last executing test programs: 1.879260233s ago: executing program 0 (id=725): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$eJzs289vFFUcAPDvbLvlt62IP/ihVtHY+KOlBZWDF40mXExM9IDHWgpBCjW0JkKIVGPwaPgL1KOJf4EnvRj1pPGqiRcTY0IMF9GDGTO7M7C0u+v+ahfczycZeG/mTd/7zszbfTNvJ4CBNZ79k0Rsj4ifRiJGq9mbC4xX/7t29cLcX1cvzCWRpq/+kVTK/Xn1wlxRtNhvW56ZKEWUPkhib516l86dPzW7sDB/Ns9PLZ9+a2rp3PmnTp6ePTF/Yv7MzOHDhw5OP/vMzNM9iXNH1tY97y7u233k9csvzx29/Ma3n2frt+fba+OoGuu6zvEYv/lY1ng04tc0Tbuu41axoyadDPexIbRlKCKy01XO+n+MxlDcOHmj8dL7fW0csK7SNE03rVk7VCRWUuB/LIl+twDoj+KLPrv/LZYNHH703ZXnqzdAWdzX8qW6ZThKeZnyqvvbXhqPiKMrf3+cLVH3OQQAQG99mY1/nqw3/ivFPTXl7ojq3NBYRNwZETsj4q6I2BURd0dUyt4bEfe1Wf/4qvza8c8PWzoKrEXZ+O+5fG7r5vFfMfqLsaE8t6MSfzk5fnJh/kB+TCaivCnLTzep46sXf/yo0bba8V+2ZPUXY8G8Hb8Pr3pAd2x2ebabmGtdeS9iz3C9+JPrMwFJROyOiD0d/P3smJ18/LN9jbb/d/xN9GCeKf004rHq+V+JVfEXkubzk1ObY2H+wFRxVaz13feXXmlUf1fx90B2/rfWvf6vxz+W1M7XLrVfx6WfP2x4T9Pp9T+SvFZJj+Tr3pldXj47HTGSrKxdP3Nj3yJflM/in9hfv//vjPjnk3y/vRGRXcT3R8QDEfFg3vaHIuLhiNjfJP5vXnjkzc7jX19Z/MfaOv/tJ4ZOff1Fo/pbO/+HKqmJfE0rn3+tNrCbYwcAAAC3i1LlN/BJafJ6ulSanKz+hn9XbC0tLC4tP3F88e0zx6q/lR+Lcql40jVa8zx0On82XORnVuUPVp4bp2mabqnkJ+cWF9ZrTh1ozbYG/T/z21C/Wwesu7bm0Rq90QbclryvCYNL/4fB1Wr/L69zO4CN5/sfBle9/n8x4lofmgJsMN//MLj0fxhc+j8MLv0fBlI37/U3S+w80vHuaVe1b84D63D3X9blaDRLDG1gXb1MRKnupnJE3CItbJIo3RrNqCY2RUSrhS92emG3nejzBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BsAAP//cGjokQ==") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) close_range(r2, 0xffffffffffffffff, 0x0) 1.816121274s ago: executing program 3 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006818adb4ae495049eb5179aa34b887d797650bb10ebb6dfe9e100b49722ff080670d99fe378e59bdda928ab97e16093f73b7d89a807dbcd4c4bee81ad6b29d12a41150be3e3babcd5a2bb49be4e94dd913bffdd4922e34004f31937b577cd5f69d75bd00b97eca7be290577715cc3474f2fea728684d19ef8ddf46f2deca38dab60d77ffc56042c9041374e0ae87b4181a21bf049bc046235d1c4171819c977316b69720e0013ed319db2c8c999e498fbca583a397c7c2c35c98a08171a1dcc9880f50d167c362e5ae0fb74da89292ef0bc15eaa853a489b7ff62200"/259], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b36}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x10fff9) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000240)='cpuset\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newtfilter={0xc94, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xffe0, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc64, 0x2, [@TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x10000000, 0x80000000, 0x1000, 0x5, {0xe3, 0x0, 0xc000, 0xc, 0x40, 0x39}, {0x2, 0x1, 0x1, 0x88b, 0x5, 0x9}, 0x9, 0x42bd, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0xfffffffa, 0x10001, 0x0, 0x5, 0x2, 0x7, 0xd7, 0x700000, 0x1, 0x5, 0x618, 0x2c, 0x4, 0xff, 0x8, 0x7161, 0x3d0, 0x7f, 0xe0000000, 0xff, 0x0, 0x7, 0x5, 0x10, 0x7fff, 0x7, 0x6, 0x0, 0x263e, 0xffff, 0xfffffff8, 0x6, 0x7, 0x7, 0x7, 0x8, 0xa98, 0x3, 0x1, 0x1000, 0x7, 0x7, 0x8, 0x3, 0x5c, 0x5, 0x10001, 0xff, 0x80, 0x7fff, 0x4, 0x8ef, 0x6, 0xfffffffb, 0xd, 0x8, 0x1, 0xe5, 0x280, 0xe, 0xd3, 0x80, 0x7, 0xff, 0xe, 0x5, 0x9, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x5, 0x0, 0xa5, 0x2, 0x8001, 0x101, 0x2, 0x0, 0x3, 0x1000, 0x100, 0x7fffffff, 0x6, 0x2, 0x8000, 0xff, 0x5, 0x9, 0x6, 0x10001, 0xffffffff, 0x100, 0x6, 0x8, 0x8, 0x4, 0x101, 0x6, 0x2, 0x9, 0xfffffff9, 0x1, 0x1d27, 0x1ff, 0x39, 0x4, 0xeb1, 0x5, 0xd789, 0x100, 0x1, 0x4, 0xffff8000, 0x9, 0x6c2, 0x4, 0x8, 0x3ff, 0x6, 0x10, 0x8001, 0x6, 0xa24, 0x4, 0x4, 0x8001, 0x1000, 0x2, 0x8000, 0x16, 0x6, 0x400, 0x7, 0x2, 0x6, 0x5, 0xdc4, 0xe, 0x88, 0x1, 0x6, 0x7, 0x7, 0x6, 0xe93a, 0x4, 0x400, 0x4, 0xc, 0x2, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0x7, 0x5, 0x8000, 0x7ff, 0x7, 0x1, 0xed3, 0x3, 0x5eb, 0x1, 0x6, 0x7, 0x804, 0x5, 0x3, 0x80000000, 0x9, 0xf, 0xfffffffb, 0x4, 0x4, 0x81, 0xfff, 0x2, 0x3, 0x8, 0xae4, 0x5, 0xbc9, 0xff, 0xe1, 0x3, 0x0, 0xe0b600, 0x3, 0xc, 0x6, 0x2, 0x7f, 0x263, 0x50b, 0x0, 0x1, 0x800, 0x2, 0x10001, 0x48, 0x2, 0x3, 0xfffffffc, 0x1ff, 0xc, 0x3, 0x0, 0x542, 0x7, 0x2, 0x9, 0x2, 0x7, 0x6, 0x83b, 0x8, 0x3, 0xe8bf153, 0xe1, 0x80000000, 0x6, 0x7fff, 0x0, 0x81, 0x8, 0x6, 0x8, 0x2, 0x7, 0x8c7, 0x2, 0x7, 0xfffffff7, 0x9, 0x80000001, 0x9, 0x1, 0x8000, 0x7, 0x10000, 0x7, 0x551, 0x79ab, 0x10, 0x9, 0x5, 0x9, 0xa, 0x0, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xa, 0xfff, 0x0, 0x8, 0x1, 0x80, 0x40, 0x0, 0x6, 0xfffffffc, 0x6000000, 0x6c32, 0x1ff, 0x5, 0x0, 0x9, 0x3, 0x6e, 0xc6, 0x2, 0x9, 0x5, 0x1ff, 0x5, 0x0, 0x800, 0x80000000, 0xe, 0x2, 0x2, 0x7, 0x4, 0x2, 0x74b, 0xa, 0xffff, 0x800, 