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.3.2259 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 180.213815][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.213835][T10254] Call Trace: [ 180.213846][T10254] [ 180.213856][T10254] __dump_stack+0x1d/0x30 [ 180.213924][T10254] dump_stack_lvl+0xe8/0x140 [ 180.213951][T10254] dump_stack+0x15/0x1b [ 180.214013][T10254] should_fail_ex+0x265/0x280 [ 180.214124][T10254] should_failslab+0x8c/0xb0 [ 180.214157][T10254] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 180.214200][T10254] ? sidtab_sid2str_get+0xa0/0x130 [ 180.214267][T10254] kmemdup_noprof+0x2b/0x70 [ 180.214301][T10254] sidtab_sid2str_get+0xa0/0x130 [ 180.214335][T10254] security_sid_to_context_core+0x1eb/0x2e0 [ 180.214371][T10254] security_sid_to_context+0x27/0x40 [ 180.214448][T10254] selinux_lsmprop_to_secctx+0x67/0xf0 [ 180.214483][T10254] security_lsmprop_to_secctx+0x43/0x80 [ 180.214528][T10254] audit_log_task_context+0x77/0x190 [ 180.214623][T10254] audit_log_task+0xf4/0x250 [ 180.214744][T10254] audit_seccomp+0x61/0x100 [ 180.214783][T10254] ? __seccomp_filter+0x68c/0x10d0 [ 180.214869][T10254] __seccomp_filter+0x69d/0x10d0 [ 180.214904][T10254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.215005][T10254] ? vfs_write+0x75e/0x8e0 [ 180.215057][T10254] ? __rcu_read_unlock+0x4f/0x70 [ 180.215089][T10254] ? __fget_files+0x184/0x1c0 [ 180.215122][T10254] __secure_computing+0x82/0x150 [ 180.215201][T10254] syscall_trace_enter+0xcf/0x1e0 [ 180.215237][T10254] do_syscall_64+0xac/0x200 [ 180.215263][T10254] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.215301][T10254] ? clear_bhb_loop+0x40/0x90 [ 180.215376][T10254] ? clear_bhb_loop+0x40/0x90 [ 180.215407][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.215439][T10254] RIP: 0033:0x7f4df12ae929 [ 180.215460][T10254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.215486][T10254] RSP: 002b:00007f4def917038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 180.215553][T10254] RAX: ffffffffffffffda RBX: 00007f4df14d5fa0 RCX: 00007f4df12ae929 [ 180.215572][T10254] RDX: 0000200000000580 RSI: 0000000000000001 RDI: 0000000000000000 [ 180.215589][T10254] RBP: 00007f4def917090 R08: 0000000000000000 R09: 0000000000000000 [ 180.215607][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.215624][T10254] R13: 0000000000000000 R14: 00007f4df14d5fa0 R15: 00007ffef9a27628 [ 180.215651][T10254] [ 180.288546][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 180.288566][ T29] audit: type=1326 audit(1751494438.423:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10253 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 180.498540][ T29] audit: type=1326 audit(1751494438.503:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4df12ad33c code=0x7ffc0000 [ 180.521874][ T29] audit: type=1326 audit(1751494438.503:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4df12ad3df code=0x7ffc0000 [ 180.545228][ T29] audit: type=1326 audit(1751494438.503:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4df12ad58a code=0x7ffc0000 [ 180.568553][ T29] audit: type=1326 audit(1751494438.503:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 180.592100][ T29] audit: type=1326 audit(1751494438.503:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 180.622426][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 180.666185][T10259] FAULT_INJECTION: forcing a failure. [ 180.666185][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 180.679047][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.3.2263 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 180.679085][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.679098][T10259] Call Trace: [ 180.679105][T10259] [ 180.679113][T10259] __dump_stack+0x1d/0x30 [ 180.679166][T10259] dump_stack_lvl+0xe8/0x140 [ 180.679190][T10259] dump_stack+0x15/0x1b [ 180.679213][T10259] should_fail_ex+0x265/0x280 [ 180.679255][T10259] should_failslab+0x8c/0xb0 [ 180.679286][T10259] kmem_cache_alloc_node_noprof+0x57/0x320 [ 180.679415][T10259] ? __alloc_skb+0x101/0x320 [ 180.679523][T10259] __alloc_skb+0x101/0x320 [ 180.679563][T10259] netlink_alloc_large_skb+0xba/0xf0 [ 180.679605][T10259] netlink_sendmsg+0x3cf/0x6b0 [ 180.679664][T10259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.679691][T10259] __sock_sendmsg+0x145/0x180 [ 180.679755][T10259] ____sys_sendmsg+0x31e/0x4e0 [ 180.679864][T10259] ___sys_sendmsg+0x17b/0x1d0 [ 180.679924][T10259] __x64_sys_sendmsg+0xd4/0x160 [ 180.680024][T10259] x64_sys_call+0x2999/0x2fb0 [ 180.680093][T10259] do_syscall_64+0xd2/0x200 [ 180.680116][T10259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.680151][T10259] ? clear_bhb_loop+0x40/0x90 [ 180.680179][T10259] ? clear_bhb_loop+0x40/0x90 [ 180.680208][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.680291][T10259] RIP: 0033:0x7f4df12ae929 [ 180.680310][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.680334][T10259] RSP: 002b:00007f4def917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.680359][T10259] RAX: ffffffffffffffda RBX: 00007f4df14d5fa0 RCX: 00007f4df12ae929 [ 180.680375][T10259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.680391][T10259] RBP: 00007f4def917090 R08: 0000000000000000 R09: 0000000000000000 [ 180.680407][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.680492][T10259] R13: 0000000000000000 R14: 00007f4df14d5fa0 R15: 00007ffef9a27628 [ 180.680517][T10259] [ 180.963274][ T29] audit: type=1400 audit(1751494439.153:9774): avc: denied { watch watch_reads } for pid=10263 comm="syz.1.2262" path="/453" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.986827][ T29] audit: type=1400 audit(1751494439.163:9775): avc: denied { accept } for pid=10263 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.130266][T10277] siw: device registration error -23 [ 181.152741][T10277] loop4: detected capacity change from 0 to 512 [ 181.162545][T10277] EXT4-fs: Ignoring removed orlov option [ 181.176725][T10277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.196931][T10277] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.205842][T10277] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2270: bg 0: block 248: padding at end of block bitmap is not set [ 181.221407][ T29] audit: type=1326 