last executing test programs: 2.975143355s ago: executing program 3 (id=2492): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000001c0)) semctl$IPC_RMID(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, 0x0, 0x40080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20080880}, 0x40804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x810) 2.781529358s ago: executing program 2 (id=2494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000ffff850000002f0000009500000000000000"], 0x0}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) mount(&(0x7f0000001000)=@sg0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001080)='trans=tMpS\xea~D\x1c\t\xacp,') setgroups(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001180)={'syztnl1\x00', &(0x7f00000010c0)={'syztnl0\x00', 0x0, 0x20, 0x80, 0x10, 0x2, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x64, 0x0, 0xf, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}, {[@rr={0x7, 0x7, 0xb2, [@dev={0xac, 0x14, 0x14, 0x41}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x9, "a1c213fe84d46c"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000011c0)={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7, 0x9, 0x5, 0x400, 0x80000001, 0x60108, r6}) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.719790468s ago: executing program 3 (id=2497): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x5, 0x5, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x290060, &(0x7f0000002f40)={[{@nodelalloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x12000, 0xfffffffffffffffd, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) membarrier(0x10, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) getpid() 2.653554669s ago: executing program 3 (id=2499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x181) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.9478773s ago: executing program 2 (id=2503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.705964834s ago: executing program 2 (id=2504): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a5c000000080a220300000000000000000a0000010c00064000000000000000020900020073797a31000000000800094000000002140005800800014000000021080001400000000814000580080002400000000108000100000000173c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003600000000c0a01020000000000000000010000000900020073797a32000000003400038030000080080006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0x120}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x94}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.591985135s ago: executing program 1 (id=2505): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) fchmod(r1, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.578096046s ago: executing program 3 (id=2507): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000001c0)) semctl$IPC_RMID(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, 0x0, 0x40080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20080880}, 0x40804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x810) 1.531757726s ago: executing program 0 (id=2509): openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400d4}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000007c0)='cachefiles_mark_inactive\x00', r1, 0x0, 0x8000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f0000000800)=0x10, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@initdev, @in=@initdev}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000880)=0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000840)={[{@none}, {@xattr}]}) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRES16, @ANYRESDEC=r7, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES32=r4, @ANYRESDEC=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2a, 0x5, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd0000fbdbdf2501000000080001000300000014020480050003000100000005446824c20003000100000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) getpid() io_setup(0x3, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.30542449s ago: executing program 0 (id=2510): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xbe3a}}, './file0\x00'}) ppoll(&(0x7f0000000200)=[{r2, 0xa010}, {r0, 0x200}], 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x5]}, 0x8) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) creat(&(0x7f0000000300)='./file0\x00', 0x20) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000002c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0x2, 0x0, 0x10, 0x9}, {0x0, 0x3, 0xa, 0x9}, {0x8, 0x7, 0x8, 0x916f}, {0x3, 0xa, 0x5, 0x8}, {0xf0, 0x35, 0x3, 0x8}, {0x0, 0xe, 0x62, 0x7}]}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000140)="dc89dee7", 0x4, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 1.30486572s ago: executing program 3 (id=2511): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) 851.678817ms ago: executing program 3 (id=2512): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) 752.846709ms ago: executing program 2 (id=2513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_NEWFLOWTABLE={0x340, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x10c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x208, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x21800000}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x390}, 0x1, 0x0, 0x0, 0x4004}, 0x4040) 615.62716ms ago: executing program 1 (id=2515): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) 615.2365ms ago: executing program 2 (id=2516): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000180)={[{@errors_remount}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@inlinecrypt}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") (async, rerun: 32) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async, rerun: 32) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000980)='./file0\x00', 0x0) 598.043591ms ago: executing program 1 (id=2517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x4000) 582.590941ms ago: executing program 1 (id=2518): socket(0x1e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x7d98, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x181) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) 521.453812ms ago: executing program 4 (id=2520): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3cfd}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='.\x00', 0x80000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x7, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffb, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r6, 0x47bc, 0x2, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1414}, 0x48) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x4, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xb8, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x4, 0x0, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x401, 0x5, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e24, 0x10, 0x2, 0x73, 0xe0c3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x10001, 0xa4, 0x4, 0x4}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xe8}}, 0x0) close(r2) 463.958763ms ago: executing program 2 (id=2521): r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a1ab0000ef883b57f81d01"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001340)=[{0x0}], 0x1) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="ff04001915000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f9ffffff85000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 372.348534ms ago: executing program 0 (id=2522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 278.736276ms ago: executing program 0 (id=2523): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) bind$qrtr(r1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_u}], [], 0x6b}}) 245.336846ms ago: executing program 4 (id=2524): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x300}}}}}}}, 0x0) 200.968807ms ago: executing program 4 (id=2525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f00000f9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x5, 0xd, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)=""/4096, &(0x7f0000000000)=0x1000) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x300}}}}}}}, 0x0) 182.343447ms ago: executing program 0 (id=2526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x65}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0xffff7fff, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xda99, 0x8}, 0xc) r10 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x1, &(0x7f0000000040)=@raw=[@generic={0x10, 0x2, 0x0, 0x1, 0xb4b}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x96, &(0x7f0000000340)=""/150, 0x40f00, 0x0, '\x00', r7, @fallback=0x26, r5, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x9, 0xfffff801, 0x401}, 0x10, r8, r0, 0x2, &(0x7f0000000780)=[r9, r10, 0x1], &(0x7f00000007c0)=[{0x1, 0x4, 0x3}, {0x5, 0x3, 0xf, 0xa}], 0x10, 0x7}, 0x94) 152.167898ms ago: executing program 4 (id=2527): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) 120.684718ms ago: executing program 1 (id=2528): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) bind$qrtr(r2, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r9}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_u}], [{@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r6}}, {@fowner_gt={'fowner>', r6}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '^\''}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '-'}}], 0x6b}}) 47.555919ms ago: executing program 0 (id=2529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 46.595149ms ago: executing program 4 (id=2530): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 868.15Âĩs ago: executing program 1 (id=2531): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bdad, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 4 (id=2532): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000180)='.\x00', 0x80000000) r5 = perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x987d0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0xc}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x37) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000140)={0xc, 0xffffffffffffffff, 0x0, 0x4}) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="190b0000dc431f4b17281669c2ce7ac36f093d52fc80fe2cb631e023c28914eb8119291a029e325621dc0bb09bc1bf008e60e9d16b289b5205beb65c00d5593e91a5b84626887cd4d381a1c991e295241bfdd1cde12c3fdcacfb99acf49bbd92228ffeb04068f5b3b616722a337679ccc554f5ff2a3eb114de40f1f122b5724ce653501dc407a6a122796c7613f6e1ad5c7f4ed7a0d9b1", @ANYRES16=r7, @ANYBLOB="05012abdf000fedbdf251b00000008001500c000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200010d4}, 0x800) close(r4) kernel console output (not intermixed with test programs): out journal. Quota mode: writeback. [ 144.827188][ T9234] loop4: detected capacity change from 0 to 2048 [ 144.840433][ T9234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.960478][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 145.110635][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.155095][ T1603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 145.177227][ T1603] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 145.190062][ T1603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.190062][ T1603] [ 145.199849][ T1603] EXT4-fs (loop4): Total free blocks count 0 [ 145.205976][ T1603] EXT4-fs (loop4): Free/Dirty block details [ 145.211907][ T1603] EXT4-fs (loop4): free_blocks=2415919504 [ 145.217850][ T1603] EXT4-fs (loop4): dirty_blocks=2336 [ 145.223386][ T1603] EXT4-fs (loop4): Block reservation details [ 145.229521][ T1603] EXT4-fs (loop4): i_reserved_data_blocks=146 [ 145.254798][ T1603] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 286 with error 28 [ 145.283122][ T9253] loop2: detected capacity change from 0 to 512 [ 145.313151][ T9253] EXT4-fs: Ignoring removed nobh option [ 145.427457][ T9253] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.439741][ T9253] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 145.449893][ T9253] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2056: Corrupt directory, running e2fsck is recommended [ 145.555122][ T9253] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 145.599560][ T9253] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2056: corrupted in-inode xattr: invalid ea_ino [ 145.634242][ T9253] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2056: couldn't read orphan inode 15 (err -117) [ 145.669583][ T9253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.709475][ T9277] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 145.816572][ T9253] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.828241][ T9253] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 145.839145][ T9253] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2056: Corrupt directory, running e2fsck is recommended [ 145.881103][ T9278] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.892695][ T9278] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 145.902845][ T9278] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2056: Corrupt directory, running e2fsck is recommended [ 145.958907][ T9280] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.970518][ T9280] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 145.981421][ T9280] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2056: Corrupt directory, running e2fsck is recommended [ 146.050158][ T9253] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 146.339026][ T9292] FAULT_INJECTION: forcing a failure. [ 146.339026][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.352289][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.4.2066 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 146.352324][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.352381][ T9292] Call Trace: [ 146.352386][ T9292] [ 146.352394][ T9292] __dump_stack+0x1d/0x30 [ 146.352414][ T9292] dump_stack_lvl+0xe8/0x140 [ 146.352433][ T9292] dump_stack+0x15/0x1b [ 146.352453][ T9292] should_fail_ex+0x265/0x280 [ 146.352487][ T9292] should_fail+0xb/0x20 [ 146.352521][ T9292] should_fail_usercopy+0x1a/0x20 [ 146.352629][ T9292] _copy_to_user+0x20/0xa0 [ 146.352656][ T9292] simple_read_from_buffer+0xb5/0x130 [ 146.352699][ T9292] proc_fail_nth_read+0x100/0x140 [ 146.352817][ T9292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.352923][ T9292] vfs_read+0x1a0/0x6f0 [ 146.352963][ T9292] ? __rcu_read_unlock+0x4f/0x70 [ 146.352994][ T9292] ? __fget_files+0x184/0x1c0 [ 146.353023][ T9292] ksys_read+0xda/0x1a0 [ 146.353058][ T9292] __x64_sys_read+0x40/0x50 [ 146.353152][ T9292] x64_sys_call+0x2d77/0x2fb0 [ 146.353184][ T9292] do_syscall_64+0xd2/0x200 [ 146.353206][ T9292] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.353251][ T9292] ? clear_bhb_loop+0x40/0x90 [ 146.353278][ T9292] ? clear_bhb_loop+0x40/0x90 [ 146.353305][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.353326][ T9292] RIP: 0033:0x7f0f2216d33c [ 146.353342][ T9292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.353364][ T9292] RSP: 002b:00007f0f207d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.353387][ T9292] RAX: ffffffffffffffda RBX: 00007f0f22395fa0 RCX: 00007f0f2216d33c [ 146.353471][ T9292] RDX: 000000000000000f RSI: 00007f0f207d70a0 RDI: 0000000000000007 [ 146.353485][ T9292] RBP: 00007f0f207d7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.353501][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.353516][ T9292] R13: 0000000000000000 R14: 00007f0f22395fa0 R15: 00007ffcb0d97c58 [ 146.353541][ T9292] [ 146.721407][ T9303] netlink: set zone limit has 4 unknown bytes [ 147.138145][ T9318] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2076'. [ 147.209636][ T9324] ucma_write: process 1066 (syz.1.2075) changed security contexts after opening file descriptor, this is not allowed. [ 147.222603][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 147.222621][ T29] audit: type=1400 audit(1751738075.886:5704): avc: denied { associate } for pid=9322 comm="syz.1.2075" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 147.278566][ T29] audit: type=1326 audit(1751738075.936:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.302137][ T29] audit: type=1326 audit(1751738075.936:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.325931][ T29] audit: type=1326 audit(1751738075.936:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.349606][ T29] audit: type=1326 audit(1751738075.936:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.373114][ T29] audit: type=1326 audit(1751738075.936:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.396907][ T29] audit: type=1326 audit(1751738075.936:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.420710][ T29] audit: type=1326 audit(1751738075.936:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.444362][ T29] audit: type=1326 audit(1751738075.936:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.467993][ T29] audit: type=1326 audit(1751738075.936:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 147.815810][ T9001] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 147.885216][ T9349] loop4: detected capacity change from 0 to 256 [ 148.261610][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.294100][ T9358] netlink: 'syz.0.2091': attribute type 30 has an invalid length. [ 148.385624][ T9367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2093'. [ 148.400388][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.411093][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.422974][ T9367] bond0 (unregistering): Released all slaves [ 148.443163][ T9371] FAULT_INJECTION: forcing a failure. [ 148.443163][ T9371] name failslab, interval 1, probability 0, space 0, times 0 [ 148.455871][ T9371] CPU: 1 UID: 0 PID: 9371 Comm: syz.1.2095 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 148.455906][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.455922][ T9371] Call Trace: [ 148.455981][ T9371] [ 148.455991][ T9371] __dump_stack+0x1d/0x30 [ 148.456098][ T9371] dump_stack_lvl+0xe8/0x140 [ 148.456122][ T9371] dump_stack+0x15/0x1b [ 148.456190][ T9371] should_fail_ex+0x265/0x280 [ 148.456229][ T9371] ? __hw_addr_add_ex+0x162/0x440 [ 148.456265][ T9371] should_failslab+0x8c/0xb0 [ 148.456321][ T9371] __kmalloc_cache_noprof+0x4c/0x320 [ 148.456351][ T9371] __hw_addr_add_ex+0x162/0x440 [ 148.456387][ T9371] dev_addr_init+0xb1/0x120 [ 148.456424][ T9371] alloc_netdev_mqs+0x212/0xab0 [ 148.456492][ T9371] ? __pfx_vlan_setup+0x10/0x10 [ 148.456571][ T9371] rtnl_create_link+0x239/0x710 [ 148.456615][ T9371] rtnl_newlink_create+0x14c/0x620 [ 148.456641][ T9371] ? __list_del_entry_valid_or_report+0x65/0x130 [ 148.456713][ T9371] rtnl_newlink+0xf29/0x12d0 [ 148.456753][ T9371] ? __kfree_skb+0x109/0x150 [ 148.456845][ T9371] ? __slab_free+0x77/0x270 [ 148.456872][ T9371] ? __rcu_read_unlock+0x4f/0x70 [ 148.456901][ T9371] ? avc_has_perm_noaudit+0x1b1/0x200 [ 148.457007][ T9371] ? selinux_capable+0x1f9/0x270 [ 148.457069][ T9371] ? security_capable+0x83/0x90 [ 148.457098][ T9371] ? ns_capable+0x7d/0xb0 [ 148.457116][ T9371] ? __pfx_rtnl_newlink+0x10/0x10 [ 148.457189][ T9371] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 148.457224][ T9371] netlink_rcv_skb+0x120/0x220 [ 148.457262][ T9371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.457328][ T9371] rtnetlink_rcv+0x1c/0x30 [ 148.457381][ T9371] netlink_unicast+0x5a1/0x670 [ 148.457466][ T9371] netlink_sendmsg+0x58b/0x6b0 [ 148.457568][ T9371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.457591][ T9371] __sock_sendmsg+0x145/0x180 [ 148.457616][ T9371] ____sys_sendmsg+0x31e/0x4e0 [ 148.457660][ T9371] ___sys_sendmsg+0x17b/0x1d0 [ 148.457742][ T9371] __x64_sys_sendmsg+0xd4/0x160 [ 148.457773][ T9371] x64_sys_call+0x2999/0x2fb0 [ 148.457814][ T9371] do_syscall_64+0xd2/0x200 [ 148.457832][ T9371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.457865][ T9371] ? clear_bhb_loop+0x40/0x90 [ 148.457889][ T9371] ? clear_bhb_loop+0x40/0x90 [ 148.457980][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.458008][ T9371] RIP: 0033:0x7fb65a61e929 [ 148.458027][ T9371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.458081][ T9371] RSP: 002b:00007fb658c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.458145][ T9371] RAX: ffffffffffffffda RBX: 00007fb65a845fa0 RCX: 00007fb65a61e929 [ 148.458161][ T9371] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 148.458236][ T9371] RBP: 00007fb658c87090 R08: 0000000000000000 R09: 0000000000000000 [ 148.458253][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.458269][ T9371] R13: 0000000000000000 R14: 00007fb65a845fa0 R15: 00007ffdbf891fc8 [ 148.458295][ T9371] [ 148.636461][ T9377] veth1_to_bond: entered allmulticast mode [ 148.678208][ T9382] loop1: detected capacity change from 0 to 512 [ 148.684046][ T9376] veth1_to_bond: left allmulticast mode [ 148.726547][ T9385] loop4: detected capacity change from 0 to 2048 [ 148.773777][ T9382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.833792][ T9382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.849865][ T9385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.850339][ T9401] FAULT_INJECTION: forcing a failure. [ 148.850339][ T9401] name failslab, interval 1, probability 0, space 0, times 0 [ 148.869015][ T9393] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 148.875380][ T9401] CPU: 0 UID: 0 PID: 9401 Comm: syz.2.2105 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 148.875478][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.875491][ T9401] Call Trace: [ 148.875496][ T9401] [ 148.875503][ T9401] __dump_stack+0x1d/0x30 [ 148.875604][ T9401] dump_stack_lvl+0xe8/0x140 [ 148.875772][ T9401] dump_stack+0x15/0x1b [ 148.875795][ T9401] should_fail_ex+0x265/0x280 [ 148.875911][ T9401] ? rtnl_newlink+0x5c/0x12d0 [ 148.875942][ T9401] should_failslab+0x8c/0xb0 [ 148.875976][ T9401] __kmalloc_cache_noprof+0x4c/0x320 [ 148.876019][ T9401] rtnl_newlink+0x5c/0x12d0 [ 148.876103][ T9401] ? __rcu_read_unlock+0x4f/0x70 [ 148.876133][ T9401] ? strncpy_from_user_nofault+0xe5/0xf0 [ 148.876165][ T9401] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 148.876209][ T9401] ? strncpy_from_user_nofault+0xe5/0xf0 [ 148.876305][ T9401] ? xas_load+0x413/0x430 [ 148.876350][ T9401] ? xas_load+0x413/0x430 [ 148.876439][ T9401] ? __rcu_read_unlock+0x4f/0x70 [ 148.876470][ T9401] ? xa_load+0xb1/0xe0 [ 148.876497][ T9401] ? __rcu_read_unlock+0x4f/0x70 [ 148.876586][ T9401] ? avc_has_perm_noaudit+0x1b1/0x200 [ 148.876688][ T9401] ? selinux_capable+0x1f9/0x270 [ 148.876830][ T9401] ? security_capable+0x83/0x90 [ 148.876937][ T9401] ? ns_capable+0x7d/0xb0 [ 148.877014][ T9401] ? __pfx_rtnl_newlink+0x10/0x10 [ 148.877047][ T9401] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 148.877091][ T9401] ? avc_has_perm_noaudit+0x1b1/0x200 [ 148.877199][ T9401] netlink_rcv_skb+0x120/0x220 [ 148.877303][ T9401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.877346][ T9401] rtnetlink_rcv+0x1c/0x30 [ 148.877432][ T9401] netlink_unicast+0x5a1/0x670 [ 148.877605][ T9401] netlink_sendmsg+0x58b/0x6b0 [ 148.877636][ T9401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.877664][ T9401] __sock_sendmsg+0x145/0x180 [ 148.877771][ T9401] ____sys_sendmsg+0x31e/0x4e0 [ 148.877822][ T9401] ___sys_sendmsg+0x17b/0x1d0 [ 148.877942][ T9401] __x64_sys_sendmsg+0xd4/0x160 [ 148.877976][ T9401] x64_sys_call+0x2999/0x2fb0 [ 148.878008][ T9401] do_syscall_64+0xd2/0x200 [ 148.878032][ T9401] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.878103][ T9401] ? clear_bhb_loop+0x40/0x90 [ 148.878148][ T9401] ? clear_bhb_loop+0x40/0x90 [ 148.878178][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.878216][ T9401] RIP: 0033:0x7f620efce929 [ 148.878265][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.878291][ T9401] RSP: 002b:00007f620d637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.878318][ T9401] RAX: ffffffffffffffda RBX: 00007f620f1f5fa0 RCX: 00007f620efce929 [ 148.878345][ T9401] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000006 [ 148.878360][ T9401] RBP: 00007f620d637090 R08: 0000000000000000 R09: 0000000000000000 [ 148.878377][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.878394][ T9401] R13: 0000000000000000 R14: 00007f620f1f5fa0 R15: 00007ffc7c98e8d8 [ 148.878422][ T9401] [ 148.917092][ T9382] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.943888][ T9394] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 149.127582][ T9405] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2107'. [ 149.217073][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2107'. [ 149.226642][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2107'. [ 149.241039][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.261099][ T9405] loop3: detected capacity change from 0 to 128 [ 149.277736][ T9393] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 149.278064][ T9394] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 149.288554][ T9413] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 149.319414][ T9417] FAULT_INJECTION: forcing a failure. [ 149.319414][ T9417] name failslab, interval 1, probability 0, space 0, times 0 [ 149.332126][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.1.2108 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 149.332161][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.332214][ T9417] Call Trace: [ 149.332221][ T9417] [ 149.332230][ T9417] __dump_stack+0x1d/0x30 [ 149.332256][ T9417] dump_stack_lvl+0xe8/0x140 [ 149.332282][ T9417] dump_stack+0x15/0x1b [ 149.332303][ T9417] should_fail_ex+0x265/0x280 [ 149.332343][ T9417] should_failslab+0x8c/0xb0 [ 149.332407][ T9417] __kmalloc_cache_node_noprof+0x54/0x320 [ 149.332526][ T9417] ? __get_vm_area_node+0x106/0x1d0 [ 149.332568][ T9417] __get_vm_area_node+0x106/0x1d0 [ 149.332608][ T9417] __vmalloc_node_range_noprof+0x273/0xe00 [ 149.332815][ T9417] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 149.332868][ T9417] ? mntput_no_expire+0x6f/0x3c0 [ 149.332903][ T9417] ? __rcu_read_unlock+0x4f/0x70 [ 149.333007][ T9417] ? selinux_capable+0x1f9/0x270 [ 149.333047][ T9417] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 149.333087][ T9417] __vmalloc_noprof+0x83/0xc0 [ 149.333162][ T9417] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 149.333203][ T9417] bpf_prog_alloc_no_stats+0x47/0x390 [ 149.333244][ T9417] ? bpf_prog_alloc+0x2a/0x150 [ 149.333298][ T9417] bpf_prog_alloc+0x3c/0x150 [ 149.333337][ T9417] bpf_prog_load+0x514/0x1070 [ 149.333404][ T9417] ? security_bpf+0x2b/0x90 [ 149.333442][ T9417] __sys_bpf+0x51d/0x790 [ 149.333492][ T9417] __x64_sys_bpf+0x41/0x50 [ 149.333526][ T9417] x64_sys_call+0x2478/0x2fb0 [ 149.333553][ T9417] do_syscall_64+0xd2/0x200 [ 149.333636][ T9417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.333670][ T9417] ? clear_bhb_loop+0x40/0x90 [ 149.333697][ T9417] ? clear_bhb_loop+0x40/0x90 [ 149.333733][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.333761][ T9417] RIP: 0033:0x7fb65a61e929 [ 149.333853][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.333876][ T9417] RSP: 002b:00007fb658c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.333899][ T9417] RAX: ffffffffffffffda RBX: 00007fb65a845fa0 RCX: 00007fb65a61e929 [ 149.333919][ T9417] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 149.333931][ T9417] RBP: 00007fb658c87090 R08: 0000000000000000 R09: 0000000000000000 [ 149.333942][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.334030][ T9417] R13: 0000000000000000 R14: 00007fb65a845fa0 R15: 00007ffdbf891fc8 [ 149.334056][ T9417] [ 149.358225][ T9413] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 149.360236][ T9417] syz.1.2108: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 149.362800][ T9413] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.362800][ T9413] [ 149.362819][ T9413] EXT4-fs (loop4): Total free blocks count 0 [ 149.362836][ T9413] EXT4-fs (loop4): Free/Dirty block details [ 149.362851][ T9413] EXT4-fs (loop4): free_blocks=2415919504 [ 149.362868][ T9413] EXT4-fs (loop4): dirty_blocks=1728 [ 149.367283][ T9417] ,cpuset=/,mems_allowed=0 [ 149.367317][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.1.2108 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 149.367348][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.367364][ T9417] Call Trace: [ 149.367371][ T9417] [ 149.367413][ T9417] __dump_stack+0x1d/0x30 [ 149.367439][ T9417] dump_stack_lvl+0xe8/0x140 [ 149.367461][ T9417] dump_stack+0x15/0x1b [ 149.367482][ T9417] warn_alloc+0x12b/0x1a0 [ 149.367528][ T9417] __vmalloc_node_range_noprof+0x297/0xe00 [ 149.367599][ T9417] ? mntput_no_expire+0x6f/0x3c0 [ 149.367660][ T9417] ? __rcu_read_unlock+0x4f/0x70 [ 149.367765][ T9417] ? selinux_capable+0x1f9/0x270 [ 149.367804][ T9417] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 