0x51, 0x401, 0x0, 0x0, 0x1, 0x6, 0x4, 0x3, 0xfffffff9, 0xb, 0xa, 0x3, 0x1000, 0x7, 0x5, 0x3, 0xe97, 0x6, 0x2b2, 0x9, 0x5, 0x9, 0x94, 0x8, 0x0, 0x9, 0x3, 0xfffffff8, 0x8000, 0x3, 0x0, 0x100, 0xb8, 0x0, 0x0, 0x0, 0xbbcd, 0x3ff, 0x4, 0x9, 0xe, 0x1, 0x11c0, 0x9, 0x7, 0x9, 0x57600000, 0xa, 0xe, 0x8, 0x2, 0x8, 0x4, 0x1, 0x80000000, 0xd, 0x7e, 0xffffffff, 0x8001, 0x0, 0xd5ce, 0x3, 0x7, 0x21, 0x8, 0xfffffffa, 0x4, 0x4, 0x6f, 0x3, 0xffffffc7, 0x8, 0xe, 0x64, 0x100, 0x80000000, 0xb, 0x4, 0x0, 0xb, 0x7fff, 0x5, 0x7ff, 0x2, 0x1, 0x7, 0x3, 0x6, 0xd54, 0xd, 0x74a02cf1, 0x100, 0x2, 0x2, 0x1ff, 0x2, 0x7, 0x3, 0x0, 0xec8, 0x3, 0x8, 0x8, 0x8, 0x8001, 0xfffffff9, 0xff, 0x2be, 0x4, 0x0, 0x5, 0x5, 0x173, 0xff, 0x8, 0x1, 0x0, 0x2, 0x6, 0x1, 0x2, 0x2, 0x27, 0xe, 0x9, 0x2, 0xc, 0x3, 0x3, 0xfe95, 0x401, 0xbbe, 0x6, 0xfffffffa, 0x6, 0x0, 0x1, 0x7fffffff, 0xfffffffa, 0x28, 0xddd3, 0x3, 0x4, 0x2fe6, 0x2, 0x0, 0x3, 0x914, 0x2, 0x0, 0x8, 0x5, 0x78c4, 0x9, 0x7, 0x1, 0x4, 0x0, 0x100, 0x2, 0x9, 0x3, 0x9, 0x36228fe2, 0x7, 0x52, 0x2, 0x9, 0x4, 0x8, 0x1, 0x0, 0xc, 0x12d, 0x40b, 0xa5, 0x18, 0x7f, 0x54, 0x200, 0x1, 0xf59f, 0x0, 0x6, 0x8, 0x5, 0x7, 0xedf9, 0x6, 0xb, 0x1, 0x4, 0x8, 0x1, 0x6, 0x3, 0x1000, 0x101, 0x8, 0xf, 0x8, 0x1, 0x7, 0xb45b, 0x596, 0x8, 0x10000, 0x22dd, 0x800, 0x0, 0x1, 0x1, 0x5, 0x5b79ba9a, 0x4, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x11c10eeb, 0x200, 0x2, 0x6, 0x0, 0x6, 0x3, 0x3ff, 0xd54, 0xfffffffe, 0x9, 0xb4d7, 0x400, 0x2, 0x6, 0x0, 0x7cd0, 0xfffffffa, 0x0, 0xffffffff, 0x6, 0x5, 0xbfc, 0x1ff, 0x0, 0x10001, 0x6, 0x1, 0x7fff, 0x6, 0x5, 0x5, 0x3, 0xaed, 0x4, 0x4, 0x25c, 0x800, 0x6, 0xffffff7f, 0xfffffffe, 0x8, 0x10000, 0x80000000, 0x401, 0x2, 0x9, 0x8, 0x4, 0xfffffffb, 0x8, 0x9, 0xb, 0x4, 0x2, 0x3, 0x8, 0x4, 0x7fffffff, 0xbf6, 0x4, 0x8, 0xd9a0, 0x3, 0x672, 0xfffffffd, 0x2, 0x3, 0x1, 0x4, 0x3c3, 0x6c3d, 0x4, 0x3, 0x1, 0x1, 0x5, 0x79, 0x3, 0x7f, 0xfff, 0xfff, 0x891d, 0x7, 0x9, 0x5, 0x6, 0xaf, 0x4e40, 0x1, 0x2, 0x7, 0x6, 0xfff, 0x3, 0x0, 0x8, 0xfffffff7, 0x9, 0x2, 0x4, 0x35d3, 0x7, 0x400, 0x2, 0x200, 0x81, 0x0, 0x7fff, 0x3, 0x2, 0x5, 0xe, 0x7fff, 0x1, 0x68, 0x1, 0xa910, 0x8001, 0x7, 0x3, 0x2, 0x400, 0x3, 0x6, 0x5cabad55, 0x2, 0x9, 0x1ff, 0x7, 0x5, 0x7, 0x80, 0xbdad, 0x8, 0xff, 0x5, 0x1, 0x6d3, 0x401, 0x1000, 0x6, 0x9e, 0x0, 0xffffff5a, 0xffffff7f, 0x7, 0x6, 0x8000, 0x7fff, 0x7f, 0x5, 0x3, 0x10000, 0x3, 0x713, 0xfffffffc, 0x6, 0xd245, 0x5, 0x400, 0xdd, 0x7f4b, 0x6, 0x6, 0x39, 0x1, 0x80000001, 0xfffffff9, 0x4, 0x4, 0xffffffff, 0x7, 0xfff, 0x8, 0x7, 0x400, 0x10000, 0x2, 0x3, 0x0, 0x5, 0xb, 0x9, 0x9374, 0x9, 0x4, 0x0, 0x9, 0x3, 0x4, 0x7, 0xffff8dfb, 0x6, 0x6, 0x81, 0x9, 0xde, 0x7, 0x8, 0x2, 0xfffffff7, 0x81, 0x4, 0x160, 0x7b9f, 0x100, 0x8000, 0xfffffeff, 0x401, 0x7, 0x5, 0x7, 0x4, 0x800, 0x2, 0x60000, 0x4, 0x10000, 0x3, 0x8000, 0x77, 0x6, 0x80000001, 0x80a7, 0x2, 0x2, 0x7, 0x7, 0x5, 0xd, 0x15e, 0x8f9, 0x10001, 0x9, 0xe00000, 0x931, 0x81, 0x8, 0x3, 0x1000, 0x7, 0x5, 0xe, 0xd7a5, 0x1, 0x3, 0x8, 0x6, 0x8000, 0x9, 0x2, 0x4, 0x6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb3}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.673623395s ago: executing program 3 (id=729): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) fsopen(&(0x7f0000000100)='aufs\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.627109186s ago: executing program 1 (id=730): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_emit_ethernet(0x1de, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d2"}}}}}, 0x0) r4 = fsopen(0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x1, 0x7f, 0x4, 0x2, 0x8001]}, &(0x7f00000000c0)=0x54) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0x6}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1.620662986s ago: executing program 0 (id=732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 1.518312287s ago: executing program 0 (id=733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES8], &(0x7f0000000600)='GPL\x00', 0x4000002, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = getuid() quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r5, &(0x7f00000001c0)={0x3, 0x0, 0xb8c3, 0x80, 0x5, 0xb29, 0x3, 0x9, 0x8}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r6 = open(&(0x7f00000002c0)='./file1\x00', 0x189242, 0x10c) fallocate(r6, 0x10, 0x2, 0x7000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0, 0x0, 0x1}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r10, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xda, 0x5a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000240)={0x3920e, r7, 0x2, 