audit(1751494439.443:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 181.231594][T10277] Quota error (device loop4): write_blk: dquota write failed [ 181.252445][T10277] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2270: Failed to acquire dquot type 1 [ 181.267065][T10277] EXT4-fs (loop4): 1 truncate cleaned up [ 181.299642][T10267] loop3: detected capacity change from 0 to 512 [ 181.315399][T10267] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.326979][T10267] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 181.337156][T10267] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2265: Corrupt directory, running e2fsck is recommended [ 181.363027][T10286] loop2: detected capacity change from 0 to 512 [ 181.372831][T10267] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 181.383162][T10286] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2272: bg 0: block 16: invalid block bitmap [ 181.396120][T10267] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2265: corrupted in-inode xattr: invalid ea_ino [ 181.410078][T10286] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 181.431295][T10286] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2272: attempt to clear invalid blocks 1669132790 len 1 [ 181.446885][T10267] EXT4-fs (loop3): Remounting filesystem read-only [ 181.465472][T10267] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 181.473983][T10286] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2272: invalid indirect mapped block 4294967295 (level 1) [ 181.537584][T10286] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2272: invalid indirect mapped block 4294967295 (level 2) [ 181.571313][T10286] EXT4-fs (loop2): 1 truncate cleaned up [ 181.602541][T10294] loop4: detected capacity change from 0 to 2048 [ 181.624383][T10296] SELinux: failed to load policy [ 181.691280][T10296] loop3: detected capacity change from 0 to 2048 [ 181.785071][T10296] loop3: p2 p3 p7 [ 181.799503][T10302] FAULT_INJECTION: forcing a failure. [ 181.799503][T10302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.812769][T10302] CPU: 1 UID: 0 PID: 10302 Comm: syz.1.2277 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 181.812827][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.812843][T10302] Call Trace: [ 181.812852][T10302] [ 181.812860][T10302] __dump_stack+0x1d/0x30 [ 181.812892][T10302] dump_stack_lvl+0xe8/0x140 [ 181.812916][T10302] dump_stack+0x15/0x1b [ 181.812934][T10302] should_fail_ex+0x265/0x280 [ 181.813018][T10302] should_fail+0xb/0x20 [ 181.813055][T10302] should_fail_usercopy+0x1a/0x20 [ 181.813128][T10302] _copy_from_user+0x1c/0xb0 [ 181.813155][T10302] ___sys_sendmsg+0xc1/0x1d0 [ 181.813296][T10302] __x64_sys_sendmsg+0xd4/0x160 [ 181.813346][T10302] x64_sys_call+0x2999/0x2fb0 [ 181.813440][T10302] do_syscall_64+0xd2/0x200 [ 181.813464][T10302] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.813499][T10302] ? clear_bhb_loop+0x40/0x90 [ 181.813526][T10302] ? clear_bhb_loop+0x40/0x90 [ 181.813553][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.813630][T10302] RIP: 0033:0x7fc56b0ae929 [ 181.813646][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.813784][T10302] RSP: 002b:00007fc569717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.813809][T10302] RAX: ffffffffffffffda RBX: 00007fc56b2d5fa0 RCX: 00007fc56b0ae929 [ 181.813825][T10302] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000005 [ 181.813839][T10302] RBP: 00007fc569717090 R08: 0000000000000000 R09: 0000000000000000 [ 181.813851][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.813863][T10302] R13: 0000000000000000 R14: 00007fc56b2d5fa0 R15: 00007ffebeecd578 [ 181.813889][T10302] [ 182.160510][T10300] SELinux: failed to load policy [ 182.183875][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 182.207998][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 182.383321][T10329] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 182.395325][T10329] SELinux: failed to load policy [ 182.492765][T10329] loop1: detected capacity change from 0 to 2048 [ 182.522702][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 182.544325][T10329] loop1: p2 p3 p7 [ 182.713584][T10361] FAULT_INJECTION: forcing a failure. [ 182.713584][T10361] name failslab, interval 1, probability 0, space 0, times 0 [ 182.726408][T10361] CPU: 0 UID: 0 PID: 10361 Comm: syz.4.2302 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 182.726454][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.726469][T10361] Call Trace: [ 182.726474][T10361] [ 182.726481][T10361] __dump_stack+0x1d/0x30 [ 182.726501][T10361] dump_stack_lvl+0xe8/0x140 [ 182.726521][T10361] dump_stack+0x15/0x1b [ 182.726537][T10361] should_fail_ex+0x265/0x280 [ 182.726631][T10361] should_failslab+0x8c/0xb0 [ 182.726666][T10361] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 182.726700][T10361] ? sidtab_sid2str_get+0xa0/0x130 [ 182.726816][T10361] kmemdup_noprof+0x2b/0x70 [ 182.726854][T10361] sidtab_sid2str_get+0xa0/0x130 [ 182.726878][T10361] security_sid_to_context_core+0x1eb/0x2e0 [ 182.726907][T10361] security_sid_to_context+0x27/0x40 [ 182.726935][T10361] selinux_lsmprop_to_secctx+0x67/0xf0 [ 182.727010][T10361] security_lsmprop_to_secctx+0x43/0x80 [ 182.727048][T10361] audit_log_task_context+0x77/0x190 [ 182.727173][T10361] audit_log_task+0xf4/0x250 [ 182.727213][T10361] audit_seccomp+0x61/0x100 [ 182.727248][T10361] ? __seccomp_filter+0x68c/0x10d0 [ 182.727309][T10361] __seccomp_filter+0x69d/0x10d0 [ 182.727339][T10361] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.727384][T10361] ? vfs_write+0x75e/0x8e0 [ 182.727549][T10361] __secure_computing+0x82/0x150 [ 182.727571][T10361] syscall_trace_enter+0xcf/0x1e0 [ 182.727595][T10361] do_syscall_64+0xac/0x200 [ 182.727613][T10361] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.727685][T10361] ? clear_bhb_loop+0x40/0x90 [ 182.727760][T10361] ? clear_bhb_loop+0x40/0x90 [ 182.727786][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.727807][T10361] RIP: 0033:0x7f87d489e929 [ 182.727821][T10361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.727891][T10361] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 182.727909][T10361] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 182.727920][T10361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 