149.367849][ T9417] __vmalloc_noprof+0x83/0xc0 [ 149.367887][ T9417] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 149.367925][ T9417] bpf_prog_alloc_no_stats+0x47/0x390 [ 149.368024][ T9417] ? bpf_prog_alloc+0x2a/0x150 [ 149.368068][ T9417] bpf_prog_alloc+0x3c/0x150 [ 149.368115][ T9417] bpf_prog_load+0x514/0x1070 [ 149.368205][ T9417] ? security_bpf+0x2b/0x90 [ 149.368236][ T9417] __sys_bpf+0x51d/0x790 [ 149.368302][ T9417] __x64_sys_bpf+0x41/0x50 [ 149.368417][ T9417] x64_sys_call+0x2478/0x2fb0 [ 149.368447][ T9417] do_syscall_64+0xd2/0x200 [ 149.368472][ T9417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.368509][ T9417] ? clear_bhb_loop+0x40/0x90 [ 149.368540][ T9417] ? clear_bhb_loop+0x40/0x90 [ 149.368597][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.368636][ T9417] RIP: 0033:0x7fb65a61e929 [ 149.368657][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.368682][ T9417] RSP: 002b:00007fb658c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.368715][ T9417] RAX: ffffffffffffffda RBX: 00007fb65a845fa0 RCX: 00007fb65a61e929 [ 149.368733][ T9417] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 149.368790][ T9417] RBP: 00007fb658c87090 R08: 0000000000000000 R09: 0000000000000000 [ 149.368807][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.368824][ T9417] R13: 0000000000000000 R14: 00007fb65a845fa0 R15: 00007ffdbf891fc8 [ 149.368851][ T9417] [ 149.368873][ T9417] Mem-Info: [ 149.372512][ T9413] EXT4-fs (loop4): Block reservation details [ 149.376688][ T9417] active_anon:6935 inactive_anon:13 isolated_anon:0 [ 149.376688][ T9417] active_file:5938 inactive_file:3288 isolated_file:0 [ 149.376688][ T9417] unevictable:0 dirty:967 writeback:0 [ 149.376688][ T9417] slab_reclaimable:3193 slab_unreclaimable:50260 [ 149.376688][ T9417] mapped:31762 shmem:3318 pagetables:1243 [ 149.376688][ T9417] sec_pagetables:0 bounce:0 [ 149.376688][ T9417] kernel_misc_reclaimable:0 [ 149.376688][ T9417] free:1871097 free_pcp:1638 free_cma:0 [ 149.381414][ T9413] EXT4-fs (loop4): i_reserved_data_blocks=108 [ 149.387531][ T9413] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 149.391855][ T9417] Node 0 active_anon:27740kB inactive_anon:52kB active_file:23752kB inactive_file:13384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131224kB dirty:4100kB writeback:0kB shmem:13272kB writeback_tmp:0kB kernel_stack:3936kB pagetables:4972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.973942][ T9417] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.002749][ T9417] lowmem_reserve[]: 0 2882 7860 7860 [ 150.008152][ T9417] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 150.038580][ T9417] lowmem_reserve[]: 0 0 4978 4978 [ 150.043810][ T9417] Node 0 Normal free:4513224kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16108kB inactive_anon:52kB active_file:23752kB inactive_file:21068kB unevictable:0kB writepending:11884kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:13992kB local_pcp:1112kB free_cma:0kB [ 150.076037][ T9417] lowmem_reserve[]: 0 0 0 0 [ 150.080701][ T9417] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.093500][ T9417] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 150.109728][ T9417] Node 0 Normal: 300*4kB (UME) 905*8kB (UM) 802*16kB (UME) 675*32kB (UME) 429*64kB (UME) 290*128kB (UME) 276*256kB (UME) 231*512kB (UME) 194*1024kB (UME) 100*2048kB (UM) 931*4096kB (UM) = 4513208kB [ 150.129279][ T9417] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 150.138613][ T9417] 11709 total pagecache pages [ 150.143302][ T9417] 10 pages in swap cache [ 150.147559][ T9417] Free swap = 123932kB [ 150.151731][ T9417] Total swap = 124996kB [ 150.155884][ T9417] 2097051 pages RAM [ 150.159688][ T9417] 0 pages HighMem/MovableOnly [ 150.164378][ T9417] 80813 pages reserved [ 150.219907][ T9439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=9439 comm=syz.1.2118 [ 150.267218][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2118'. [ 150.297298][ T9445] random: crng reseeded on system resumption [ 150.337138][ T9445] loop3: detected capacity change from 0 to 1024 [ 150.346730][ T9451] FAULT_INJECTION: forcing a failure. [ 150.346730][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.346770][ T9449] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 150.359962][ T9451] CPU: 1 UID: 0 PID: 9451 Comm: syz.0.2123 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 150.360000][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.360017][ T9451] Call Trace: [ 150.360063][ T9451] [ 150.360072][ T9451] __dump_stack+0x1d/0x30 [ 150.360125][ T9451] dump_stack_lvl+0xe8/0x140 [ 150.360151][ T9451] dump_stack+0x15/0x1b [ 150.360172][ T9451] should_fail_ex+0x265/0x280 [ 150.360212][ T9451] should_fail+0xb/0x20 [ 150.360317][ T9451] should_fail_usercopy+0x1a/0x20 [ 150.360360][ T9451] _copy_to_user+0x20/0xa0 [ 150.360388][ T9451] simple_read_from_buffer+0xb5/0x130 [ 150.360496][ T9451] proc_fail_nth_read+0x100/0x140 [ 150.360541][ T9451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.360643][ T9451] vfs_read+0x1a0/0x6f0 [ 150.360681][ T9451] ? putname+0xda/0x100 [ 150.360755][ T9451] ? __rcu_read_unlock+0x4f/0x70 [ 150.360788][ T9451] ? __fget_files+0x184/0x1c0 [ 150.360892][ T9451] ksys_read+0xda/0x1a0 [ 150.361002][ T9451] __x64_sys_read+0x40/0x50 [ 150.361041][ T9451] x64_sys_call+0x2d77/0x2fb0 [ 150.361070][ T9451] do_syscall_64+0xd2/0x200 [ 150.361117][ T9451] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.361146][ T9451] ? clear_bhb_loop+0x40/0x90 [ 150.361173][ T9451] ? clear_bhb_loop+0x40/0x90 [ 150.361231][ T9451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.361259][ T9451] RIP: 0033:0x7f477984d33c [ 150.361279][ T9451] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.361411][ T9451] RSP: 002b:00007f4777eb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.361436][ T9451] RAX: ffffffffffffffda RBX: 00007f4779a75fa0 RCX: 00007f477984d33c [ 150.361448][ T9451] RDX: 000000000000000f RSI: 00007f4777eb70a0 RDI: 0000000000000006 [ 150.361462][ T9451] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.361487][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.361503][ T9451] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 150.361528][ T9451] [ 150.369255][ T9445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.373874][ T9445] ext4: Unknown parameter '' [ 150.711746][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.722225][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2124'. [ 150.749150][ T9520] can0: slcan on ttyS3. [ 150.801782][ T9449] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.813852][ T9525] FAULT_INJECTION: forcing a failure. [ 150.813852][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.827598][ T9519] can0 (unregistered): slcan off ttyS3. [ 150.852246][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.0.2127 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 150.852350][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.852366][ T9525] Call Trace: [ 150.852373][ T9525] [ 150.852382][ T9525] __dump_stack+0x1d/0x30 [ 150.852408][ T9525] dump_stack_lvl+0xe8/0x140 [ 150.852429][ T9525] dump_stack+0x15/0x1b [ 150.852450][ T9525] should_fail_ex+0x265/0x280 [ 150.852544][ T9525] should_fail+0xb/0x20 [ 150.852575][ T9525] should_fail_usercopy+0x1a/0x20 [ 150.852656][ T9525] _copy_to_user+0x20/0xa0 [ 150.852684][ T9525] simple_read_from_buffer+0xb5/0x130 [ 150.852794][ T9525] proc_fail_nth_read+0x100/0x140 [ 150.852884][ T9525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.852925][ T9525] vfs_read+0x1a0/0x6f0 [ 150.852967][ T9525] ? __rcu_read_unlock+0x4f/0x70 [ 150.852995][ T9525] ? __fget_files+0x184/0x1c0 [ 150.853018][ T9525] ksys_read+0xda/0x1a0 [ 150.853051][ T9525] __x64_sys_read+0x40/0x50 [ 150.853183][ T9525] x64_sys_call+0x2d77/0x2fb0 [ 150.853264][ T9525] do_syscall_64+0xd2/0x200 [ 150.853287][ T9525] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.853322][ T9525] ? clear_bhb_loop+0x40/0x90 [ 150.853347][ T9525] ? clear_bhb_loop+0x40/0x90 [ 150.853376][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.853491][ T9525] RIP: 0033:0x7f477984d33c [ 150.853506][ T9525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.853527][ T9525] RSP: 002b:00007f4777eb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.853550][ T9525] RAX: ffffffffffffffda RBX: 00007f4779a75fa0 RCX: 00007f477984d33c [ 150.853601][ T9525] RDX: 000000000000000f RSI: 00007f4777eb70a0 RDI: 0000000000000008 [ 150.853614][ T9525] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.853627][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.853668][ T9525] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 150.853689][ T9525] [ 150.905425][ T9531] FAULT_INJECTION: forcing a failure. [ 150.905425][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 150.957177][ T9535] FAULT_INJECTION: forcing a failure. [ 150.957177][ T9535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.960562][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.1.2128 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 150.960695][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.960710][ T9531] Call Trace: [ 150.960717][ T9531] [ 150.960726][ T9531] __dump_stack+0x1d/0x30 [ 150.960752][ T9531] dump_stack_lvl+0xe8/0x140 [ 150.960815][ T9531] dump_stack+0x15/0x1b [ 150.960841][ T9531] should_fail_ex+0x265/0x280 [ 150.960876][ T9531] should_failslab+0x8c/0xb0 [ 150.960906][ T9531] kmem_cache_alloc_noprof+0x50/0x310 [ 150.960942][ T9531] ? skb_clone+0x151/0x1f0 [ 150.960966][ T9531] skb_clone+0x151/0x1f0 [ 150.961069][ T9531] __netlink_deliver_tap+0x2c9/0x500 [ 150.961148][ T9531] netlink_unicast+0x64c/0x670 [ 150.961188][ T9531] netlink_sendmsg+0x58b/0x6b0 [ 150.961216][ T9531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.961244][ T9531] __sock_sendmsg+0x145/0x180 [ 150.961280][ T9531] ____sys_sendmsg+0x31e/0x4e0 [ 150.961404][ T9531] ___sys_sendmsg+0x17b/0x1d0 [ 150.961475][ T9531] __x64_sys_sendmsg+0xd4/0x160 [ 150.961508][ T9531] x64_sys_call+0x2999/0x2fb0 [ 150.961539][ T9531] do_syscall_64+0xd2/0x200 [ 150.961574][ T9531] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.961663][ T9531] ? clear_bhb_loop+0x40/0x90 [ 150.961694][ T9531] ? clear_bhb_loop+0x40/0x90 [ 150.961725][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.961756][ T9531] RIP: 0033:0x7fb65a61e929 [ 150.961778][ T9531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.961810][ T9531] RSP: 002b:00007fb658c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.961835][ T9531] RAX: ffffffffffffffda RBX: 00007fb65a845fa0 RCX: 00007fb65a61e929 [ 150.961852][ T9531] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 150.961870][ T9531] RBP: 00007fb658c87090 R08: 0000000000000000 R09: 0000000000000000 [ 150.961905][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.961939][ T9531] R13: 0000000000000000 R14: 00007fb65a845fa0 R15: 00007ffdbf891fc8 [ 150.962015][ T9531] [ 151.226025][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2133'. [ 151.228561][ T9535] CPU: 0 UID: 0 PID: 9535 Comm: syz.3.2131 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 151.228625][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.228644][ T9535] Call Trace: [ 151.228663][ T9535] [ 151.228675][ T9535] __dump_stack+0x1d/0x30 [ 151.228707][ T9535] dump_stack_lvl+0xe8/0x140 [ 151.228777][ T9535] dump_stack+0x15/0x1b [ 151.228800][ T9535] should_fail_ex+0x265/0x280 [ 151.228846][ T9535] should_fail+0xb/0x20 [ 151.228907][ T9535] should_fail_usercopy+0x1a/0x20 [ 151.228952][ T9535] _copy_from_iter+0xcf/0xe40 [ 151.228997][ T9535] ? __build_skb_around+0x1a0/0x200 [ 151.229096][ T9535] ? __alloc_skb+0x223/0x320 [ 151.229191][ T9535] netlink_sendmsg+0x471/0x6b0 [ 151.229271][ T9535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.229301][ T9535] __sock_sendmsg+0x145/0x180 [ 151.229385][ T9535] ____sys_sendmsg+0x31e/0x4e0 [ 151.229451][ T9535] ___sys_sendmsg+0x17b/0x1d0 [ 151.229522][ T9535] __x64_sys_sendmsg+0xd4/0x160 [ 151.229555][ T9535] x64_sys_call+0x2999/0x2fb0 [ 151.229660][ T9535] do_syscall_64+0xd2/0x200 [ 151.229686][ T9535] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.229732][ T9535] ? clear_bhb_loop+0x40/0x90 [ 151.229832][ T9535] ? clear_bhb_loop+0x40/0x90 [ 151.229863][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.229895][ T9535] RIP: 0033:0x7f68b26be929 [ 151.229993][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.230019][ T9535] RSP: 002b:00007f68b0d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.230044][ T9535] RAX: ffffffffffffffda RBX: 00007f68b28e5fa0 RCX: 00007f68b26be929 [ 151.230064][ T9535] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 151.230082][ T9535] RBP: 00007f68b0d27090 R08: 0000000000000000 R09: 0000000000000000 [ 151.230099][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.230120][ T9535] R13: 0000000000000000 R14: 00007f68b28e5fa0 R15: 00007fff14ff5e18 [ 151.230151][ T9535] [ 151.551211][ T9545] SELinux: syz.3.2135 (9545) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.564990][ T9545] FAULT_INJECTION: forcing a failure. [ 151.564990][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 151.577736][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.3.2135 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 151.577778][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.577794][ T9545] Call Trace: [ 151.577801][ T9545] [ 151.577810][ T9545] __dump_stack+0x1d/0x30 [ 151.577853][ T9545] dump_stack_lvl+0xe8/0x140 [ 151.577878][ T9545] dump_stack+0x15/0x1b [ 151.577899][ T9545] should_fail_ex+0x265/0x280 [ 151.577940][ T9545] should_failslab+0x8c/0xb0 [ 151.577997][ T9545] __kmalloc_noprof+0xa5/0x3e0 [ 151.578087][ T9545] ? sel_write_user+0x1ac/0x440 [ 151.578124][ T9545] sel_write_user+0x1ac/0x440 [ 151.578233][ T9545] selinux_transaction_write+0xc3/0x110 [ 151.578345][ T9545] ? __pfx_selinux_transaction_write+0x10/0x10 [ 151.578380][ T9545] vfs_write+0x269/0x8e0 [ 151.578456][ T9545] ? __rcu_read_unlock+0x4f/0x70 [ 151.578519][ T9545] ? __fget_files+0x184/0x1c0 [ 151.578544][ T9545] ksys_write+0xda/0x1a0 [ 151.578594][ T9545] __x64_sys_write+0x40/0x50 [ 151.578774][ T9545] x64_sys_call+0x2cdd/0x2fb0 [ 151.578799][ T9545] do_syscall_64+0xd2/0x200 [ 151.578822][ T9545] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.578857][ T9545] ? clear_bhb_loop+0x40/0x90 [ 151.578928][ T9545] ? clear_bhb_loop+0x40/0x90 [ 