0x0, 0x2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_VLAN(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) mlockall(0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) 1.517557298s ago: executing program 3 (id=734): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0xc006, 0x0, 0x10003, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) keyctl$search(0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = socket(0x18, 0x3, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 1.37463653s ago: executing program 3 (id=735): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) 1.290522311s ago: executing program 2 (id=736): socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) keyctl$search(0xa, 0x0, &(0x7f0000000200)='keyring\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.225765572s ago: executing program 2 (id=738): socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) keyctl$search(0xa, 0x0, &(0x7f0000000200)='keyring\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="10ff0000", @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098003200"], 0x2c}], 0x1}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) pipe(&(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.159194503s ago: executing program 4 (id=740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000040000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 1.043372645s ago: executing program 4 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006818adb4ae495049eb5179aa34b887d797650bb10ebb6dfe9e100b49722ff080670d99fe378e59bdda928ab97e16093f73b7d89a807dbcd4c4bee81ad6b29d12a41150be3e3babcd5a2bb49be4e94dd913bffdd4922e34004f31937b577cd5f69d75bd00b97eca7be290577715cc3474f2fea728684d19ef8ddf46f2deca38dab60d77ffc56042c9041374e0ae87b4181a21bf049bc046235d1c4171819c977316b69720e0013ed319db2c8c999e498fbca583a397c7c2c35c98a08171a1dcc9880f50d167c362e5ae0fb74da89292ef0bc15eaa853a489b7ff62200"/259], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b36}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x10fff9) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000240)='cpuset\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newtfilter={0xc94, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xffe0, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc64, 0x2, [@TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x10000000, 0x80000000, 0x1000, 0x5, {0xe3, 0x0, 0xc000, 0xc, 0x40, 0x39}, {0x2, 0x1, 0x1, 0x88b, 0x5, 0x9}, 0x9, 0x42bd, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0xfffffffa, 0x10001, 0x0, 0x5, 0x2, 0x7, 0xd7, 0x700000, 0x1, 0x5, 0x618, 0x2c, 0x4, 0xff, 0x8, 0x7161, 0x3d0, 0x7f, 0xe0000000, 0xff, 0x0, 0x7, 0x5, 0x10, 0x7fff, 0x7, 0x6, 0x0, 0x263e, 0xffff, 0xfffffff8, 0x6, 0x7, 0x7, 0x7, 0x8, 0xa98, 0x3, 0x1, 0x1000, 0x7, 0x7, 0x8, 0x3, 0x5c, 0x5, 0x10001, 0xff, 0x80, 0x7fff, 0x4, 0x8ef, 0x6, 0xfffffffb, 0xd, 0x8, 0x1, 0xe5, 0x280, 0xe, 0xd3, 0x80, 0x7, 0xff, 0xe, 0x5, 0x9, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x5, 0x0, 0xa5, 0x2, 0x8001, 0x101, 0x2, 0x0, 0x3, 0x1000, 0x100, 0x7fffffff, 0x6, 0x2, 0x8000, 0xff, 0x5, 0x9, 0x6, 0x10001, 0xffffffff, 0x100, 0x6, 0x8, 0x8, 0x4, 0x101, 0x6, 0x2, 0x9, 0xfffffff9, 0x1, 0x1d27, 0x1ff, 0x39, 0x4, 0xeb1, 0x5, 0xd789, 0x100, 0x1, 0x4, 0xffff8000, 0x9, 0x6c2, 0x4, 0x8, 0x3ff, 0x6, 0x10, 0x8001, 0x6, 0xa24, 0x4, 0x4, 0x8001, 0x1000, 0x2, 0x8000, 0x16, 0x6, 0x400, 0x7, 0x2, 0x6, 0x5, 0xdc4, 0xe, 0x88, 0x1, 0x6, 0x7, 0x7, 0x6, 0xe93a, 0x4, 0x400, 0x4, 0xc, 0x2, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0x7, 0x5, 0x8000, 0x7ff, 0x7, 0x1, 0xed3, 0x3, 0x5eb, 0x1, 0x6, 0x7, 0x804, 0x5, 0x3, 0x80000000, 0x9, 0xf, 0xfffffffb, 0x4, 0x4, 0x81, 0xfff, 0x2, 0x3, 0x8, 0xae4, 0x5, 0xbc9, 0xff, 0xe1, 0x3, 0x0, 0xe0b600, 0x3, 0xc, 0x6, 0x2, 0x7f, 0x263, 0x50b, 0x0, 0x1, 0x800, 0x2, 0x10001, 0x48, 0x2, 0x3, 0xfffffffc, 0x1ff, 0xc, 0x3, 0x0, 0x542, 0x7, 0x2, 0x9, 0x2, 0x7, 0x6, 0x83b, 0x8, 0x3, 0xe8bf153, 0xe1, 0x80000000, 0x6, 0x7fff, 0x0, 0x81, 0x8, 0x6, 0x8, 0x2, 0x7, 0x8c7, 0x2, 0x7, 0xfffffff7, 0x9, 0x80000001, 0x9, 0x1, 0x8000, 0x7, 0x10000, 0x7, 0x551, 0x79ab, 0x10, 0x9, 0x5, 0x9, 0xa, 0x0, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xa, 0xfff, 0x0, 0x8, 0x1, 0x80, 0x40, 0x0, 0x6, 0xfffffffc, 0x6000000, 0x6c32, 0x1ff, 0x5, 0x0, 0x9, 0x3, 0x6e, 0xc6, 0x2, 0x9, 0x5, 0x1ff, 0x5, 0x0, 0x800, 0x80000000, 0xe, 0x2, 0x2, 0x7, 0x4, 0x2, 0x74b, 0xa, 0xffff, 0x800, 0x51, 0x401, 0x0, 0x0, 0x1, 0x6, 0x4, 0x3, 0xfffffff9, 0xb, 0xa, 0x3, 0x1000, 0x7, 0x5, 0x3, 0xe97, 