182.727935][T10361] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 182.727950][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.727965][T10361] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 182.728003][T10361] [ 183.039776][T10355] loop1: detected capacity change from 0 to 512 [ 183.054743][T10365] loop2: detected capacity change from 0 to 2048 [ 183.080679][T10355] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.092312][T10355] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 183.102408][T10355] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2296: Corrupt directory, running e2fsck is recommended [ 183.244995][T10355] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 183.267587][T10355] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2296: corrupted in-inode xattr: invalid ea_ino [ 183.292621][T10356] loop3: detected capacity change from 0 to 512 [ 183.299098][T10355] EXT4-fs (loop1): Remounting filesystem read-only [ 183.438441][T10355] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 183.456721][T10356] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.468468][T10356] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 183.478665][T10356] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2299: Corrupt directory, running e2fsck is recommended [ 183.492877][T10371] SELinux: failed to load policy [ 183.510295][T10356] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 183.525218][T10356] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2299: corrupted in-inode xattr: invalid ea_ino [ 183.565811][T10356] EXT4-fs (loop3): Remounting filesystem read-only [ 183.578884][T10380] loop4: detected capacity change from 0 to 512 [ 183.591328][T10383] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 183.596260][T10380] EXT4-fs: Ignoring removed i_version option [ 183.612054][T10380] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.618884][T10383] SELinux: failed to load policy [ 183.625479][T10356] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 183.628130][T10380] journal_path: Lookup failure for './file2' [ 183.640618][T10380] EXT4-fs: error: could not find journal device path [ 183.725809][T10390] FAULT_INJECTION: forcing a failure. [ 183.725809][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.739100][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.4.2310 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 183.739136][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.739152][T10390] Call Trace: [ 183.739159][T10390] [ 183.739165][T10390] __dump_stack+0x1d/0x30 [ 183.739188][T10390] dump_stack_lvl+0xe8/0x140 [ 183.739244][T10390] dump_stack+0x15/0x1b [ 183.739260][T10390] should_fail_ex+0x265/0x280 [ 183.739291][T10390] should_fail+0xb/0x20 [ 183.739379][T10390] should_fail_usercopy+0x1a/0x20 [ 183.739498][T10390] strncpy_from_user+0x25/0x230 [ 183.739524][T10390] ? kmem_cache_alloc_noprof+0x186/0x310 [ 183.739565][T10390] ? getname_flags+0x80/0x3b0 [ 183.739591][T10390] getname_flags+0xae/0x3b0 [ 183.739619][T10390] user_path_at+0x28/0x130 [ 183.739653][T10390] do_utimes+0xd9/0x210 [ 183.739709][T10390] __x64_sys_utimes+0xc6/0x180 [ 183.739736][T10390] ? syscall_trace_enter+0x102/0x1e0 [ 183.739764][T10390] x64_sys_call+0x2d6c/0x2fb0 [ 183.739840][T10390] do_syscall_64+0xd2/0x200 [ 183.739863][T10390] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.739981][T10390] ? clear_bhb_loop+0x40/0x90 [ 183.740004][T10390] ? clear_bhb_loop+0x40/0x90 [ 183.740029][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.740056][T10390] RIP: 0033:0x7f87d489e929 [ 183.740124][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.740158][T10390] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 183.740242][T10390] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 183.740257][T10390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 183.740291][T10390] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 183.740306][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.740321][T10390] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 183.740344][T10390] [ 183.995596][T10397] only policy match revision 0 supported [ 183.995638][T10397] unable to load match [ 184.158044][T10417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10417 comm=syz.3.2319 [ 184.227516][T10407] loop4: detected capacity change from 0 to 512 [ 184.237154][T10407] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.248929][T10407] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 184.261050][T10407] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2318: Corrupt directory, running e2fsck is recommended [ 184.276761][T10407] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 184.285359][T10407] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2318: corrupted in-inode xattr: invalid ea_ino [ 184.299841][T10407] EXT4-fs (loop4): Remounting filesystem read-only [ 184.308945][T10407] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 184.321856][T10416] loop2: detected capacity change from 0 to 512 [ 184.329958][T10416] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.341532][T10416] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 184.351737][T10416] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2322: Corrupt directory, running e2fsck is recommended [ 184.351989][T10416] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 184.352151][T10416] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2322: corrupted in-inode xattr: invalid ea_ino [ 184.352357][T10416] EXT4-fs (loop2): Remounting filesystem read-only [ 184.400287][T10416] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 184.432163][T10428] loop1: detected capacity change from 0 to 1024 [ 184.457623][T10428] EXT4-fs: Ignoring removed orlov option [ 184.463407][T10428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.521960][T10438] FAULT_INJECTION: forcing a failure. [ 184.521960][T10438] name failslab, interval 1, probability 0, space 0, times 0 [ 184.534794][T10438] CPU: 0 UID: 0 PID: 10438 Comm: syz.2.2327 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 184.534829][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.534845][T10438] Call Trace: [ 184.534883][T10438] [ 184.534903][T10438] __dump_stack+0x1d/0x30 [ 