151.578951][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.578972][ T9545] RIP: 0033:0x7f68b26be929 [ 151.578987][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.579047][ T9545] RSP: 002b:00007f68b0d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.579071][ T9545] RAX: ffffffffffffffda RBX: 00007f68b28e5fa0 RCX: 00007f68b26be929 [ 151.579087][ T9545] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000005 [ 151.579103][ T9545] RBP: 00007f68b0d27090 R08: 0000000000000000 R09: 0000000000000000 [ 151.579117][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.579132][ T9545] R13: 0000000000000000 R14: 00007f68b28e5fa0 R15: 00007fff14ff5e18 [ 151.579178][ T9545] [ 151.593097][ T9548] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2137'. [ 151.725220][ T9560] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 151.762489][ T9562] FAULT_INJECTION: forcing a failure. [ 151.762489][ T9562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.783548][ T9560] SELinux: failed to load policy [ 151.789343][ T9562] CPU: 0 UID: 0 PID: 9562 Comm: syz.4.2139 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 151.789381][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.789399][ T9562] Call Trace: [ 151.789409][ T9562] [ 151.789434][ T9562] __dump_stack+0x1d/0x30 [ 151.789466][ T9562] dump_stack_lvl+0xe8/0x140 [ 151.789494][ T9562] dump_stack+0x15/0x1b [ 151.789519][ T9562] should_fail_ex+0x265/0x280 [ 151.789584][ T9562] should_fail+0xb/0x20 [ 151.789623][ T9562] should_fail_usercopy+0x1a/0x20 [ 151.789669][ T9562] _copy_from_iter+0xcf/0xe40 [ 151.789716][ T9562] ? __build_skb_around+0x1a0/0x200 [ 151.789820][ T9562] ? __alloc_skb+0x223/0x320 [ 151.789865][ T9562] netlink_sendmsg+0x471/0x6b0 [ 151.789897][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.789927][ T9562] __sock_sendmsg+0x145/0x180 [ 151.789963][ T9562] ____sys_sendmsg+0x31e/0x4e0 [ 151.790069][ T9562] ___sys_sendmsg+0x17b/0x1d0 [ 151.790139][ T9562] __x64_sys_sendmsg+0xd4/0x160 [ 151.790200][ T9562] x64_sys_call+0x2999/0x2fb0 [ 151.790293][ T9562] do_syscall_64+0xd2/0x200 [ 151.790320][ T9562] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.790475][ T9562] ? clear_bhb_loop+0x40/0x90 [ 151.790582][ T9562] ? clear_bhb_loop+0x40/0x90 [ 151.790614][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.790644][ T9562] RIP: 0033:0x7f0f2216e929 [ 151.790668][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.790747][ T9562] RSP: 002b:00007f0f207b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.790812][ T9562] RAX: ffffffffffffffda RBX: 00007f0f22396080 RCX: 00007f0f2216e929 [ 151.790830][ T9562] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000005 [ 151.790849][ T9562] RBP: 00007f0f207b6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.790940][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.790958][ T9562] R13: 0000000000000000 R14: 00007f0f22396080 R15: 00007ffcb0d97c58 [ 151.790986][ T9562] [ 151.926452][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2140'. [ 152.038581][ T9576] loop4: detected capacity change from 0 to 1024 [ 152.055790][ T9576] EXT4-fs: Ignoring removed orlov option [ 152.071441][ T9576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.113317][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.146760][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 152.223392][ T9593] loop4: detected capacity change from 0 to 2048 [ 152.267358][ T9593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.377249][ T9614] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 152.400823][ T9614] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 152.413167][ T9614] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.413167][ T9614] [ 152.422890][ T9614] EXT4-fs (loop4): Total free blocks count 0 [ 152.428992][ T9614] EXT4-fs (loop4): Free/Dirty block details [ 152.434993][ T9614] EXT4-fs (loop4): free_blocks=2415919504 [ 152.440796][ T9614] EXT4-fs (loop4): dirty_blocks=544 [ 152.446036][ T9614] EXT4-fs (loop4): Block reservation details [ 152.452151][ T9614] EXT4-fs (loop4): i_reserved_data_blocks=34 [ 152.491013][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 152.552562][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 152.552582][ T29] audit: type=1400 audit(1751738085.338:5849): avc: denied { write } for pid=9620 comm="syz.1.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.567656][ T9614] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 153.250011][ T29] audit: type=1400 audit(1751738086.035:5850): avc: denied { create } for pid=9618 comm="syz.0.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.403822][ T9632] lo speed is unknown, defaulting to 1000 [ 153.411339][ T9632] vxcan1 speed is unknown, defaulting to 1000 [ 153.828966][ T29] audit: type=1326 audit(1751738086.659:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 153.915155][ T29] audit: type=1326 audit(1751738086.689:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 153.939561][ T29] audit: type=1326 audit(1751738086.689:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 153.963251][ T29] audit: type=1326 audit(1751738086.689:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 153.987570][ T29] audit: type=1326 audit(1751738086.689:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 154.011051][ T29] audit: type=1326 audit(1751738086.689:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 154.035317][ T29] audit: type=1326 audit(1751738086.689:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 154.058902][ T29] audit: type=1326 audit(1751738086.689:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb65a61e929 code=0x7ffc0000 [ 154.184535][ T9654] loop3: detected capacity change from 0 to 2048 [ 154.225033][ T9661] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 154.259916][ T9654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.300094][ T9669] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 154.394643][ T9673] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 154.418511][ T9674] __nla_validate_parse: 1 callbacks suppressed [ 154.418557][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 154.446087][ T9673] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 154.458426][ T9673] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.458426][ T9673] [ 154.468121][ T9673] EXT4-fs (loop3): Total free blocks count 0 [ 154.474159][ T9673] EXT4-fs (loop3): Free/Dirty block details [ 154.480167][ T9673] EXT4-fs (loop3): free_blocks=2415919504 [ 154.485955][ T9673] EXT4-fs (loop3): dirty_blocks=608 [ 154.491258][ T9673] EXT4-fs (loop3): Block reservation details [ 154.497291][ T9673] EXT4-fs (loop3): i_reserved_data_blocks=38 [ 154.569102][ T9673] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 154.663531][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 155.043414][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 155.361648][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 155.721438][ T9718] loop4: detected capacity change from 0 to 1024 [ 155.728908][ T9718] EXT4-fs: Ignoring removed orlov option [ 155.746519][ T9718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.844417][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.898618][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 155.962421][ T9729] loop3: detected capacity change from 0 to 512 [ 155.981909][ T9729] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 156.125299][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 156.348683][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.356755][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.366072][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.373504][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.380973][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.389065][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.396561][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.404003][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.411406][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.419440][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.426897][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.434428][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.443141][ T9750] lo speed is unknown, defaulting to 1000 [ 156.449895][ T9750] vxcan1 speed is unknown, defaulting to 1000 [ 156.532725][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.540203][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.547668][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.555116][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.563176][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.570676][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.578178][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.585628][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.593658][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.601106][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.608519][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.615983][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.624126][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.631607][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.639022][ T5946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.648969][ T5946] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 156.746616][ T9771] loop2: detected capacity change from 0 to 256 [ 156.817958][ T9775] FAULT_INJECTION: forcing a failure. [ 156.817958][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 156.830716][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.1.2193 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 156.830752][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.830793][ T9775] Call Trace: [ 156.830800][ T9775] [ 156.830808][ T9775] __dump_stack+0x1d/0x30 [ 156.830829][ T9775] dump_stack_lvl+0xe8/0x140 [ 156.830899][ T9775] dump_stack+0x15/0x1b [ 156.830990][ T9775] should_fail_ex+0x265/0x280 [ 156.831058][ T9775] should_failslab+0x8c/0xb0 [ 156.831081][ T9775] kmem_cache_alloc_noprof+0x50/0x310 [ 156.831132][ T9775] ? prepare_creds+0x37/0x4c0 [ 156.831162][ T9775] prepare_creds+0x37/0x4c0 [ 156.831191][ T9775] selinux_lsm_setattr+0x1a4/0x660 [ 156.831303][ T9775] selinux_setprocattr+0x4f/0x70 [ 156.831333][ T9775] security_setprocattr+0x1a4/0x1d0 [ 156.831367][ T9775] proc_pid_attr_write+0x1eb/0x220 [ 156.831413][ T9775] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 156.831445][ T9775] vfs_write+0x269/0x8e0 [ 156.831511][ T9775] ? __rcu_read_unlock+0x4f/0x70 [ 156.831539][ T9775] ? __fget_files+0x184/0x1c0 [ 156.831642][ T9775] ksys_write+0xda/0x1a0 [ 156.831677][ T9775] __x64_sys_write+0x40/0x50 [ 156.831755][ T9775] x64_sys_call+0x2cdd/0x2fb0 [ 156.831777][ T9775] do_syscall_64+0xd2/0x200 [ 156.831800][ T9775] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.831878][ T9775] ? clear_bhb_loop+0x40/0x90 [ 156.831915][ T9775] ? clear_bhb_loop+0x40/0x90 [ 156.831939][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.831966][ T9775] RIP: 0033:0x7fb65a61e929 [ 156.832003][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.832026][ T9775] RSP: 002b:00007fb658c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.832045][ T9775] RAX: ffffffffffffffda RBX: 00007fb65a845fa0 RCX: 00007fb65a61e929 [ 156.832057][ T9775] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000005 [ 156.832069][ T9775] RBP: 00007fb658c87090 R08: 0000000000000000 R09: 0000000000000000 [ 156.832082][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.832097][ T9775] R13: 0000000000000000 R14: 00007fb65a845fa0 R15: 00007ffdbf891fc8 [ 156.832201][ T9775] [ 157.145883][ T9789] bond0: (slave dummy0): Releasing backup interface [ 157.171356][ T9789] bridge_slave_0: left allmulticast mode [ 157.177080][ T9789] bridge_slave_0: left promiscuous mode [ 157.183522][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.201415][ T9789] bridge_slave_1: left allmulticast mode [ 157.207110][ T9789] bridge_slave_1: left promiscuous mode [ 157.213033][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.224272][ T9789] bond0: (slave bond_slave_0): Releasing backup interface [ 157.237563][ T9789] bond0: (slave bond_slave_1): Releasing backup interface [ 157.254460][ T9789] team0: Port device team_slave_0 removed [ 157.265075][ T9789] team0: Port device team_slave_1 removed [ 157.272100][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.279587][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.290047][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.297518][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.390212][ T9789] team0: Failed to send options change via netlink (err -105) [ 157.398447][ T9789] team0: Mode changed to "loadbalance" [ 157.485820][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 157.485837][ T29] audit: type=1400 audit(1751738090.391:5897): avc: denied { connect } for pid=9807 comm="syz.2.