0x6, 0x2b2, 0x9, 0x5, 0x9, 0x94, 0x8, 0x0, 0x9, 0x3, 0xfffffff8, 0x8000, 0x3, 0x0, 0x100, 0xb8, 0x0, 0x0, 0x0, 0xbbcd, 0x3ff, 0x4, 0x9, 0xe, 0x1, 0x11c0, 0x9, 0x7, 0x9, 0x57600000, 0xa, 0xe, 0x8, 0x2, 0x8, 0x4, 0x1, 0x80000000, 0xd, 0x7e, 0xffffffff, 0x8001, 0x0, 0xd5ce, 0x3, 0x7, 0x21, 0x8, 0xfffffffa, 0x4, 0x4, 0x6f, 0x3, 0xffffffc7, 0x8, 0xe, 0x64, 0x100, 0x80000000, 0xb, 0x4, 0x0, 0xb, 0x7fff, 0x5, 0x7ff, 0x2, 0x1, 0x7, 0x3, 0x6, 0xd54, 0xd, 0x74a02cf1, 0x100, 0x2, 0x2, 0x1ff, 0x2, 0x7, 0x3, 0x0, 0xec8, 0x3, 0x8, 0x8, 0x8, 0x8001, 0xfffffff9, 0xff, 0x2be, 0x4, 0x0, 0x5, 0x5, 0x173, 0xff, 0x8, 0x1, 0x0, 0x2, 0x6, 0x1, 0x2, 0x2, 0x27, 0xe, 0x9, 0x2, 0xc, 0x3, 0x3, 0xfe95, 0x401, 0xbbe, 0x6, 0xfffffffa, 0x6, 0x0, 0x1, 0x7fffffff, 0xfffffffa, 0x28, 0xddd3, 0x3, 0x4, 0x2fe6, 0x2, 0x0, 0x3, 0x914, 0x2, 0x0, 0x8, 0x5, 0x78c4, 0x9, 0x7, 0x1, 0x4, 0x0, 0x100, 0x2, 0x9, 0x3, 0x9, 0x36228fe2, 0x7, 0x52, 0x2, 0x9, 0x4, 0x8, 0x1, 0x0, 0xc, 0x12d, 0x40b, 0xa5, 0x18, 0x7f, 0x54, 0x200, 0x1, 0xf59f, 0x0, 0x6, 0x8, 0x5, 0x7, 0xedf9, 0x6, 0xb, 0x1, 0x4, 0x8, 0x1, 0x6, 0x3, 0x1000, 0x101, 0x8, 0xf, 0x8, 0x1, 0x7, 0xb45b, 0x596, 0x8, 0x10000, 0x22dd, 0x800, 0x0, 0x1, 0x1, 0x5, 0x5b79ba9a, 0x4, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x11c10eeb, 0x200, 0x2, 0x6, 0x0, 0x6, 0x3, 0x3ff, 0xd54, 0xfffffffe, 0x9, 0xb4d7, 0x400, 0x2, 0x6, 0x0, 0x7cd0, 0xfffffffa, 0x0, 0xffffffff, 0x6, 0x5, 0xbfc, 0x1ff, 0x0, 0x10001, 0x6, 0x1, 0x7fff, 0x6, 0x5, 0x5, 0x3, 0xaed, 0x4, 0x4, 0x25c, 0x800, 0x6, 0xffffff7f, 0xfffffffe, 0x8, 0x10000, 0x80000000, 0x401, 0x2, 0x9, 0x8, 0x4, 0xfffffffb, 0x8, 0x9, 0xb, 0x4, 0x2, 0x3, 0x8, 0x4, 0x7fffffff, 0xbf6, 0x4, 0x8, 0xd9a0, 0x3, 0x672, 0xfffffffd, 0x2, 0x3, 0x1, 0x4, 0x3c3, 0x6c3d, 0x4, 0x3, 0x1, 0x1, 0x5, 0x79, 0x3, 0x7f, 0xfff, 0xfff, 0x891d, 0x7, 0x9, 0x5, 0x6, 0xaf, 0x4e40, 0x1, 0x2, 0x7, 0x6, 0xfff, 0x3, 0x0, 0x8, 0xfffffff7, 0x9, 0x2, 0x4, 0x35d3, 0x7, 0x400, 0x2, 0x200, 0x81, 0x0, 0x7fff, 0x3, 0x2, 0x5, 0xe, 0x7fff, 0x1, 0x68, 0x1, 0xa910, 0x8001, 0x7, 0x3, 0x2, 0x400, 0x3, 0x6, 0x5cabad55, 0x2, 0x9, 0x1ff, 0x7, 0x5, 0x7, 0x80, 0xbdad, 0x8, 0xff, 0x5, 0x1, 0x6d3, 0x401, 0x1000, 0x6, 0x9e, 0x0, 0xffffff5a, 0xffffff7f, 0x7, 0x6, 0x8000, 0x7fff, 0x7f, 0x5, 0x3, 0x10000, 0x3, 0x713, 0xfffffffc, 0x6, 0xd245, 0x5, 0x400, 0xdd, 0x7f4b, 0x6, 0x6, 0x39, 0x1, 0x80000001, 0xfffffff9, 0x4, 0x4, 0xffffffff, 0x7, 0xfff, 0x8, 0x7, 0x400, 0x10000, 0x2, 0x3, 0x0, 0x5, 0xb, 0x9, 0x9374, 0x9, 0x4, 0x0, 0x9, 0x3, 0x4, 0x7, 0xffff8dfb, 0x6, 0x6, 0x81, 0x9, 0xde, 0x7, 0x8, 0x2, 0xfffffff7, 0x81, 0x4, 0x160, 0x7b9f, 0x100, 0x8000, 0xfffffeff, 0x401, 0x7, 0x5, 0x7, 0x4, 0x800, 0x2, 0x60000, 0x4, 0x10000, 0x3, 0x8000, 0x77, 0x6, 0x80000001, 0x80a7, 0x2, 0x2, 0x7, 0x7, 0x5, 0xd, 0x15e, 0x8f9, 0x10001, 0x9, 0xe00000, 0x931, 0x81, 0x8, 0x3, 0x1000, 0x7, 0x5, 0xe, 0xd7a5, 0x1, 0x3, 0x8, 0x6, 0x8000, 0x9, 0x2, 0x4, 0x6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb3}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.028795755s ago: executing program 3 (id=742): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000040), 0x1, 0x79b, &(0x7f0000000a40)="$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") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x2}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES32=r0, @ANYRESHEX=r0], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r9, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}, {0x0}], 0x2) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000000c0)=0x32) r10 = socket$unix(0x1, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r11 = accept$unix(r10, &(0x7f0000000280), &(0x7f0000000200)=0x6e) poll(&(0x7f0000000300)=[{r11, 0x4000}, {r7, 0x20c2}], 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 977.759586ms ago: executing program 2 (id=743): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 977.270886ms ago: executing program 2 (id=744): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) 950.963096ms ago: executing program 2 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, r1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) socket$kcm(0x10, 0x3, 0x10) listen(r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) keyctl$get_persistent(0x9, 0xffffffffffffffff, 0x0) 693.7076ms ago: executing program 1 (id=746): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "5ab48fab43d1bf2960931edd7c27f4a9b4be29b7"}, 0x15, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x400000000000}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) 616.358221ms