184.534924][T10438] dump_stack_lvl+0xe8/0x140 [ 184.534958][T10438] dump_stack+0x15/0x1b [ 184.534978][T10438] should_fail_ex+0x265/0x280 [ 184.535018][T10438] should_failslab+0x8c/0xb0 [ 184.535046][T10438] kmem_cache_alloc_noprof+0x50/0x310 [ 184.535103][T10438] ? getname_flags+0x80/0x3b0 [ 184.535134][T10438] getname_flags+0x80/0x3b0 [ 184.535219][T10438] user_path_at+0x28/0x130 [ 184.535259][T10438] do_sys_truncate+0x5c/0x130 [ 184.535285][T10438] __x64_sys_truncate+0x31/0x40 [ 184.535308][T10438] x64_sys_call+0x2920/0x2fb0 [ 184.535338][T10438] do_syscall_64+0xd2/0x200 [ 184.535361][T10438] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.535393][T10438] ? clear_bhb_loop+0x40/0x90 [ 184.535418][T10438] ? clear_bhb_loop+0x40/0x90 [ 184.535480][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.535572][T10438] RIP: 0033:0x7f00bf79e929 [ 184.535653][T10438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.535690][T10438] RSP: 002b:00007f00bde07038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 184.535715][T10438] RAX: ffffffffffffffda RBX: 00007f00bf9c5fa0 RCX: 00007f00bf79e929 [ 184.535732][T10438] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000040 [ 184.535746][T10438] RBP: 00007f00bde07090 R08: 0000000000000000 R09: 0000000000000000 [ 184.535801][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.535816][T10438] R13: 0000000000000000 R14: 00007f00bf9c5fa0 R15: 00007fffb8765ef8 [ 184.535840][T10438] [ 184.749266][T10442] loop2: detected capacity change from 0 to 512 [ 184.758595][T10442] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2329: bg 0: block 16: invalid block bitmap [ 184.771470][T10442] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 184.780779][T10442] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2329: attempt to clear invalid blocks 1669132790 len 1 [ 184.794808][T10442] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2329: invalid indirect mapped block 4294967295 (level 1) [ 184.819465][T10442] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2329: invalid indirect mapped block 4294967295 (level 2) [ 184.840468][T10442] EXT4-fs (loop2): 1 truncate cleaned up [ 184.851841][T10450] loop4: detected capacity change from 0 to 512 [ 184.862486][T10450] EXT4-fs: Ignoring removed i_version option [ 184.868655][T10450] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.875576][T10450] journal_path: Lookup failure for './file2' [ 184.881637][T10450] EXT4-fs: error: could not find journal device path [ 184.884198][T10456] loop1: detected capacity change from 0 to 1024 [ 184.896083][T10456] EXT4-fs: Ignoring removed orlov option [ 184.970522][T10465] loop4: detected capacity change from 0 to 1024 [ 184.997141][T10465] EXT4-fs: Ignoring removed orlov option [ 185.002901][T10465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.143574][T10462] loop2: detected capacity change from 0 to 512 [ 185.158788][T10462] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 185.170396][T10462] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 185.180534][T10462] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2336: Corrupt directory, running e2fsck is recommended [ 185.196819][T10462] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 185.216097][T10462] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2336: corrupted in-inode xattr: invalid ea_ino [ 185.232657][T10462] EXT4-fs (loop2): Remounting filesystem read-only [ 185.267965][T10462] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 185.295573][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2339'. [ 185.309683][T10484] loop4: detected capacity change from 0 to 1024 [ 185.384049][T10487] loop1: detected capacity change from 0 to 512 [ 185.395204][T10487] EXT4-fs: Ignoring removed i_version option [ 185.402635][T10487] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.411739][T10487] journal_path: Lookup failure for './file2' [ 185.419494][T10487] EXT4-fs: error: could not find journal device path [ 185.465961][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2345'. [ 185.498744][T10497] loop4: detected capacity change from 0 to 512 [ 185.507815][T10497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2346: bg 0: block 16: invalid block bitmap [ 185.520671][T10497] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 185.529677][T10497] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2346: attempt to clear invalid blocks 1669132790 len 1 [ 185.544043][T10497] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2346: invalid indirect mapped block 4294967295 (level 1) [ 185.552146][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'. [ 185.560279][T10497] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2346: invalid indirect mapped block 4294967295 (level 2) [ 185.581448][T10497] EXT4-fs (loop4): 1 truncate cleaned up [ 185.598966][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 185.649500][T10515] loop1: detected capacity change from 0 to 1024 [ 185.656343][T10515] EXT4-fs: Ignoring removed orlov option [ 185.668140][T10518] loop4: detected capacity change from 0 to 512 [ 185.678269][T10518] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.690697][T10518] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2354: corrupted xattr block 33: e_value out of bounds [ 185.713982][T10518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 185.723323][T10518] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2354: corrupted xattr block 33: e_value out of bounds [ 185.737999][T10518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 185.799205][T10518] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2354: corrupted xattr block 33: e_value out of bounds [ 185.814434][T10518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 185.823984][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 185.823997][ T29] audit: type=1400 audit(1751494444.043:10045): avc: denied { lock } for pid=10516 comm="syz.4.2354" path="/500/file1/syzkallers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.043163][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 186.075297][ T29] audit: type=1400 audit(1751494444.293:10046): avc: denied { ioctl } for pid=10533 