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.514402][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 157.556555][ T29] audit: type=1400 audit(1751738090.452:5898): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.610722][ T29] audit: type=1400 audit(1751738090.503:5899): avc: denied { write } for pid=9811 comm="syz.2.2205" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.634103][ T29] audit: type=1400 audit(1751738090.503:5900): avc: denied { open } for pid=9811 comm="syz.2.2205" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.660335][ T29] audit: type=1400 audit(1751738090.564:5901): avc: denied { ioctl } for pid=9811 comm="syz.2.2205" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.706915][ T9816] loop2: detected capacity change from 0 to 512 [ 157.713846][ T9816] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.728136][ T9816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.763134][ T9816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 157.777434][ T9816] System zones: 1-12 [ 157.797272][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2206'. [ 157.821063][ T9826] loop3: detected capacity change from 0 to 512 [ 157.831924][ T9816] EXT4-fs (loop2): 1 truncate cleaned up [ 157.838528][ T9816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.838559][ T9826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.863993][ T9816] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 157.896512][ T29] audit: type=1400 audit(1751738090.778:5902): avc: denied { create } for pid=9815 comm="syz.2.2208" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.916855][ T29] audit: type=1400 audit(1751738090.778:5903): avc: denied { rename } for pid=9815 comm="syz.2.2208" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.939135][ T29] audit: type=1400 audit(1751738090.778:5904): avc: denied { reparent } for pid=9815 comm="syz.2.2208" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.961563][ T29] audit: type=1400 audit(1751738090.778:5905): avc: denied { add_name } for pid=9815 comm="syz.2.2208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.996188][ T29] audit: type=1400 audit(1751738090.890:5906): avc: denied { append } for pid=9828 comm="syz.1.2212" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.025159][ T9826] EXT4-fs (loop3): 1 truncate cleaned up [ 158.027669][ T9831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9831 comm=syz.4.2211 [ 158.031323][ T9826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.091189][ T9831] netlink: 'syz.4.2211': attribute type 2 has an invalid length. [ 158.099072][ T9831] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 158.106886][ T9831] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2211'. [ 158.188762][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.357117][ T9842] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2217'. [ 158.669682][ T9769] Set syz1 is full, maxelem 65536 reached [ 158.804748][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.905313][ T9860] lo speed is unknown, defaulting to 1000 [ 158.911464][ T9860] vxcan1 speed is unknown, defaulting to 1000 [ 159.656362][ T9884] lo speed is unknown, defaulting to 1000 [ 159.680348][ T9884] vxcan1 speed is unknown, defaulting to 1000 [ 160.061779][ T9902] FAULT_INJECTION: forcing a failure. [ 160.061779][ T9902] name failslab, interval 1, probability 0, space 0, times 0 [ 160.074657][ T9902] CPU: 0 UID: 0 PID: 9902 Comm: syz.3.2236 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 160.074693][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.074710][ T9902] Call Trace: [ 160.074717][ T9902] [ 160.074725][ T9902] __dump_stack+0x1d/0x30 [ 160.074746][ T9902] dump_stack_lvl+0xe8/0x140 [ 160.074770][ T9902] dump_stack+0x15/0x1b [ 160.074792][ T9902] should_fail_ex+0x265/0x280 [ 160.074829][ T9902] should_failslab+0x8c/0xb0 [ 160.074858][ T9902] kmem_cache_alloc_noprof+0x50/0x310 [ 160.074890][ T9902] ? vm_area_alloc+0x2c/0xb0 [ 160.074929][ T9902] vm_area_alloc+0x2c/0xb0 [ 160.074963][ T9902] mmap_region+0xa43/0x1580 [ 160.074998][ T9902] ? mntput_no_expire+0x6f/0x3c0 [ 160.075063][ T9902] do_mmap+0x9b3/0xbe0 [ 160.075110][ T9902] vm_mmap_pgoff+0x17a/0x2e0 [ 160.075146][ T9902] ksys_mmap_pgoff+0x268/0x310 [ 160.075179][ T9902] x64_sys_call+0x1602/0x2fb0 [ 160.075207][ T9902] do_syscall_64+0xd2/0x200 [ 160.075231][ T9902] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.075263][ T9902] ? clear_bhb_loop+0x40/0x90 [ 160.075284][ T9902] ? clear_bhb_loop+0x40/0x90 [ 160.075309][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.075336][ T9902] RIP: 0033:0x7f68b26be929 [ 160.075356][ T9902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.075379][ T9902] RSP: 002b:00007f68b0ce5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 160.075402][ T9902] RAX: ffffffffffffffda RBX: 00007f68b28e6160 RCX: 00007f68b26be929 [ 160.075418][ T9902] RDX: 0000000002000003 RSI: 0000000000007000 RDI: 0000200000000000 [ 160.075430][ T9902] RBP: 00007f68b0ce5090 R08: 0000000000000007 R09: 0000000000000000 [ 160.075442][ T9902] R10: 0000000000097052 R11: 0000000000000246 R12: 0000000000000001 [ 160.075453][ T9902] R13: 0000000000000000 R14: 00007f68b28e6160 R15: 00007fff14ff5e18 [ 160.075473][ T9902] [ 160.711820][ T9904] loop4: detected capacity change from 0 to 1024 [ 160.719498][ T9904] EXT4-fs: Ignoring removed orlov option [ 160.774545][ T9904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.083417][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.162971][ T9911] loop4: detected capacity change from 0 to 1024 [ 161.169669][ T9911] EXT4-fs: Ignoring removed orlov option [ 161.179020][ T9911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.662571][ T9916] loop3: detected capacity change from 0 to 256 [ 161.689934][ T9916] msdos: Unknown parameter 'nodīts' [ 161.773259][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.827235][ T9924] FAULT_INJECTION: forcing a failure. [ 161.827235][ T9924] name failslab, interval 1, probability 0, space 0, times 0 [ 161.840635][ T9924] CPU: 0 UID: 0 PID: 9924 Comm: syz.4.2244 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 161.840678][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.840690][ T9924] Call Trace: [ 161.840697][ T9924] [ 161.840714][ T9924] __dump_stack+0x1d/0x30 [ 161.840736][ T9924] dump_stack_lvl+0xe8/0x140 [ 161.840775][ T9924] dump_stack+0x15/0x1b [ 161.840791][ T9924] should_fail_ex+0x265/0x280 [ 161.840879][ T9924] should_failslab+0x8c/0xb0 [ 161.840903][ T9924] kmem_cache_alloc_noprof+0x50/0x310 [ 161.840976][ T9924] ? getname_flags+0x80/0x3b0 [ 161.841000][ T9924] getname_flags+0x80/0x3b0 [ 161.841023][ T9924] user_path_at+0x28/0x130 [ 161.841051][ T9924] __se_sys_mount+0x25b/0x2e0 [ 161.841069][ T9924] ? fput+0x8f/0xc0 [ 161.841147][ T9924] __x64_sys_mount+0x67/0x80 [ 161.841165][ T9924] x64_sys_call+0xd36/0x2fb0 [ 161.841187][ T9924] do_syscall_64+0xd2/0x200 [ 161.841231][ T9924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.841257][ T9924] ? clear_bhb_loop+0x40/0x90 [ 161.841279][ T9924] ? clear_bhb_loop+0x40/0x90 [ 161.841301][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.841391][ T9924] RIP: 0033:0x7f0f2216e929 [ 161.841407][ T9924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.841426][ T9924] RSP: 002b:00007f0f207d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.841445][ T9924] RAX: ffffffffffffffda RBX: 00007f0f22395fa0 RCX: 00007f0f2216e929 [ 161.841459][ T9924] RDX: 00002000000003c0 RSI: 0000200000000240 RDI: 00002000000001c0 [ 161.841471][ T9924] RBP: 00007f0f207d7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.841537][ T9924] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 161.841550][ T9924] R13: 0000000000000000 R14: 00007f0f22395fa0 R15: 00007ffcb0d97c58 [ 161.841571][ T9924] [ 162.231039][ T9946] Falling back ldisc for ptm0. [ 162.285849][ T9949] loop3: detected capacity change from 0 to 256 [ 162.292818][ T9949] msdos: Unknown parameter 'nodīts' [ 162.372073][ T9955] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 162.382541][ T9955] IPVS: stopping master sync thread 9958 ... [ 162.393475][ T9953] FAULT_INJECTION: forcing a failure. [ 162.393475][ T9953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.406621][ T9953] CPU: 1 UID: 0 PID: 9953 Comm: syz.0.2253 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 162.406676][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.406743][ T9953] Call Trace: [ 162.406751][ T9953] [ 162.406840][ T9953] __dump_stack+0x1d/0x30 [ 162.406867][ T9953] dump_stack_lvl+0xe8/0x140 [ 162.406893][ T9953] dump_stack+0x15/0x1b [ 162.406915][ T9953] should_fail_ex+0x265/0x280 [ 162.406988][ T9953] should_fail+0xb/0x20 [ 162.407023][ T9953] should_fail_usercopy+0x1a/0x20 [ 162.407066][ T9953] _copy_from_user+0x1c/0xb0 [ 162.407091][ T9953] __copy_msghdr+0x244/0x300 [ 162.407179][ T9953] ___sys_sendmsg+0x109/0x1d0 [ 162.407242][ T9953] __x64_sys_sendmsg+0xd4/0x160 [ 162.407280][ T9953] x64_sys_call+0x2999/0x2fb0 [ 162.407308][ T9953] do_syscall_64+0xd2/0x200 [ 162.407331][ T9953] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.407365][ T9953] ? clear_bhb_loop+0x40/0x90 [ 162.407393][ T9953] ? clear_bhb_loop+0x40/0x90 [ 162.407463][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.407498][ T9953] RIP: 0033:0x7f477984e929 [ 162.407517][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.407540][ T9953] RSP: 002b:00007f4777eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.407562][ T9953] RAX: ffffffffffffffda RBX: 00007f4779a75fa0 RCX: 00007f477984e929 [ 162.407574][ T9953] RDX: 0000000000004010 RSI: 0000200000000600 RDI: 0000000000000003 [ 162.407585][ T9953] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.407596][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.407630][ T9953] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 162.407723][ T9953] [ 162.435827][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 162.435847][ T29] audit: type=1326 audit(1751738095.406:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.445255][ T9962] loop4: detected capacity change from 0 to 512 [ 162.447999][ T29] audit: type=1326 audit(1751738095.416:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.453775][ T9962] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.458250][ T29] audit: type=1326 audit(1751738095.426:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.462129][ T9962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.480880][ T29] audit: type=1326 audit(1751738095.446:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.552280][ T9962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 162.666070][ T29] audit: type=1326 audit(1751738095.639:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.684887][ T9962] System zones: [ 162.747736][ T29] audit: type=1326 audit(1751738095.679:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.748369][ T9962] 1-12 [ 162.751884][ T29] audit: type=1326 audit(1751738095.699:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.775301][ T9962] [ 162.804784][ T29] audit: type=1326 audit(1751738095.699:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.828935][ T29] audit: type=1326 audit(1751738095.699:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.856456][ T9957] loop3: detected capacity change from 0 to 512 [ 162.863522][ T9962] EXT4-fs (loop4): 1 truncate cleaned up [ 162.864160][ T29] audit: type=1326 audit(1751738095.831:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f68b26be929 code=0x7ffc0000 [ 162.873504][ T9962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.906239][ T9971] __nla_validate_parse: 1 callbacks suppressed [ 162.906256][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 162.956238][ T9957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.968925][ T9957] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.985659][ T9957] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.2255: iget: bad i_size value: 2533274857506816 [ 163.012910][ T9962] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 163.019991][ T9957] tipc: Started in network mode [ 163.024927][ T9957] tipc: Node identity ac14140f, cluster identity 4711 [ 163.032035][ T9957] tipc: New replicast peer: 255.255.255.255 [ 163.038140][ T9957] tipc: Enabled bearer , priority 10 [ 163.057430][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.107662][ T9982] FAULT_INJECTION: forcing a failure. [ 163.107662][ T9982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.121123][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.3.2261 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 163.121161][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.121177][ T9982] Call Trace: [ 163.121212][ T9982] [ 163.121219][ T9982] __dump_stack+0x1d/0x30 [ 163.121261][ T9982] dump_stack_lvl+0xe8/0x140 [ 163.121285][ T9982] dump_stack+0x15/0x1b [ 163.121306][ T9982] should_fail_ex+0x265/0x280 [ 163.121345][ T9982] should_fail+0xb/0x20 [ 163.121395][ T9982] should_fail_usercopy+0x1a/0x20 [ 163.121435][ T9982] _copy_from_iter+0xcf/0xe40 [ 163.121554][ T9982] ? _copy_from_iter+0x16d/0xe40 [ 163.121600][ T9982] copy_page_from_iter+0x178/0x2a0 [ 163.121627][ T9982] skb_copy_datagram_from_iter+0x232/0x490 [ 163.121728][ T9982] tun_get_user+0xa0e/0x2500 [ 163.121764][ T9982] ? ref_tracker_alloc+0x1f2/0x2f0 [ 163.121797][ T9982] ? selinux_file_permission+0x1e4/0x320 [ 163.121824][ T9982] tun_chr_write_iter+0x15e/0x210 [ 163.121933][ T9982] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 163.121964][ T9982] vfs_write+0x4a0/0x8e0 [ 163.122003][ T9982] ksys_write+0xda/0x1a0 [ 163.122116][ T9982] __x64_sys_write+0x40/0x50 [ 163.122211][ T9982] x64_sys_call+0x2cdd/0x2fb0 [ 163.122235][ T9982] do_syscall_64+0xd2/0x200 [ 163.122253][ T9982] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 163.122293][ T9982] ? clear_bhb_loop+0x40/0x90 [ 163.122321][ T9982] ? clear_bhb_loop+0x40/0x90 [ 163.122360][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.122380][ T9982] RIP: 0033:0x7f68b26be929 [ 163.122404][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.122422][ T9982] RSP: 002b:00007f68b0d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.122440][ T9982] RAX: ffffffffffffffda RBX: 00007f68b28e5fa0 RCX: 00007f68b26be929 [ 163.122475][ T9982] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000006 [ 163.122487][ T9982] RBP: 00007f68b0d27090 R08: 0000000000000000 R09: 0000000000000000 [ 163.122547][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.122559][ T9982] R13: 0000000000000000 R14: 00007f68b28e5fa0 R15: 00007fff14ff5e18 [ 163.122578][ T9982] [ 163.126240][ T9983] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.376346][ T9989] loop2: detected capacity change from 0 to 512 [ 163.389869][ T9989] EXT4-fs: Ignoring removed nobh option [ 163.400321][ T9983] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.412044][ T9989] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.424459][ T9989] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 163.434628][ T9989] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2263: Corrupt directory, running e2fsck is recommended [ 163.470668][ T9989] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 163.489236][ T9989] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2263: corrupted in-inode xattr: invalid ea_ino [ 163.508930][ T9983] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.525474][ T9989] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2263: couldn't read orphan inode 15 (err -117) [ 163.571227][ T9989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.586109][ T9989] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.598349][ T9989] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 163.608617][ T9989] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2263: Corrupt directory, running e2fsck is recommended [ 163.623561][ T9983] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.637529][ T9989] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.649119][ T9989] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 163.659882][ T9989] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2263: Corrupt directory, running e2fsck is recommended [ 163.674227][ T9989] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.686421][ T9989] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 163.696565][ T9989] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2263: Corrupt directory, running e2fsck is recommended [ 163.713723][ T9989] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.740743][ T9983] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.755165][ T9983] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.767181][ T9983] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.778639][ T9983] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.800278][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.875085][T10002] loop4: detected capacity change from 0 to 256 [ 163.882313][T10002] msdos: Unknown parameter 'nodīts' [ 163.935731][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'. [ 163.944702][T10007] netlink: 'syz.4.2268': attribute type 21 has an invalid length. [ 163.958318][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'. [ 163.978862][T10007] IPVS: Error joining to the multicast group [ 164.046580][ T5903] tipc: Node number set to 2886997007 [ 164.219680][T10021] SELinux: Context Ü is not valid (left unmapped). [ 164.251273][T10024] loop4: detected capacity change from 0 to 2048 [ 164.259232][T10024] EXT4-fs (loop4): blocks per group (524288) and clusters per group (16384) inconsistent [ 164.834680][T10029] loop4: detected capacity change from 0 to 256 [ 164.841610][T10029] msdos: Unknown parameter 'nodīts' [ 165.015914][T10035] netlink: 'syz.4.2279': attribute type 11 has an invalid length. [ 165.033514][T10037] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 165.045142][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.120843][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 165.271859][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 165.760677][T10063] loop4: detected capacity change from 0 to 1024 [ 165.767590][T10063] EXT4-fs: Ignoring removed orlov option [ 165.783754][T10063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.835993][T10068] loop3: detected capacity change from 0 to 256 [ 165.851143][T10068] msdos: Unknown parameter 'nodīts' [ 165.944663][T10075] loop1: detected capacity change from 0 to 1024 [ 165.951678][T10075] EXT4-fs: Ignoring removed orlov option [ 165.964652][T10075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.103794][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 166.225668][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 166.294285][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.351746][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.366826][T10084] loop1: detected capacity change from 0 to 2048 [ 166.388489][T10084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.457137][T10091] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 166.489718][T10091] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 166.502041][T10091] EXT4-fs (loop1): This should not happen!! Data will be lost [ 166.502041][T10091] [ 166.511852][T10091] EXT4-fs (loop1): Total free blocks count 0 [ 166.517893][T10091] EXT4-fs (loop1): Free/Dirty block details [ 166.524002][T10091] EXT4-fs (loop1): free_blocks=2415919504 [ 166.529745][T10091] EXT4-fs (loop1): dirty_blocks=1888 [ 166.535177][T10091] EXT4-fs (loop1): Block reservation details [ 166.541177][T10091] EXT4-fs (loop1): i_reserved_data_blocks=118 [ 166.553940][T10091] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 166.575202][T10097] loop4: detected capacity change from 0 to 1024 [ 166.581857][T10097] EXT4-fs: Ignoring removed orlov option [ 166.590250][T10097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.862646][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.892409][T10103] loop4: detected capacity change from 0 to 512 [ 166.904678][T10103] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 166.914312][T10103] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.2299: iget: bad i_size value: 12154757448730 [ 166.938506][T10103] EXT4-fs (loop4): Remounting filesystem read-only [ 166.946025][T10103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.031728][T10111] loop2: detected capacity change from 0 to 1024 [ 167.032989][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.068296][T10111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.154763][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.301596][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2309'. [ 167.374983][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 167.411556][T10132] FAULT_INJECTION: forcing a failure. [ 167.411556][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 167.424310][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.3.2310 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 167.424346][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.424385][T10132] Call Trace: [ 167.424394][T10132] [ 167.424403][T10132] __dump_stack+0x1d/0x30 [ 167.424489][T10132] dump_stack_lvl+0xe8/0x140 [ 167.424515][T10132] dump_stack+0x15/0x1b [ 167.424594][T10132] should_fail_ex+0x265/0x280 [ 167.424656][T10132] ? alloc_fs_context+0x44/0x4e0 [ 167.424694][T10132] should_failslab+0x8c/0xb0 [ 167.424718][T10132] __kmalloc_cache_noprof+0x4c/0x320 [ 167.424757][T10132] alloc_fs_context+0x44/0x4e0 [ 167.424804][T10132] fs_context_for_mount+0x22/0x30 [ 167.424843][T10132] do_new_mount+0xe9/0x680 [ 167.424881][T10132] path_mount+0x4a4/0xb20 [ 167.424916][T10132] ? user_path_at+0x109/0x130 [ 167.424943][T10132] __se_sys_mount+0x28f/0x2e0 [ 167.424960][T10132] ? fput+0x8f/0xc0 [ 167.424992][T10132] __x64_sys_mount+0x67/0x80 [ 167.425015][T10132] x64_sys_call+0xd36/0x2fb0 [ 167.425121][T10132] do_syscall_64+0xd2/0x200 [ 167.425139][T10132] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.425295][T10132] ? clear_bhb_loop+0x40/0x90 [ 167.425322][T10132] ? clear_bhb_loop+0x40/0x90 [ 167.425351][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.425387][T10132] RIP: 0033:0x7f68b26be929 [ 167.425465][T10132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.425486][T10132] RSP: 002b:00007f68b0d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.425548][T10132] RAX: ffffffffffffffda RBX: 00007f68b28e5fa0 RCX: 00007f68b26be929 [ 167.425563][T10132] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 167.425579][T10132] RBP: 00007f68b0d27090 R08: 0000200000000080 R09: 0000000000000000 [ 167.425594][T10132] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 167.425607][T10132] R13: 0000000000000001 R14: 00007f68b28e5fa0 R15: 00007fff14ff5e18 [ 167.425627][T10132] [ 167.647964][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 167.647981][ T29] audit: type=1400 audit(1751738100.682:6043): avc: denied { write } for pid=10130 comm="syz.2.2311" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 167.691294][ T29] audit: type=1400 audit(1751738100.713:6044): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.700553][T10140] tipc: Enabling of bearer rejected, failed to enable media [ 167.716356][ T29] audit: type=1400 audit(1751738100.713:6045): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.748863][ T29] audit: type=1400 audit(1751738100.713:6046): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.777407][ T29] audit: type=1400 audit(1751738100.713:6047): avc: denied { map_create } for pid=10138 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.796771][ T29] audit: type=1400 audit(1751738100.713:6048): avc: denied { prog_load } for pid=10135 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.815995][ T29] audit: type=1400 audit(1751738100.713:6049): avc: denied { bpf } for pid=10135 comm="syz.4.2312" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.837613][ T29] audit: type=1400 audit(1751738100.713:6050): avc: denied { perfmon } for pid=10135 comm="syz.4.2312" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.859228][ T29] audit: type=1400 audit(1751738100.713:6051): avc: denied { create } for pid=10138 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.880505][ T29] audit: type=1400 audit(1751738100.713:6052): avc: denied { write } for pid=10138 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.442842][T10179] loop3: detected capacity change from 0 to 2048 [ 168.495710][T10179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.588737][T10193] loop2: detected capacity change from 0 to 2048 [ 168.595357][T10186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10186 comm=syz.0.2326 [ 168.656584][T10193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.669533][T10199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10199 comm=syz.3.2327 [ 168.707544][T10179] FAULT_INJECTION: forcing a failure. [ 168.707544][T10179] name failslab, interval 1, probability 0, space 0, times 0 [ 168.720287][T10179] CPU: 1 UID: 0 PID: 10179 Comm: syz.3.2327 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 168.720408][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.720421][T10179] Call Trace: [ 168.720427][T10179] [ 168.720435][T10179] __dump_stack+0x1d/0x30 [ 168.720455][T10179] dump_stack_lvl+0xe8/0x140 [ 168.720474][T10179] dump_stack+0x15/0x1b [ 168.720548][T10179] should_fail_ex+0x265/0x280 [ 168.720587][T10179] should_failslab+0x8c/0xb0 [ 168.720614][T10179] kmem_cache_alloc_node_noprof+0x57/0x320 [ 168.720686][T10179] ? __alloc_skb+0x101/0x320 [ 168.720726][T10179] __alloc_skb+0x101/0x320 [ 168.720759][T10179] netlink_alloc_large_skb+0xba/0xf0 [ 168.720815][T10179] netlink_sendmsg+0x3cf/0x6b0 [ 168.720842][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.720864][T10179] __sock_sendmsg+0x145/0x180 [ 168.720889][T10179] sock_write_iter+0x165/0x1b0 [ 168.721002][T10179] do_iter_readv_writev+0x421/0x4c0 [ 168.721028][T10179] vfs_writev+0x2df/0x8b0 [ 168.721071][T10179] do_writev+0xe7/0x210 [ 168.721102][T10179] __x64_sys_writev+0x45/0x50 [ 168.721188][T10179] x64_sys_call+0x2006/0x2fb0 [ 168.721210][T10179] do_syscall_64+0xd2/0x200 [ 168.721289][T10179] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.721324][T10179] ? clear_bhb_loop+0x40/0x90 [ 168.721350][T10179] ? clear_bhb_loop+0x40/0x90 [ 168.721384][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.721437][T10179] RIP: 0033:0x7f68b26be929 [ 168.721454][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.721472][T10179] RSP: 002b:00007f68b0d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.721490][T10179] RAX: ffffffffffffffda RBX: 00007f68b28e5fa0 RCX: 00007f68b26be929 [ 168.721515][T10179] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 168.721530][T10179] RBP: 00007f68b0d27090 R08: 0000000000000000 R09: 0000000000000000 [ 168.721584][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.721597][T10179] R13: 0000000000000000 R14: 00007f68b28e5fa0 R15: 00007fff14ff5e18 [ 168.721620][T10179] [ 168.948382][T10200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10200 comm=syz.2.2331 [ 169.056756][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.119130][T10213] FAULT_INJECTION: forcing a failure. [ 169.119130][T10213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.132929][T10213] CPU: 0 UID: 0 PID: 10213 Comm: syz.0.2336 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 169.133003][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.133019][T10213] Call Trace: [ 169.133100][T10213] [ 169.133110][T10213] __dump_stack+0x1d/0x30 [ 169.133133][T10213] dump_stack_lvl+0xe8/0x140 [ 169.133153][T10213] dump_stack+0x15/0x1b [ 169.133170][T10213] should_fail_ex+0x265/0x280 [ 169.133344][T10213] should_fail+0xb/0x20 [ 169.133379][T10213] should_fail_usercopy+0x1a/0x20 [ 169.133417][T10213] _copy_to_user+0x20/0xa0 [ 169.133444][T10213] copy_siginfo_to_user+0x22/0xb0 [ 169.133475][T10213] x64_setup_rt_frame+0x2b5/0x580 [ 169.133504][T10213] arch_do_signal_or_restart+0x27c/0x480 [ 169.133538][T10213] exit_to_user_mode_loop+0x7a/0x100 [ 169.133617][T10213] do_syscall_64+0x1d6/0x200 [ 169.133685][T10213] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.133718][T10213] ? clear_bhb_loop+0x40/0x90 [ 169.133745][T10213] ? clear_bhb_loop+0x40/0x90 [ 169.133785][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.133851][T10213] RIP: 0033:0x7f477984e927 [ 169.133878][T10213] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 169.133901][T10213] RSP: 002b:00007f4777eb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 169.133923][T10213] RAX: 00000000000000f0 RBX: 00007f4779a75fa0 RCX: 00007f477984e929 [ 169.133938][T10213] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000b40 [ 169.133952][T10213] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.133965][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.133989][T10213] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 169.134012][T10213] [ 169.341901][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.395879][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 169.771353][T10250] loop3: detected capacity change from 0 to 512 [ 169.786335][T10250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.796232][ C1] vcan0: j1939_tp_rxtimer: 0xffff888127e3fa00: rx timeout, send abort [ 169.796280][ C1] vcan0: j1939_tp_rxtimer: 0xffff888127e3e400: rx timeout, send abort [ 169.812817][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888127e3fa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 169.812880][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888127e3e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 169.891249][T10250] EXT4-fs (loop3): 1 truncate cleaned up [ 169.899154][T10250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.062164][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.287405][T10277] loop1: detected capacity change from 0 to 2048 [ 170.321522][T10277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.339344][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'. [ 170.353961][T10287] loop2: detected capacity change from 0 to 1024 [ 170.360647][T10287] EXT4-fs: Ignoring removed orlov option [ 170.374157][T10287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.408373][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.624084][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 