ago: executing program 3 (id=747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRES8], &(0x7f0000000600)='GPL\x00', 0x4000002, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = getuid() quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r5, &(0x7f00000001c0)={0x3, 0x0, 0xb8c3, 0x80, 0x5, 0xb29, 0x3, 0x9, 0x8}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r6 = open(&(0x7f00000002c0)='./file1\x00', 0x189242, 0x10c) fallocate(r6, 0x10, 0x2, 0x7000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0, 0x0, 0x1}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r10, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xda, 0x5a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000240)={0x3920e, r7, 0x2, 0x0, 0x2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_VLAN(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) mlockall(0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) 614.679541ms ago: executing program 4 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006818adb4ae495049eb5179aa34b887d797650bb10ebb6dfe9e100b49722ff080670d99fe378e59bdda928ab97e16093f73b7d89a807dbcd4c4bee81ad6b29d12a41150be3e3babcd5a2bb49be4e94dd913bffdd4922e34004f31937b577cd5f69d75bd00b97eca7be290577715cc3474f2fea728684d19ef8ddf46f2deca38dab60d77ffc56042c9041374e0ae87b4181a21bf049bc046235d1c4171819c977316b69720e0013ed319db2c8c999e498fbca583a397c7c2c35c98a08171a1dcc9880f50d167c362e5ae0fb74da89292ef0bc15eaa853a489b7ff62200"/259], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b36}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x10fff9) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r6, &(0x7f0000000240)='cpuset\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newtfilter={0xc94, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xffe0, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc64, 0x2, [@TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x10000000, 0x80000000, 0x1000, 0x5, {0xe3, 0x0, 0xc000, 0xc, 0x40, 0x39}, {0x2, 0x1, 0x1, 0x88b, 0x5, 0x9}, 0x9, 0x42bd, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0xfffffffa, 0x10001, 0x0, 0x5, 0x2, 0x7, 0xd7, 0x700000, 0x1, 0x5, 0x618, 0x2c, 0x4, 0xff, 0x8, 0x7161, 0x3d0, 0x7f, 0xe0000000, 0xff, 0x0, 0x7, 0x5, 0x10, 0x7fff, 0x7, 0x6, 0x0, 0x263e, 0xffff, 0xfffffff8, 0x6, 0x7, 0x7, 0x7, 0x8, 0xa98, 0x3, 0x1, 0x1000, 0x7, 0x7, 0x8, 0x3, 0x5c, 0x5, 0x10001, 0xff, 0x80, 0x7fff, 0x4, 0x8ef, 0x6, 0xfffffffb, 0xd, 0x8, 0x1, 0xe5, 0x280, 0xe, 0xd3, 0x80, 0x7, 0xff, 0xe, 0x5, 0x9, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x5, 0x0, 0xa5, 0x2, 0x8001, 0x101, 0x2, 0x0, 0x3, 0x1000, 0x100, 0x7fffffff, 0x6, 0x2, 0x8000, 0xff, 0x5, 0x9, 0x6, 0x10001, 0xffffffff, 0x100, 0x6, 0x8, 0x8, 0x4, 0x101, 0x6, 0x2, 0x9, 0xfffffff9, 0x1, 0x1d27, 0x1ff, 0x39, 0x4, 0xeb1, 0x5, 0xd789, 0x100, 0x1, 0x4, 0xffff8000, 0x9, 0x6c2, 0x4, 0x8, 0x3ff, 0x6, 0x10, 0x8001, 0x6, 0xa24, 0x4, 0x4, 0x8001, 0x1000, 0x2, 0x8000, 0x16, 0x6, 0x400, 0x7, 0x2, 0x6, 0x5, 0xdc4, 0xe, 0x88, 0x1, 0x6, 0x7, 0x7, 0x6, 0xe93a, 0x4, 0x400, 0x4, 0xc, 0x2, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0x7, 0x5, 0x8000, 0x7ff, 0x7, 0x1, 0xed3, 0x3, 0x5eb, 0x1, 0x6, 0x7, 0x804, 0x5, 0x3, 0x80000000, 0x9, 0xf, 0xfffffffb, 0x4, 0x4, 0x81, 0xfff, 0x2, 0x3, 0x8, 0xae4, 0x5, 0xbc9, 0xff, 0xe1, 0x3, 0x0, 0xe0b600, 0x3, 0xc, 0x6, 0x2, 0x7f, 0x263, 0x50b, 0x0, 0x1, 0x800, 0x2, 0x10001, 0x48, 0x2, 0x3, 0xfffffffc, 0x1ff, 0xc, 0x3, 0x0, 0x542, 0x7, 0x2, 0x9, 0x2, 0x7, 0x6, 0x83b, 0x8, 0x3, 0xe8bf153, 0xe1, 0x80000000, 0x6, 0x7fff, 0x0, 0x81, 0x8, 0x6, 0x8, 0x2, 0x7, 0x8c7, 0x2, 0x7, 0xfffffff7, 0x9, 0x80000001, 0x9, 0x1, 0x8000, 0x7, 0x10000, 0x7, 0x551, 0x79ab, 0x10, 0x9, 0x5, 0x9, 0xa, 0x0, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xa, 0xfff, 0x0, 0x8, 0x1, 0x80, 0x40, 0x0, 0x6, 0xfffffffc, 0x6000000, 0x6c32, 0x1ff, 0x5, 0x0, 0x9, 0x3, 0x6e, 0xc6, 0x2, 0x9, 0x5, 0x1ff, 0x5, 0x0, 0x800, 0x80000000, 0xe, 0x2, 0x2, 0x7, 0x4, 0x2, 0x74b, 0xa, 0xffff, 0x800, 0x51, 0x401, 0x0, 0x0, 0x1, 0x6, 0x4, 0x3, 0xfffffff9, 0xb, 0xa, 0x3, 0x1000, 0x7, 0x5, 0x3, 0xe97, 0x6, 0x2b2, 0x9, 0x5, 0x9, 0x94, 0x8, 0x0, 0x9, 0x3, 0xfffffff8, 0x8000, 0x3, 0x0, 0x100, 0xb8, 0x0, 0x0, 0x0, 0xbbcd, 0x3ff, 0x4, 0x9, 0xe, 0x1, 0x11c0, 0x9, 0x7, 0x9, 0x57600000, 0xa, 0xe, 0x8, 0x2, 0x8, 0x4, 0x1, 0x80000000, 0xd, 0x7e, 0xffffffff, 0x8001, 0x0, 0xd5ce, 0x3, 0x7, 0x21, 0x8, 0xfffffffa, 0x4, 0x4, 0x6f, 0x3, 0xffffffc7, 0x8, 0xe, 0x64, 0x100, 0x80000000, 0xb, 0x4, 0x0, 0xb, 0x7fff, 0x5, 0x7ff, 0x2, 0x1, 0x7, 0x3, 0x6, 0xd54, 0xd, 