comm="syz.0.2359" path="socket:[27894]" dev="sockfs" ino=27894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.127235][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 186.155528][T10540] FAULT_INJECTION: forcing a failure. [ 186.155528][T10540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.168785][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.0.2362 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 186.168839][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.168853][T10540] Call Trace: [ 186.168860][T10540] [ 186.168868][T10540] __dump_stack+0x1d/0x30 [ 186.168893][T10540] dump_stack_lvl+0xe8/0x140 [ 186.168923][T10540] dump_stack+0x15/0x1b [ 186.168944][T10540] should_fail_ex+0x265/0x280 [ 186.169117][T10540] should_fail+0xb/0x20 [ 186.169153][T10540] should_fail_usercopy+0x1a/0x20 [ 186.169191][T10540] _copy_from_iter+0xcf/0xe40 [ 186.169241][T10540] ? __build_skb_around+0x1a0/0x200 [ 186.169331][T10540] ? __alloc_skb+0x223/0x320 [ 186.169370][T10540] netlink_sendmsg+0x471/0x6b0 [ 186.169401][T10540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.169441][T10540] __sock_sendmsg+0x145/0x180 [ 186.169517][T10540] ____sys_sendmsg+0x31e/0x4e0 [ 186.169584][T10540] ___sys_sendmsg+0x17b/0x1d0 [ 186.169641][T10540] __x64_sys_sendmsg+0xd4/0x160 [ 186.169692][T10540] x64_sys_call+0x2999/0x2fb0 [ 186.169749][T10540] do_syscall_64+0xd2/0x200 [ 186.169776][T10540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.169863][T10540] ? clear_bhb_loop+0x40/0x90 [ 186.169892][T10540] ? clear_bhb_loop+0x40/0x90 [ 186.169917][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.169938][T10540] RIP: 0033:0x7f6bc0c3e929 [ 186.169954][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.169985][T10540] RSP: 002b:00007f6bbf2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.170009][T10540] RAX: ffffffffffffffda RBX: 00007f6bc0e65fa0 RCX: 00007f6bc0c3e929 [ 186.170023][T10540] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 186.170036][T10540] RBP: 00007f6bbf2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.170049][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.170065][T10540] R13: 0000000000000000 R14: 00007f6bc0e65fa0 R15: 00007fffb12826b8 [ 186.170089][T10540] [ 186.916281][T10553] loop2: detected capacity change from 0 to 512 [ 186.924383][T10553] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.936040][T10553] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 186.946241][T10553] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2365: Corrupt directory, running e2fsck is recommended [ 186.959394][T10553] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 186.967888][T10553] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2365: corrupted in-inode xattr: invalid ea_ino [ 186.982858][T10553] EXT4-fs (loop2): Remounting filesystem read-only [ 186.998517][T10548] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 187.109434][T10558] SELinux: failed to load policy [ 187.175478][T10561] loop2: detected capacity change from 0 to 512 [ 187.187948][T10561] EXT4-fs: Ignoring removed i_version option [ 187.194630][T10561] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.204095][T10561] journal_path: Lookup failure for './file2' [ 187.210680][T10561] EXT4-fs: error: could not find journal device path [ 187.307544][ T29] audit: type=1326 audit(1751494445.523:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.331268][ T29] audit: type=1326 audit(1751494445.523:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.355002][ T29] audit: type=1326 audit(1751494445.523:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.378757][ T29] audit: type=1326 audit(1751494445.523:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.402518][ T29] audit: type=1326 audit(1751494445.523:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.426131][ T29] audit: type=1326 audit(1751494445.523:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.450174][ T29] audit: type=1326 audit(1751494445.523:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.473854][ T29] audit: type=1326 audit(1751494445.523:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10562 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc56b0ae929 code=0x7ffc0000 [ 187.558025][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 187.567052][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 187.606285][T10570] wireguard8: entered promiscuous mode [ 187.611879][T10570] wireguard8: entered allmulticast mode [ 187.644919][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2369'. [ 187.928272][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 188.098502][T10593] loop3: detected capacity change from 0 to 512 [ 188.109092][T10593] EXT4-fs: Ignoring removed i_version option [ 188.115861][T10593] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.125316][T10593] journal_path: Lookup failure for './file2' [ 188.132037][T10593] EXT4-fs: error: could not find journal device path [ 188.181877][T10599] lo speed is unknown, defaulting to 1000 [ 188.275670][T10604] lo speed is unknown, defaulting to 1000 [ 188.535471][T10618] SELinux: failed to load policy [ 188.543483][T10613] loop4: detected capacity change from 0 to 512 [ 188.551807][T10613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2389: bg 0: block 16: invalid block bitmap [ 188.556147][T10623] loop3: detected capacity change from 0 to 1024 [ 188.566178][T10613] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 188.580038][T10623] EXT4-fs: Ignoring removed orlov option [ 188.586026][T10613] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2389: attempt to clear invalid blocks 1669132790 len 1 [ 188.601473][T10613] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2389: invalid indirect mapped block 4294967295 (level 1) [ 188.623099][T10613] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2389: invalid indirect mapped block 4294967295 (level 2) [ 188.672015][T10613] EXT4-fs (loop4): 1 truncate cleaned up [ 188.789732][T10644] loop2: detected capacity change from 0 to 512 [ 188.811558][T10644] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.833739][T10644] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2399: corrupted xattr block 33: e_value out of bounds [ 188.848663][T10644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 188.863618][T10644] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2399: corrupted xattr block 33: e_value out of bounds [ 188.877919][T10644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 188.886161][T10653] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2399: corrupted xattr block 33: e_value out of bounds [ 188.910062][T10653] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 188.980402][T10662] loop4: detected capacity change from 0 to 1024 [ 189.021163][T10662] EXT4-fs: Ignoring removed orlov option [ 189.233020][T10665] loop3: detected capacity change from 0 to 512 [ 189.248800][T10665] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.260352][T10665] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 189.270498][T10665] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2407: Corrupt directory, running e2fsck is recommended [ 189.284180][T10665] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 189.292619][T10665] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.2407: corrupted in-inode xattr: invalid ea_ino [ 189.306732][T10665] EXT4-fs (loop3): Remounting filesystem read-only [ 189.348136][T10665] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 189.494441][T10676] FAULT_INJECTION: forcing a failure. [ 189.494441][T10676] name failslab, interval 1, probability 0, space 0, times 0 [ 189.507154][T10676] CPU: 1 UID: 0 PID: 10676 Comm: syz.4.2410 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 189.507184][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.507197][T10676] Call Trace: [ 189.507204][T10676] [ 189.507212][T10676] __dump_stack+0x1d/0x30 [ 189.507311][T10676] dump_stack_lvl+0xe8/0x140 [ 189.507334][T10676] dump_stack+0x15/0x1b [ 189.507402][T10676] should_fail_ex+0x265/0x280 [ 189.507476][T10676] should_failslab+0x8c/0xb0 [ 189.507501][T10676] kmem_cache_alloc_node_noprof+0x57/0x320 [ 189.507535][T10676] ? __alloc_skb+0x101/0x320 [ 189.507670][T10676] __alloc_skb+0x101/0x320 [ 189.507770][T10676] ? audit_log_start+0x365/0x6c0 [ 189.507808][T10676] audit_log_start+0x380/0x6c0 [ 189.507852][T10676] audit_seccomp+0x48/0x100 [ 189.507967][T10676] ? __seccomp_filter+0x68c/0x10d0 [ 189.507998][T10676] __seccomp_filter+0x69d/0x10d0 [ 189.508029][T10676] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.508073][T10676] ? vfs_write+0x75e/0x8e0 [ 189.508173][T10676] ? __rcu_read_unlock+0x4f/0x70 [ 189.508201][T10676] ? __fget_files+0x184/0x1c0 [ 189.508230][T10676] __secure_computing+0x82/0x150 [ 189.508261][T10676] syscall_trace_enter+0xcf/0x1e0 [ 189.508305][T10676] do_syscall_64+0xac/0x200 [ 189.508327][T10676] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.508378][T10676] ? clear_bhb_loop+0x40/0x90 [ 189.508406][T10676] ? clear_bhb_loop+0x40/0x90 [ 189.508510][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.508532][T10676] RIP: 0033:0x7f87d489e929 [ 189.508550][T10676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.508668][T10676] RSP: 002b:00007f87d2f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 189.508693][T10676] RAX: ffffffffffffffda RBX: 00007f87d4ac5fa0 RCX: 00007f87d489e929 [ 189.508709][T10676] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 189.508724][T10676] RBP: 00007f87d2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 189.508739][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.508835][T10676] R13: 0000000000000000 R14: 00007f87d4ac5fa0 R15: 00007fffb5ac8ff8 [ 189.508860][T10676] [ 189.891146][T10692] siw: device registration error -23 [ 190.005299][T10700] smc: net device bond0 erased user defined pnetid SYZ0 [ 190.016057][T10703] loop4: detected capacity change from 0 to 512 [ 190.030818][T10703] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2422: Failed to acquire dquot type 1 [ 190.093252][T10703] EXT4-fs (loop4): 1 truncate cleaned up [ 190.101899][T10703] EXT4-fs mount: 76 callbacks suppressed [ 190.101917][T10703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.136786][T10703] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.160526][T10714] loop3: detected capacity change from 0 to 512 [ 190.177333][T10714] EXT4-fs: Ignoring removed i_version option [ 190.183402][T10714] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.214515][T10714] journal_path: Lookup failure for './file2' [ 190.220609][T10714] EXT4-fs: error: could not find journal device path [ 190.221600][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.279178][T10721] netlink: 'syz.4.2429': attribute type 4 has an invalid length. [ 190.420785][T10733] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.552077][T10748] FAULT_INJECTION: forcing a failure. [ 190.552077][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 190.564785][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.1.2440 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 190.564859][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.564876][T10748] Call Trace: [ 190.564884][T10748] [ 190.564893][T10748] __dump_stack+0x1d/0x30 [ 190.564919][T10748] dump_stack_lvl+0xe8/0x140 [ 190.564944][T10748] dump_stack+0x15/0x1b [ 190.564965][T10748] should_fail_ex+0x265/0x280 [ 190.565056][T10748] should_failslab+0x8c/0xb0 [ 190.565087][T10748] kmem_cache_alloc_noprof+0x50/0x310 [ 190.565166][T10748] ? getname_flags+0x80/0x3b0 [ 190.565198][T10748] getname_flags+0x80/0x3b0 [ 190.565227][T10748] __se_sys_newlstat+0x4b/0x280 [ 190.565265][T10748] ? fput+0x8f/0xc0 [ 190.565322][T10748] ? ksys_write+0x192/0x1a0 [ 190.565356][T10748] __x64_sys_newlstat+0x31/0x40 [ 190.565413][T10748] x64_sys_call+0x1c47/0x2fb0 [ 190.565443][T10748] do_syscall_64+0xd2/0x200 [ 190.565466][T10748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.565497][T10748] ? clear_bhb_loop+0x40/0x90 [ 190.565597][T10748] ? clear_bhb_loop+0x40/0x90 [ 190.565619][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.565709][T10748] RIP: 0033:0x7fc56b0ae929 [ 190.565729][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.565750][T10748] RSP: 002b:00007fc569717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 190.565770][T10748] RAX: ffffffffffffffda RBX: 00007fc56b2d5fa0 RCX: 00007fc56b0ae929 [ 190.565802][T10748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 190.565817][T10748] RBP: 00007fc569717090 R08: 0000000000000000 R09: 0000000000000000 [ 