170.653875][T10299] 9pnet_fd: Insufficient options for proto=fd [ 170.657695][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 170.753014][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.007054][T10318] loop2: detected capacity change from 0 to 1024 [ 171.018343][T10318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.032943][T10318] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2372: Allocating blocks 385-513 which overlap fs metadata [ 171.050173][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 171.062549][T10317] EXT4-fs (loop2): pa ffff888106e9e9a0: logic 16, phys. 129, len 24 [ 171.070678][T10317] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 171.095181][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.255588][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 171.352631][T10332] tipc: Started in network mode [ 171.358046][T10332] tipc: Node identity ac14140f, cluster identity 4711 [ 171.366782][T10332] tipc: New replicast peer: 255.255.255.83 [ 171.372710][T10332] tipc: Enabled bearer , priority 10 [ 171.458886][T10339] loop2: detected capacity change from 0 to 256 [ 171.510855][T10339] FAT-fs (loop2): Directory bread(block 1285) failed [ 171.612448][T10350] netlink: 'syz.2.2382': attribute type 13 has an invalid length. [ 171.668817][T10350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.688272][T10350] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.702392][T10350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.718005][ T3378] lo speed is unknown, defaulting to 1000 [ 171.723775][ T3378] syz0: Port: 1 Link ACTIVE [ 171.736428][T10355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10355 comm=syz.2.2382 [ 171.957964][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 172.039369][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'. [ 172.180129][T10387] loop2: detected capacity change from 0 to 1024 [ 172.187845][T10387] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 172.197905][T10387] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.218172][T10387] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 172.226346][T10387] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.234133][T10387] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2396: Inode bitmap for bg 0 marked uninitialized [ 172.258109][T10387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.271748][T10387] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 172.288093][T10387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10387 comm=syz.2.2396 [ 172.309209][T10387] IPVS: Error connecting to the multicast addr [ 172.329195][T10387] SELinux: failed to load policy [ 172.345849][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.476614][ T5946] tipc: Node number set to 2886997007 [ 172.531942][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 172.544088][T10395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.552749][T10395] team0: Device macvlan2 is already an upper device of the team interface [ 172.674245][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 172.674264][ T29] audit: type=1326 audit(1751738105.741:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620efce929 code=0x7ffc0000 [ 172.705064][ T29] audit: type=1326 audit(1751738105.751:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620efce929 code=0x7ffc0000 [ 172.728782][ T29] audit: type=1326 audit(1751738105.751:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f620efce929 code=0x7ffc0000 [ 172.735188][T10413] loop3: detected capacity change from 0 to 2048 [ 172.752992][ T29] audit: type=1326 audit(1751738105.751:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620efce929 code=0x7ffc0000 [ 172.782857][ T29] audit: type=1326 audit(1751738105.751:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620efce929 code=0x7ffc0000 [ 172.817888][T10413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.833252][T10421] tmpfs: Bad value for 'mpol' [ 172.839612][ T29] audit: type=1400 audit(1751738105.912:6321): avc: denied { connect } for pid=10420 comm="syz.0.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.881426][ T29] audit: type=1400 audit(1751738105.932:6322): avc: denied { ioctl } for pid=10420 comm="syz.0.2408" path="socket:[30871]" dev="sockfs" ino=30871 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.925753][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 172.937766][ T29] audit: type=1326 audit(1751738106.013:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477984e929 code=0x7ffc0000 [ 172.937995][T10431] FAULT_INJECTION: forcing a failure. [ 172.937995][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 172.961419][ T29] audit: type=1326 audit(1751738106.013:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477984e929 code=0x7ffc0000 [ 172.974758][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.0.2409 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 172.974801][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.974821][T10431] Call Trace: [ 172.974829][T10431] [ 172.974839][T10431] __dump_stack+0x1d/0x30 [ 172.974869][T10431] dump_stack_lvl+0xe8/0x140 [ 172.974954][T10431] dump_stack+0x15/0x1b [ 172.974977][T10431] should_fail_ex+0x265/0x280 [ 172.975067][T10431] should_failslab+0x8c/0xb0 [ 172.975100][T10431] kmem_cache_alloc_node_noprof+0x57/0x320 [ 172.975142][T10431] ? __alloc_skb+0x101/0x320 [ 172.975186][T10431] __alloc_skb+0x101/0x320 [ 172.975259][T10431] ? audit_log_start+0x365/0x6c0 [ 172.975305][T10431] audit_log_start+0x380/0x6c0 [ 172.975423][T10431] audit_seccomp+0x48/0x100 [ 172.975467][T10431] ? __seccomp_filter+0x68c/0x10d0 [ 172.975501][T10431] __seccomp_filter+0x69d/0x10d0 [ 172.975535][T10431] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.975763][T10431] ? vfs_write+0x75e/0x8e0 [ 172.975808][T10431] ? __rcu_read_unlock+0x4f/0x70 [ 172.975838][T10431] ? __fget_files+0x184/0x1c0 [ 172.975872][T10431] __secure_computing+0x82/0x150 [ 172.975938][T10431] syscall_trace_enter+0xcf/0x1e0 [ 172.975973][T10431] do_syscall_64+0xac/0x200 [ 172.975999][T10431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.976035][T10431] ? clear_bhb_loop+0x40/0x90 [ 172.976071][T10431] ? clear_bhb_loop+0x40/0x90 [ 172.976177][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.976221][T10431] RIP: 0033:0x7f477984e929 [ 172.976242][T10431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.976268][T10431] RSP: 002b:00007f4777eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 172.976362][T10431] RAX: ffffffffffffffda RBX: 00007f4779a75fa0 RCX: 00007f477984e929 [ 172.976380][T10431] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000000 [ 172.976397][T10431] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.976415][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.976432][T10431] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 172.976459][T10431] [ 172.976599][T10431] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 173.021512][T10433] loop4: detected capacity change from 0 to 512 [ 173.249934][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.263240][T10433] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.285707][T10433] EXT4-fs (loop4): mount failed [ 173.390719][T10459] FAULT_INJECTION: forcing a failure. [ 173.390719][T10459] name failslab, interval 1, probability 0, space 0, times 0 [ 173.403634][T10459] CPU: 0 UID: 0 PID: 10459 Comm: syz.0.2424 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 173.403671][T10459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.403688][T10459] Call Trace: [ 173.403696][T10459] [ 173.403705][T10459] __dump_stack+0x1d/0x30 [ 173.403732][T10459] dump_stack_lvl+0xe8/0x140 [ 173.403818][T10459] dump_stack+0x15/0x1b [ 173.403840][T10459] should_fail_ex+0x265/0x280 [ 173.403898][T10459] ? tcf_ct_init+0x409/0xe60 [ 173.403921][T10459] should_failslab+0x8c/0xb0 [ 173.403944][T10459] __kmalloc_cache_noprof+0x4c/0x320 [ 173.404020][T10459] tcf_ct_init+0x409/0xe60 [ 173.404137][T10459] tcf_action_init_1+0x367/0x4a0 [ 173.404174][T10459] tcf_action_init+0x267/0x6d0 [ 173.404332][T10459] tc_ctl_action+0x291/0x830 [ 173.404463][T10459] ? __pfx_tc_ctl_action+0x10/0x10 [ 173.404492][T10459] rtnetlink_rcv_msg+0x657/0x6d0 [ 173.404518][T10459] netlink_rcv_skb+0x120/0x220 [ 173.404637][T10459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.404694][T10459] rtnetlink_rcv+0x1c/0x30 [ 173.404720][T10459] netlink_unicast+0x5a1/0x670 [ 173.404772][T10459] netlink_sendmsg+0x58b/0x6b0 [ 173.404800][T10459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.404858][T10459] __sock_sendmsg+0x145/0x180 [ 173.404890][T10459] ____sys_sendmsg+0x31e/0x4e0 [ 173.404941][T10459] ___sys_sendmsg+0x17b/0x1d0 [ 173.405043][T10459] __x64_sys_sendmsg+0xd4/0x160 [ 173.405066][T10459] x64_sys_call+0x2999/0x2fb0 [ 173.405087][T10459] do_syscall_64+0xd2/0x200 [ 173.405140][T10459] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.405197][T10459] ? clear_bhb_loop+0x40/0x90 [ 173.405225][T10459] ? clear_bhb_loop+0x40/0x90 [ 173.405253][T10459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.405294][T10459] RIP: 0033:0x7f477984e929 [ 173.405313][T10459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.405387][T10459] RSP: 002b:00007f4777eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.405452][T10459] RAX: ffffffffffffffda RBX: 00007f4779a75fa0 RCX: 00007f477984e929 [ 173.405467][T10459] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.405482][T10459] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.405497][T10459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.405512][T10459] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 173.405537][T10459] [ 173.663588][T10463] x_tables: ip_tables: osf match: only valid for protocol 6 [ 173.770949][T10465] openvswitch: netlink: Message has 6 unknown bytes. [ 173.810177][T10465] loop3: detected capacity change from 0 to 2048 [ 173.878305][T10465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.197580][T10483] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 174.303858][T10504] loop2: detected capacity change from 0 to 512 [ 174.336466][T10504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.354719][T10504] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.545048][T10515] __nla_validate_parse: 4 callbacks suppressed [ 174.545082][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2441'. [ 174.573077][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.689858][T10532] loop3: detected capacity change from 0 to 512 [ 175.722127][T10532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.734823][T10532] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.749520][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.222588][T10541] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2449'. [ 176.280191][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.338226][T10554] ALSA: seq fatal error: cannot create timer (-22) [ 176.387047][T10569] loop3: detected capacity change from 0 to 256 [ 176.394087][T10569] msdos: Unknown parameter 'nodīts' [ 176.405653][T10572] loop2: detected capacity change from 0 to 1024 [ 176.412350][T10572] EXT4-fs: Ignoring removed orlov option [ 176.420973][T10572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.435123][T10576] loop3: detected capacity change from 0 to 512 [ 176.464549][T10576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.478558][T10576] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.521580][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.541896][T10584] netem: change failed [ 176.699173][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.712208][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 176.783216][T10602] netlink: 'syz.2.2469': attribute type 30 has an invalid length. [ 176.855980][T10607] loop2: detected capacity change from 0 to 128 [ 177.063188][T10607] syz.2.2470: attempt to access beyond end of device [ 177.063188][T10607] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 177.077230][T10607] syz.2.2470: attempt to access beyond end of device [ 177.077230][T10607] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 177.091339][T10607] syz.2.2470: attempt to access beyond end of device [ 177.091339][T10607] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 177.106521][T10607] syz.2.2470: attempt to access beyond end of device [ 177.106521][T10607] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 177.121528][T10607] syz.2.2470: attempt to access beyond end of device [ 177.121528][T10607] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 177.135522][T10607] syz.2.2470: attempt to access beyond end of device [ 177.135522][T10607] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 177.149189][T10607] syz.2.2470: attempt to access beyond end of device [ 177.149189][T10607] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 177.162850][T10607] syz.2.2470: attempt to access beyond end of device [ 177.162850][T10607] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 177.176895][T10607] syz.2.2470: attempt to access beyond end of device [ 177.176895][T10607] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 177.222075][T10607] syz.2.2470: attempt to access beyond end of device [ 177.222075][T10607] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 177.331778][T10612] loop2: detected capacity change from 0 to 1024 [ 177.356567][T10612] EXT4-fs (loop2): inodes count not valid: 27 vs 32 [ 177.486513][T10618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2475'. [ 177.497024][T10618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2475'. [ 177.673918][T10638] loop2: detected capacity change from 0 to 512 [ 177.682001][T10638] EXT4-fs: Ignoring removed nobh option [ 177.697096][T10638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.708809][T10638] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 177.719089][T10638] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2482: Corrupt directory, running e2fsck is recommended [ 177.757443][T10648] loop1: detected capacity change from 0 to 2048 [ 177.770660][T10648] netlink: '+}[@': attribute type 11 has an invalid length. [ 177.779097][T10648] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 177.800548][T10638] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 177.830584][T10638] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2482: corrupted in-inode xattr: invalid ea_ino [ 177.846982][T10638] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2482: couldn't read orphan inode 15 (err -117) [ 177.886921][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'. [ 177.918311][T10638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.960747][T10638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.972491][T10638] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 177.982633][T10638] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2482: Corrupt directory, running e2fsck is recommended [ 178.004943][T10638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 178.016583][T10638] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 178.027710][T10638] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2482: Corrupt directory, running e2fsck is recommended [ 178.051126][T10638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 178.063360][T10638] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 178.073564][T10638] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2482: Corrupt directory, running e2fsck is recommended [ 178.095669][T10638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 178.107720][T10655] loop1: detected capacity change from 0 to 1024 [ 178.114145][ T29] kauditd_printk_skb: 1743 callbacks suppressed [ 178.114167][ T29] audit: type=1400 audit(1751738111.211:8064): avc: denied { ioctl } for pid=10636 comm=77DEA305FF07 path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.147829][T10655] EXT4-fs: Ignoring removed orlov option [ 178.165304][T10655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.443951][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.498327][T10663] loop1: detected capacity change from 0 to 4096 [ 178.511068][T10663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.529815][T10663] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2489'. [ 178.620491][ T29] audit: type=1400 audit(1751738111.713:8065): avc: denied { mount } for pid=10670 comm="syz.0.2493" name="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 178.644149][ T29] audit: type=1400 audit(1751738111.713:8066): avc: denied { search } for pid=10670 comm="syz.0.2493" name="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.666414][ T29] audit: type=1400 audit(1751738111.713:8067): avc: denied { search } for pid=10670 comm="syz.0.2493" name="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.689318][ T29] audit: type=1400 audit(1751738111.713:8068): avc: denied { read open } for pid=10670 comm="syz.0.2493" path="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.720639][ T29] audit: type=1400 audit(1751738111.754:8069): avc: denied { search } for pid=10670 comm="syz.0.2493" name="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.743672][ T29] audit: type=1400 audit(1751738111.754:8070): avc: denied { search } for pid=10670 comm="syz.0.2493" name="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.766020][ T29] audit: type=1400 audit(1751738111.754:8071): avc: denied { search } for pid=10670 comm="syz.0.2493" name="/" dev="configfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.788302][ T29] audit: type=1400 audit(1751738111.754:8072): avc: denied { add_name } for pid=10670 comm="syz.0.2493" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.809946][ T29] audit: type=1400 audit(1751738111.754:8073): avc: denied { create } for pid=10670 comm="syz.0.2493" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 178.832159][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.851901][T10678] loop3: detected capacity change from 0 to 1024 [ 178.858511][T10680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2498'. [ 178.868474][T10680] FAULT_INJECTION: forcing a failure. [ 178.868474][T10680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.881599][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.0.2498 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 178.881633][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.881650][T10680] Call Trace: [ 178.881658][T10680] [ 178.881666][T10680] __dump_stack+0x1d/0x30 [ 178.881685][T10680] dump_stack_lvl+0xe8/0x140 [ 178.881775][T10680] dump_stack+0x15/0x1b [ 178.881860][T10680] should_fail_ex+0x265/0x280 [ 178.881888][T10680] should_fail+0xb/0x20 [ 178.881979][T10680] should_fail_usercopy+0x1a/0x20 [ 178.882007][T10680] _copy_to_user+0x20/0xa0 [ 178.882026][T10680] simple_read_from_buffer+0xb5/0x130 [ 178.882089][T10680] proc_fail_nth_read+0x100/0x140 [ 178.882155][T10680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.882195][T10680] vfs_read+0x1a0/0x6f0 [ 178.882243][T10680] ? __rcu_read_unlock+0x4f/0x70 [ 178.882263][T10680] ? __fget_files+0x184/0x1c0 [ 178.882353][T10680] ksys_read+0xda/0x1a0 [ 178.882383][T10680] __x64_sys_read+0x40/0x50 [ 178.882423][T10680] x64_sys_call+0x2d77/0x2fb0 [ 178.882443][T10680] do_syscall_64+0xd2/0x200 [ 178.882459][T10680] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.882513][T10680] ? clear_bhb_loop+0x40/0x90 [ 178.882531][T10680] ? clear_bhb_loop+0x40/0x90 [ 178.882619][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.882637][T10680] RIP: 0033:0x7f477984d33c [ 178.882651][T10680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.882666][T10680] RSP: 002b:00007f4777eb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.882748][T10680] RAX: ffffffffffffffda RBX: 00007f4779a75fa0 RCX: 00007f477984d33c [ 178.882760][T10680] RDX: 000000000000000f RSI: 00007f4777eb70a0 RDI: 0000000000000004 [ 178.882770][T10680] RBP: 00007f4777eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.882781][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.882934][T10680] R13: 0000000000000000 R14: 00007f4779a75fa0 R15: 00007fff9a96da48 [ 178.882952][T10680] [ 179.106784][T10685] loop3: detected capacity change from 0 to 1024 [ 179.151153][T10687] loop4: detected capacity change from 0 to 256 [ 179.159001][T10685] EXT4-fs: Ignoring removed orlov option [ 179.172139][T10690] Set syz1 is full, maxelem 65536 reached [ 179.233614][T10685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.273830][T10695] loop4: detected capacity change from 0 to 1024 [ 179.317186][T10695] EXT4-fs: Ignoring removed orlov option [ 179.352016][T10695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.400590][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.546240][T10700] loop1: detected capacity change from 0 to 1024 [ 179.558894][T10700] EXT4-fs: Ignoring removed orlov option [ 179.583539][T10700] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 179.643625][T10700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.669129][T10699] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.2502: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 179.855155][T10708] loop2: detected capacity change from 0 to 512 [ 179.864588][T10708] EXT4-fs: Ignoring removed nobh option [ 179.872049][T10708] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 179.883790][T10708] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 179.894048][T10708] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2504: Corrupt directory, running e2fsck is recommended [ 179.915381][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.972426][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.984902][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.019892][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'. [ 180.030589][T10708] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 180.039147][T10708] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2504: corrupted in-inode xattr: invalid ea_ino [ 180.053453][T10708] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2504: couldn't read orphan inode 15 (err -117) [ 180.066938][T10708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.077617][T10722] Cannot find add_set index 0 as target [ 180.083546][T10708] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.086478][T10722] cgroup: Need name or subsystem set [ 180.096592][T10708] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 180.107149][T10722] IPVS: Error connecting to the multicast addr [ 180.112760][T10708] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2504: Corrupt directory, running e2fsck is recommended [ 180.133480][T10725] loop1: detected capacity change from 0 to 256 [ 180.144049][T10708] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.155683][T10708] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 180.166485][T10708] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2504: Corrupt directory, running e2fsck is recommended [ 180.190593][T10708] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.202877][T10708] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 180.213346][T10708] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2504: Corrupt directory, running e2fsck is recommended [ 180.230861][T10708] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.261475][T10730] loop3: detected capacity change from 0 to 2048 [ 180.277197][T10730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.706950][ T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.723497][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 180.736954][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 180.736954][ T12] [ 180.746673][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 180.752728][ T12] EXT4-fs (loop3): Free/Dirty block details [ 180.759119][ T12] EXT4-fs (loop3): free_blocks=2415919504 [ 180.765875][ T12] EXT4-fs (loop3): dirty_blocks=16400 [ 180.771396][ T12] EXT4-fs (loop3): Block reservation details [ 180.777455][ T12] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 180.798808][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.815440][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 180.920035][T10743] loop2: detected capacity change from 0 to 1024 [ 180.945776][T10743] EXT4-fs: inline encryption not supported [ 180.980280][T10747] loop1: detected capacity change from 0 to 1024 [ 180.987396][T10747] EXT4-fs: Ignoring removed orlov option [ 180.994810][T10743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.045324][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 181.072400][T10757] loop3: detected capacity change from 0 to 2048 [ 181.079717][ T12] EXT4-fs (loop2): Remounting filesystem read-only [ 181.284875][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 181.567476][ T9488] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 181.593396][ T9488] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 181.606057][ T9488] EXT4-fs (loop3): This should not happen!! Data will be lost [ 181.606057][ T9488] [ 181.616440][ T9488] EXT4-fs (loop3): Total free blocks count 0 [ 181.622512][ T9488] EXT4-fs (loop3): Free/Dirty block details [ 181.628522][ T9488] ================================================================== [ 181.636630][ T9488] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 181.644396][ T9488] [ 181.646742][ T9488] write to 0xffffffff86a21238 of 8 bytes by task 10791 on cpu 1: [ 181.654488][ T9488] console_flush_all+0x35a/0x730 [ 181.659477][ T9488] console_unlock+0xa1/0x330 [ 181.664102][ T9488] vprintk_emit+0x388/0x650 [ 181.668636][ T9488] vprintk_default+0x26/0x30 [ 181.673257][ T9488] vprintk+0x1d/0x30 [ 181.677187][ T9488] _printk+0x79/0xa0 [ 181.681121][ T9488] chnl_net_open+0x2a9/0x560 [ 181.685756][ T9488] __dev_open+0x2d5/0x530 [ 181.690111][ T9488] __dev_change_flags+0x163/0x400 [ 181.695184][ T9488] netif_change_flags+0x5a/0xd0 [ 181.700071][ T9488] do_setlink+0x9d2/0x2810 [ 181.704524][ T9488] rtnl_newlink+0xd8b/0x12d0 [ 181.709152][ T9488] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 181.714147][ T9488] netlink_rcv_skb+0x120/0x220 [ 181.718958][ T9488] rtnetlink_rcv+0x1c/0x30 [ 181.723405][ T9488] netlink_unicast+0x5a1/0x670 [ 181.728210][ T9488] netlink_sendmsg+0x58b/0x6b0 [ 181.733001][ T9488] __sock_sendmsg+0x145/0x180 [ 181.737712][ T9488] ____sys_sendmsg+0x31e/0x4e0 [ 181.742557][ T9488] ___sys_sendmsg+0x17b/0x1d0 [ 181.747294][ T9488] __x64_sys_sendmsg+0xd4/0x160 [ 181.752184][ T9488] x64_sys_call+0x2999/0x2fb0 [ 181.756907][ T9488] do_syscall_64+0xd2/0x200 [ 181.761534][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.767468][ T9488] [ 181.769809][ T9488] read to 0xffffffff86a21238 of 8 bytes by task 9488 on cpu 0: [ 181.777381][ T9488] console_flush_all+0x563/0x730 [ 181.782446][ T9488] console_unlock+0xa1/0x330 [ 181.787074][ T9488] vprintk_emit+0x388/0x650 [ 181.791345][T10795] loop4: detected capacity change from 0 to 512 [ 181.791595][ T9488] vprintk_default+0x26/0x30 [ 181.802552][ T9488] vprintk+0x1d/0x30 [ 181.806474][ T9488] _printk+0x79/0xa0 [ 181.810398][ T9488] __ext4_msg+0x18f/0x1a0 [ 181.814749][ T9488] ext4_do_writepages+0x19a4/0x21c0 [ 181.820230][ T9488] ext4_writepages+0x176/0x300 [ 181.825018][ T9488] do_writepages+0x1c3/0x310 [ 181.829634][ T9488] __writeback_single_inode+0x80/0x7c0 [ 181.835125][ T9488] writeback_sb_inodes+0x480/0xa20 [ 181.840454][ T9488] __writeback_inodes_wb+0x94/0x1a0 [ 181.845679][ T9488] wb_writeback+0x266/0x5c0 [ 181.850244][ T9488] wb_workfn+0x4c9/0x910 [ 181.854505][ T9488] process_scheduled_works+0x4cb/0x9d0 [ 181.859992][ T9488] worker_thread+0x582/0x770 [ 181.864606][ T9488] kthread+0x489/0x510 [ 181.868705][ T9488] ret_from_fork+0xda/0x150 [ 181.873225][ T9488] ret_from_fork_asm+0x1a/0x30 [ 181.878192][ T9488] [ 181.880525][ T9488] value changed: 0x0000000000001cef -> 0x0000000000001cf0 [ 181.887648][ T9488] [ 181.889983][ T9488] Reported by Kernel Concurrency Sanitizer on: [ 181.896141][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: kworker/u8:37 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 181.908906][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.918983][ T9488] Workqueue: writeback wb_workfn (flush-7:3) [ 181.925013][ T9488] ================================================================== [ 181.934050][ T9488] EXT4-fs (loop3): free_blocks=2415919504 [ 181.939859][ T9488] EXT4-fs (loop3): dirty_blocks=6880 [ 181.945186][ T9488] EXT4-fs (loop3): Block reservation details [ 181.951341][ T9488] EXT4-fs (loop3): i_reserved_data_blocks=430 [ 181.957555][T10791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.023175][T10795] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.160577][ T9488] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 182.173562][ T9488] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.173562][ T9488]