0x74a02cf1, 0x100, 0x2, 0x2, 0x1ff, 0x2, 0x7, 0x3, 0x0, 0xec8, 0x3, 0x8, 0x8, 0x8, 0x8001, 0xfffffff9, 0xff, 0x2be, 0x4, 0x0, 0x5, 0x5, 0x173, 0xff, 0x8, 0x1, 0x0, 0x2, 0x6, 0x1, 0x2, 0x2, 0x27, 0xe, 0x9, 0x2, 0xc, 0x3, 0x3, 0xfe95, 0x401, 0xbbe, 0x6, 0xfffffffa, 0x6, 0x0, 0x1, 0x7fffffff, 0xfffffffa, 0x28, 0xddd3, 0x3, 0x4, 0x2fe6, 0x2, 0x0, 0x3, 0x914, 0x2, 0x0, 0x8, 0x5, 0x78c4, 0x9, 0x7, 0x1, 0x4, 0x0, 0x100, 0x2, 0x9, 0x3, 0x9, 0x36228fe2, 0x7, 0x52, 0x2, 0x9, 0x4, 0x8, 0x1, 0x0, 0xc, 0x12d, 0x40b, 0xa5, 0x18, 0x7f, 0x54, 0x200, 0x1, 0xf59f, 0x0, 0x6, 0x8, 0x5, 0x7, 0xedf9, 0x6, 0xb, 0x1, 0x4, 0x8, 0x1, 0x6, 0x3, 0x1000, 0x101, 0x8, 0xf, 0x8, 0x1, 0x7, 0xb45b, 0x596, 0x8, 0x10000, 0x22dd, 0x800, 0x0, 0x1, 0x1, 0x5, 0x5b79ba9a, 0x4, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x11c10eeb, 0x200, 0x2, 0x6, 0x0, 0x6, 0x3, 0x3ff, 0xd54, 0xfffffffe, 0x9, 0xb4d7, 0x400, 0x2, 0x6, 0x0, 0x7cd0, 0xfffffffa, 0x0, 0xffffffff, 0x6, 0x5, 0xbfc, 0x1ff, 0x0, 0x10001, 0x6, 0x1, 0x7fff, 0x6, 0x5, 0x5, 0x3, 0xaed, 0x4, 0x4, 0x25c, 0x800, 0x6, 0xffffff7f, 0xfffffffe, 0x8, 0x10000, 0x80000000, 0x401, 0x2, 0x9, 0x8, 0x4, 0xfffffffb, 0x8, 0x9, 0xb, 0x4, 0x2, 0x3, 0x8, 0x4, 0x7fffffff, 0xbf6, 0x4, 0x8, 0xd9a0, 0x3, 0x672, 0xfffffffd, 0x2, 0x3, 0x1, 0x4, 0x3c3, 0x6c3d, 0x4, 0x3, 0x1, 0x1, 0x5, 0x79, 0x3, 0x7f, 0xfff, 0xfff, 0x891d, 0x7, 0x9, 0x5, 0x6, 0xaf, 0x4e40, 0x1, 0x2, 0x7, 0x6, 0xfff, 0x3, 0x0, 0x8, 0xfffffff7, 0x9, 0x2, 0x4, 0x35d3, 0x7, 0x400, 0x2, 0x200, 0x81, 0x0, 0x7fff, 0x3, 0x2, 0x5, 0xe, 0x7fff, 0x1, 0x68, 0x1, 0xa910, 0x8001, 0x7, 0x3, 0x2, 0x400, 0x3, 0x6, 0x5cabad55, 0x2, 0x9, 0x1ff, 0x7, 0x5, 0x7, 0x80, 0xbdad, 0x8, 0xff, 0x5, 0x1, 0x6d3, 0x401, 0x1000, 0x6, 0x9e, 0x0, 0xffffff5a, 0xffffff7f, 0x7, 0x6, 0x8000, 0x7fff, 0x7f, 0x5, 0x3, 0x10000, 0x3, 0x713, 0xfffffffc, 0x6, 0xd245, 0x5, 0x400, 0xdd, 0x7f4b, 0x6, 0x6, 0x39, 0x1, 0x80000001, 0xfffffff9, 0x4, 0x4, 0xffffffff, 0x7, 0xfff, 0x8, 0x7, 0x400, 0x10000, 0x2, 0x3, 0x0, 0x5, 0xb, 0x9, 0x9374, 0x9, 0x4, 0x0, 0x9, 0x3, 0x4, 0x7, 0xffff8dfb, 0x6, 0x6, 0x81, 0x9, 0xde, 0x7, 0x8, 0x2, 0xfffffff7, 0x81, 0x4, 0x160, 0x7b9f, 0x100, 0x8000, 0xfffffeff, 0x401, 0x7, 0x5, 0x7, 0x4, 0x800, 0x2, 0x60000, 0x4, 0x10000, 0x3, 0x8000, 0x77, 0x6, 0x80000001, 0x80a7, 0x2, 0x2, 0x7, 0x7, 0x5, 0xd, 0x15e, 0x8f9, 0x10001, 0x9, 0xe00000, 0x931, 0x81, 0x8, 0x3, 0x1000, 0x7, 0x5, 0xe, 0xd7a5, 0x1, 0x3, 0x8, 0x6, 0x8000, 0x9, 0x2, 0x4, 0x6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb3}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x81}, 0x800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040), &(0x7f0000000280)) 537.426202ms ago: executing program 1 (id=749): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x5909, &(0x7f00000006c0)={0x0, 0x2fb8, 0x2000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x24dc, 0x1, 0x9, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0xc006, 0x0, 0x10003, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x200, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) keyctl$search(0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r6 = socket(0x18, 0x3, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xa00002, &(0x7f0000000140), 0x64, 0x50e, &(0x7f00000008c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x206024, &(0x7f0000000640)={[{@noacl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}], [{@fowner_eq}]}, 0x2, 0x26c, &(0x7f0000001240)="$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") write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x9, 0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffe}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000dca2000000000000070200d43385d5616e9b6dfb969ce209e400f8ffffffb703000002000000b70400"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) 429.450444ms ago: executing program 4 (id=750): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0xc006, 0x0, 0x10003, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) keyctl$search(0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = socket(0x18, 0x3, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) (fail_nth: 3) 412.904574ms ago: executing program 1 (id=751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 160.762178ms ago: executing program 0 (id=752): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x43, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x4, 0x5, 0xc, 0x4}], 0x10, 0x2, @void, @value}, 0x94) writev(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)="8eea7a99", 0x4}], 