190.565833][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.565910][T10748] R13: 0000000000000000 R14: 00007fc56b2d5fa0 R15: 00007ffebeecd578 [ 190.565933][T10748] [ 190.857430][T10756] 9pnet_fd: Insufficient options for proto=fd [ 190.878901][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.939495][T10766] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.959782][T10767] loop2: detected capacity change from 0 to 1024 [ 190.966618][T10767] EXT4-fs: Ignoring removed orlov option [ 190.972416][T10767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.985071][T10768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10768 comm=syz.1.2449 [ 191.022637][T10767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.059393][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 191.059411][ T29] audit: type=1326 audit(1751494449.283:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10777 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 191.101422][ T29] audit: type=1326 audit(1751494449.313:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10777 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 191.125289][ T29] audit: type=1326 audit(1751494449.313:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10777 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc0c3e929 code=0x7ffc0000 [ 191.152797][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.232522][T10776] siw: device registration error -23 [ 191.252170][T10776] loop4: detected capacity change from 0 to 512 [ 191.273190][T10776] EXT4-fs: Ignoring removed orlov option [ 191.295620][T10776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.315176][T10776] EXT4-fs (loop4): orphan cleanup on readonly fs [ 191.322994][T10788] __nla_validate_parse: 4 callbacks suppressed [ 191.323007][T10788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2459'. [ 191.340082][T10776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2453: bg 0: block 248: padding at end of block bitmap is not set [ 191.355113][T10776] Quota error (device loop4): write_blk: dquota write failed [ 191.362563][T10776] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 191.372523][T10776] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2453: Failed to acquire dquot type 1 [ 191.384451][T10776] EXT4-fs (loop4): 1 truncate cleaned up [ 191.406728][T10776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.437083][T10793] lo speed is unknown, defaulting to 1000 [ 191.508738][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.667257][T10805] loop2: detected capacity change from 0 to 512 [ 191.690761][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 191.706739][T10805] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.726029][ T29] audit: type=1400 audit(1751494449.943:10125): avc: denied { setattr } for pid=10804 comm="syz.2.2465" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.777307][ T29] audit: type=1326 audit(1751494449.993:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 191.786006][T10811] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 191.801190][ T29] audit: type=1326 audit(1751494449.993:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 191.813188][T10811] SELinux: failed to load policy [ 191.836270][ T29] audit: type=1326 audit(1751494449.993:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 191.864974][ T29] audit: type=1326 audit(1751494449.993:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df12ae929 code=0x7ffc0000 [ 191.892016][T10817] loop1: detected capacity change from 0 to 512 [ 191.901351][T10818] 9pnet_fd: Insufficient options for proto=fd [ 191.907957][T10817] EXT4-fs: Ignoring removed i_version option [ 191.914186][T10817] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.920965][T10817] journal_path: Lookup failure for './file2' [ 191.927002][T10817] EXT4-fs: error: could not find journal device path [ 191.965774][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 192.010862][T10821] lo speed is unknown, defaulting to 1000 [ 192.071096][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2475'. [ 192.071633][T10826] lo speed is unknown, defaulting to 1000 [ 192.080126][T10831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'. [ 192.138730][T10835] loop4: detected capacity change from 0 to 1024 [ 192.145411][T10835] EXT4-fs: Ignoring removed orlov option [ 192.153697][T10835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.168589][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 192.203091][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2469'. [ 192.320208][T10850] sd 0:0:1:0: device reset [ 192.337030][T10854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10854 comm=syz.2.2480 [ 192.394375][T10858] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 192.406725][T10860] loop1: detected capacity change from 0 to 512 [ 192.413545][T10860] EXT4-fs: Ignoring removed i_version option [ 192.420159][T10860] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.427444][T10858] SELinux: failed to load policy [ 192.432695][T10860] journal_path: Lookup failure for './file2' [ 192.438754][T10860] EXT4-fs: error: could not find journal device path [ 192.557800][T10865] loop1: detected capacity change from 0 to 512 [ 192.564709][T10865] EXT4-fs: Ignoring removed orlov option [ 192.571353][T10865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.580997][T10865] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.590567][T10865] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2485: bg 0: block 248: padding at end of block bitmap is not set [ 192.630408][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.657401][T10865] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2485: Failed to acquire dquot type 1 [ 192.713537][T10865] EXT4-fs (loop1): 1 truncate cleaned up [ 192.727193][T10865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.810048][T10873] loop4: detected capacity change from 0 to 128 [ 192.820271][T10873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 192.849168][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.859779][T10873] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.883365][T10879] FAULT_INJECTION: forcing a failure. [ 192.883365][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.896671][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.1.2489 