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d0}]}, 0x1c}}, 0x41) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000780)='wg0\x00', 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}], 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000002800000a800128009000100766c616e00000000980002800600010002000000340004800c00010005000000090000000c00010008000000020000000c000100010000008c0000000c0001000900000004000000580004800c0001006d590000ff0f00000c00010007000000090000000800000004000000090000000c00010005000000ea0000000c000100fa750000090000000c00010002000000090000000c000100000000000f00000008000500", @ANYRES16=r9], 0xd0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x90}}, 0x24040084) 153.618308ms ago: executing program 1 (id=753): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) 77.633469ms ago: executing program 4 (id=754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000040000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 72.799679ms ago: executing program 0 (id=755): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) 59.082159ms ago: executing program 4 (id=756): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_emit_ethernet(0x1de, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) r4 = fsopen(0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x1, 0x7f, 0x4, 0x2, 0x8001]}, &(0x7f00000000c0)=0x54) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0x6}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1.53248ms ago: executing program 0 (id=757): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000040), 0x1, 0x79b, &(0x7f0000000a40)="$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") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x2}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES32=r0, @ANYRESHEX=r0], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r9, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}, {0x0}], 0x2) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000000c0)=0x32) r10 = socket$unix(0x1, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r11 = accept$unix(r10, &(0x7f0000000280), &(0x7f0000000200)=0x6e) poll(&(0x7f0000000300)=[{r11, 0x4000}, {r7, 0x20c2}], 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 326.26µs ago: executing program 2 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006818adb4ae495049eb5179aa34b887d797650bb10ebb6dfe9e100b49722ff080670d99fe378e59bdda928ab97e16093f73b7d89a807dbcd4c4bee81ad6b29d12a41150be3e3babcd5a2bb49be4e94dd913bffdd4922e34004f31937b577cd5f69d75bd00b97eca7be290577715cc3474f2fea728684d19ef8ddf46f2deca38dab60d77ffc56042c9041374e0ae87b4181a21bf049bc046235d1c4171819c977316b69720e0013ed319db2c8c999e498fbca583a397c7c2c35c98a08171a1dcc9880f50d167c362e5ae0fb74da89292ef0bc15eaa853a489b7ff62200"/259], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b36}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x10fff9) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000240)='cpuset\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newtfilter={0xc94, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xffe0, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc64, 0x2, [@TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x10000000, 0x80000000, 0x1000, 0x5, {0xe3, 0x0, 0xc000, 0xc, 0x40, 0x39}, {0x2, 0x1, 0x1, 0x88b, 0x5, 0x9}, 0x9, 0x42bd, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0xfffffffa, 0x10001, 0x0, 0x5, 0x2, 0x7, 0xd7, 0x700000, 0x1, 0x5, 0x618, 0x2c, 0x4, 0xff, 0x8, 0x7161, 0x3d0, 0x7f, 0xe0000000, 0xff, 0x0, 0x7, 0x5, 0x10, 0x7fff, 0x7, 0x6, 0x0, 0x263e, 0xffff, 0xfffffff8, 0x6, 0x7, 0x7, 0x7, 0x8, 0xa98, 0x3, 0x1, 0x1000, 0x7, 0x7, 0x8, 0x3, 0x5c, 0x5, 0x10001, 0xff, 0x80, 0x7fff, 0x4, 0x8ef, 0x6, 0xfffffffb, 0xd, 0x8, 0x1, 0xe5, 0x280, 0xe, 0xd3, 0x80, 0x7, 0xff, 0xe, 0x5, 0x9, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x5, 0x0, 0xa5, 0x2, 0x8001, 0x101, 0x2, 0x0, 0x3, 0x1000, 0x100, 0x7fffffff, 0x6, 0x2, 0x8000, 0xff, 0x5, 0x9, 0x6, 0x10001, 0xffffffff, 0x100, 0x6, 0x8, 0x8, 0x4, 0x101, 0x6, 0x2, 0x9, 0xfffffff9, 0x1, 0x1d27, 0x1ff, 0x39, 0x4, 0xeb1, 0x5, 0xd789, 0x100, 0x1, 0x4, 0xffff8000, 0x9, 0x6c2, 0x4, 0x8, 0x3ff, 0x6, 0x10, 0x8001, 0x6, 0xa24, 0x4, 0x4, 0x8001, 0x1000, 0x2, 0x8000, 0x16, 0x6, 0x400, 0x7, 0x2, 0x6, 0x5, 0xdc4, 0xe, 0x88, 0x1, 0x6, 0x7, 0x7, 0x6, 0xe93a, 0x4, 0x400, 0x4, 0xc, 0x2, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0x7, 0x5, 0x8000, 0x7ff, 0x7, 0x1, 0xed3, 0x3, 0x5eb, 0x1, 0x6, 0x7, 0x804, 0x5, 0x3, 0x80000000, 0x9, 0xf, 0xfffffffb, 0x4, 0x4, 0x81, 0xfff, 