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 192.896762][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.896778][T10879] Call Trace: [ 192.896785][T10879] [ 192.896844][T10879] __dump_stack+0x1d/0x30 [ 192.896872][T10879] dump_stack_lvl+0xe8/0x140 [ 192.896898][T10879] dump_stack+0x15/0x1b [ 192.896918][T10879] should_fail_ex+0x265/0x280 [ 192.897038][T10879] should_fail+0xb/0x20 [ 192.897076][T10879] should_fail_usercopy+0x1a/0x20 [ 192.897120][T10879] _copy_to_user+0x20/0xa0 [ 192.897145][T10879] simple_read_from_buffer+0xb5/0x130 [ 192.897198][T10879] proc_fail_nth_read+0x100/0x140 [ 192.897241][T10879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.897285][T10879] vfs_read+0x1a0/0x6f0 [ 192.897402][T10879] ? __rcu_read_unlock+0x4f/0x70 [ 192.897431][T10879] ? __fget_files+0x184/0x1c0 [ 192.897463][T10879] ksys_read+0xda/0x1a0 [ 192.897505][T10879] __x64_sys_read+0x40/0x50 [ 192.897566][T10879] x64_sys_call+0x2d77/0x2fb0 [ 192.897625][T10879] do_syscall_64+0xd2/0x200 [ 192.897648][T10879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.897687][T10879] ? clear_bhb_loop+0x40/0x90 [ 192.897726][T10879] ? clear_bhb_loop+0x40/0x90 [ 192.897765][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.897790][T10879] RIP: 0033:0x7fc56b0ad33c [ 192.897809][T10879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.897870][T10879] RSP: 002b:00007fc569717030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.897889][T10879] RAX: ffffffffffffffda RBX: 00007fc56b2d5fa0 RCX: 00007fc56b0ad33c [ 192.897904][T10879] RDX: 000000000000000f RSI: 00007fc5697170a0 RDI: 0000000000000003 [ 192.897981][T10879] RBP: 00007fc569717090 R08: 0000000000000000 R09: 0000000000000000 [ 192.897993][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.898004][T10879] R13: 0000000000000001 R14: 00007fc56b2d5fa0 R15: 00007ffebeecd578 [ 192.898023][T10879] [ 192.992311][T10881] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 193.068598][T10880] sd 0:0:1:0: device reset [ 193.197867][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.205404][T10883] lo speed is unknown, defaulting to 1000 [ 193.238332][T10894] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.304902][T10899] loop4: detected capacity change from 0 to 1024 [ 193.318990][T10899] EXT4-fs: Ignoring removed orlov option [ 193.332871][T10899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.335592][T10901] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 193.358710][T10901] SELinux: failed to load policy [ 193.522490][T10910] only policy match revision 0 supported [ 193.522507][T10910] unable to load match [ 193.592010][T10919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10919 comm=syz.1.2501 [ 193.609431][T10921] loop2: detected capacity change from 0 to 1024 [ 193.616182][T10921] EXT4-fs: Ignoring removed orlov option [ 193.625726][T10921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.668896][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.840930][T10927] loop4: detected capacity change from 0 to 512 [ 193.847965][T10921] ================================================================== [ 193.856234][T10921] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 193.865504][T10921] [ 193.867854][T10921] write to 0xffff888106f768b8 of 4 bytes by task 10929 on cpu 1: [ 193.875609][T10921] writeback_single_inode+0x14a/0x3e0 [ 193.881024][T10921] sync_inode_metadata+0x5b/0x90 [ 193.886004][T10921] generic_buffers_fsync_noflush+0xd9/0x120 [ 193.891944][T10921] ext4_sync_file+0x1ab/0x690 [ 193.896661][T10921] vfs_fsync_range+0x10a/0x130 [ 193.901480][T10921] ext4_buffered_write_iter+0x34f/0x3c0 [ 193.907066][T10921] ext4_file_write_iter+0x383/0xf00 [ 193.912287][T10921] iter_file_splice_write+0x5ef/0x970 [ 193.917709][T10921] direct_splice_actor+0x153/0x2a0 [ 193.922869][T10921] splice_direct_to_actor+0x30f/0x680 [ 193.928294][T10921] do_splice_direct+0xda/0x150 [ 193.933100][T10921] do_sendfile+0x380/0x650 [ 193.937550][T10921] __x64_sys_sendfile64+0x105/0x150 [ 193.942779][T10921] x64_sys_call+0xb39/0x2fb0 [ 193.947407][T10921] do_syscall_64+0xd2/0x200 [ 193.951949][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.957887][T10921] [ 193.960231][T10921] read to 0xffff888106f768b8 of 4 bytes by task 10921 on cpu 0: [ 193.967890][T10921] generic_buffers_fsync_noflush+0x80/0x120 [ 193.973848][T10921] ext4_sync_file+0x1ab/0x690 [ 193.978573][T10921] vfs_fsync_range+0x10a/0x130 [ 193.983390][T10921] ext4_buffered_write_iter+0x34f/0x3c0 [ 193.988971][T10921] ext4_file_write_iter+0x383/0xf00 [ 193.994204][T10921] iter_file_splice_write+0x5ef/0x970 [ 193.999614][T10921] direct_splice_actor+0x153/0x2a0 [ 194.004775][T10921] splice_direct_to_actor+0x30f/0x680 [ 194.010190][T10921] do_splice_direct+0xda/0x150 [ 194.014991][T10921] do_sendfile+0x380/0x650 [ 194.019436][T10921] __x64_sys_sendfile64+0x105/0x150 [ 194.024668][T10921] x64_sys_call+0xb39/0x2fb0 [ 194.029281][T10921] do_syscall_64+0xd2/0x200 [ 194.033799][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.039729][T10921] [ 194.042087][T10921] value changed: 0x00000038 -> 0x00000002 [ 194.047818][T10921] [ 194.050163][T10921] Reported by Kernel Concurrency Sanitizer on: [ 194.056344][T10921] CPU: 0 UID: 0 PID: 10921 Comm: syz.2.2504 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 194.068888][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.078975][T10921] ================================================================== [ 194.093357][T10927] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.104925][T10927] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 194.115053][T10927] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2506: Corrupt directory, running e2fsck is recommended [ 194.139818][T10927] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 194.173766][T10927] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2506: corrupted in-inode xattr: invalid ea_ino [ 194.202398][T10927] EXT4-fs (loop4): Remounting filesystem read-only [ 194.223722][T10927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.237485][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.253455][T10927] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 194.312812][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.