0x2, 0x3, 0x8, 0xae4, 0x5, 0xbc9, 0xff, 0xe1, 0x3, 0x0, 0xe0b600, 0x3, 0xc, 0x6, 0x2, 0x7f, 0x263, 0x50b, 0x0, 0x1, 0x800, 0x2, 0x10001, 0x48, 0x2, 0x3, 0xfffffffc, 0x1ff, 0xc, 0x3, 0x0, 0x542, 0x7, 0x2, 0x9, 0x2, 0x7, 0x6, 0x83b, 0x8, 0x3, 0xe8bf153, 0xe1, 0x80000000, 0x6, 0x7fff, 0x0, 0x81, 0x8, 0x6, 0x8, 0x2, 0x7, 0x8c7, 0x2, 0x7, 0xfffffff7, 0x9, 0x80000001, 0x9, 0x1, 0x8000, 0x7, 0x10000, 0x7, 0x551, 0x79ab, 0x10, 0x9, 0x5, 0x9, 0xa, 0x0, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xa, 0xfff, 0x0, 0x8, 0x1, 0x80, 0x40, 0x0, 0x6, 0xfffffffc, 0x6000000, 0x6c32, 0x1ff, 0x5, 0x0, 0x9, 0x3, 0x6e, 0xc6, 0x2, 0x9, 0x5, 0x1ff, 0x5, 0x0, 0x800, 0x80000000, 0xe, 0x2, 0x2, 0x7, 0x4, 0x2, 0x74b, 0xa, 0xffff, 0x800, 0x51, 0x401, 0x0, 0x0, 0x1, 0x6, 0x4, 0x3, 0xfffffff9, 0xb, 0xa, 0x3, 0x1000, 0x7, 0x5, 0x3, 0xe97, 0x6, 0x2b2, 0x9, 0x5, 0x9, 0x94, 0x8, 0x0, 0x9, 0x3, 0xfffffff8, 0x8000, 0x3, 0x0, 0x100, 0xb8, 0x0, 0x0, 0x0, 0xbbcd, 0x3ff, 0x4, 0x9, 0xe, 0x1, 0x11c0, 0x9, 0x7, 0x9, 0x57600000, 0xa, 0xe, 0x8, 0x2, 0x8, 0x4, 0x1, 0x80000000, 0xd, 0x7e, 0xffffffff, 0x8001, 0x0, 0xd5ce, 0x3, 0x7, 0x21, 0x8, 0xfffffffa, 0x4, 0x4, 0x6f, 0x3, 0xffffffc7, 0x8, 0xe, 0x64, 0x100, 0x80000000, 0xb, 0x4, 0x0, 0xb, 0x7fff, 0x5, 0x7ff, 0x2, 0x1, 0x7, 0x3, 0x6, 0xd54, 0xd, 0x74a02cf1, 0x100, 0x2, 0x2, 0x1ff, 0x2, 0x7, 0x3, 0x0, 0xec8, 0x3, 0x8, 0x8, 0x8, 0x8001, 0xfffffff9, 0xff, 0x2be, 0x4, 0x0, 0x5, 0x5, 0x173, 0xff, 0x8, 0x1, 0x0, 0x2, 0x6, 0x1, 0x2, 0x2, 0x27, 0xe, 0x9, 0x2, 0xc, 0x3, 0x3, 0xfe95, 0x401, 0xbbe, 0x6, 0xfffffffa, 0x6, 0x0, 0x1, 0x7fffffff, 0xfffffffa, 0x28, 0xddd3, 0x3, 0x4, 0x2fe6, 0x2, 0x0, 0x3, 0x914, 0x2, 0x0, 0x8, 0x5, 0x78c4, 0x9, 0x7, 0x1, 0x4, 0x0, 0x100, 0x2, 0x9, 0x3, 0x9, 0x36228fe2, 0x7, 0x52, 0x2, 0x9, 0x4, 0x8, 0x1, 0x0, 0xc, 0x12d, 0x40b, 0xa5, 0x18, 0x7f, 0x54, 0x200, 0x1, 0xf59f, 0x0, 0x6, 0x8, 0x5, 0x7, 0xedf9, 0x6, 0xb, 0x1, 0x4, 0x8, 0x1, 0x6, 0x3, 0x1000, 0x101, 0x8, 0xf, 0x8, 0x1, 0x7, 0xb45b, 0x596, 0x8, 0x10000, 0x22dd, 0x800, 0x0, 0x1, 0x1, 0x5, 0x5b79ba9a, 0x4, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x11c10eeb, 0x200, 0x2, 0x6, 0x0, 0x6, 0x3, 0x3ff, 0xd54, 0xfffffffe, 0x9, 0xb4d7, 0x400, 0x2, 0x6, 0x0, 0x7cd0, 0xfffffffa, 0x0, 0xffffffff, 0x6, 0x5, 0xbfc, 0x1ff, 0x0, 0x10001, 0x6, 0x1, 0x7fff, 0x6, 0x5, 0x5, 0x3, 0xaed, 0x4, 0x4, 0x25c, 0x800, 0x6, 0xffffff7f, 0xfffffffe, 0x8, 0x10000, 0x80000000, 0x401, 0x2, 0x9, 0x8, 0x4, 0xfffffffb, 0x8, 0x9, 0xb, 0x4, 0x2, 0x3, 0x8, 0x4, 0x7fffffff, 0xbf6, 0x4, 0x8, 0xd9a0, 0x3, 0x672, 0xfffffffd, 0x2, 0x3, 0x1, 0x4, 0x3c3, 0x6c3d, 0x4, 0x3, 0x1, 0x1, 0x5, 0x79, 0x3, 0x7f, 0xfff, 0xfff, 0x891d, 0x7, 0x9, 0x5, 0x6, 0xaf, 0x4e40, 0x1, 0x2, 0x7, 0x6, 0xfff, 0x3, 0x0, 0x8, 0xfffffff7, 0x9, 0x2, 0x4, 0x35d3, 0x7, 0x400, 0x2, 0x200, 0x81, 0x0, 0x7fff, 0x3, 0x2, 0x5, 0xe, 0x7fff, 0x1, 0x68, 0x1, 0xa910, 0x8001, 0x7, 0x3, 0x2, 0x400, 0x3, 0x6, 0x5cabad55, 0x2, 0x9, 0x1ff, 0x7, 0x5, 0x7, 0x80, 0xbdad, 0x8, 0xff, 0x5, 0x1, 0x6d3, 0x401, 0x1000, 0x6, 0x9e, 0x0, 0xffffff5a, 0xffffff7f, 0x7, 0x6, 0x8000, 0x7fff, 0x7f, 0x5, 0x3, 0x10000, 0x3, 0x713, 0xfffffffc, 0x6, 0xd245, 0x5, 0x400, 0xdd, 0x7f4b, 0x6, 0x6, 0x39, 0x1, 0x80000001, 0xfffffff9, 0x4, 0x4, 0xffffffff, 0x7, 0xfff, 0x8, 0x7, 0x400, 0x10000, 0x2, 0x3, 0x0, 0x5, 0xb, 0x9, 0x9374, 0x9, 0x4, 0x0, 0x9, 0x3, 0x4, 0x7, 0xffff8dfb, 0x6, 0x6, 0x81, 0x9, 0xde, 0x7, 0x8, 0x2, 0xfffffff7, 0x81, 0x4, 0x160, 0x7b9f, 0x100, 0x8000, 0xfffffeff, 0x401, 0x7, 0x5, 0x7, 0x4, 0x800, 0x2, 0x60000, 0x4, 0x10000, 0x3, 0x8000, 0x77, 0x6, 0x80000001, 0x80a7, 0x2, 0x2, 0x7, 0x7, 0x5, 0xd, 0x15e, 0x8f9, 0x10001, 0x9, 0xe00000, 0x931, 0x81, 0x8, 0x3, 0x1000, 0x7, 0x5, 0xe, 0xd7a5, 0x1, 0x3, 0x8, 0x6, 0x8000, 0x9, 0x2, 0x4, 0x6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb3}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x81}, 0x800) 0s ago: executing program 1 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) close(r1) kernel console output (not intermixed with test programs): v1 [ 55.189912][ T3931] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 55.216613][ T3939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.224351][ T3939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.239550][ T3942] loop0: detected capacity change from 0 to 2048 [ 55.246169][ T3939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.253980][ T3939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.267478][ T3931] loop2: detected capacity change from 0 to 512 [ 55.280278][ T3931] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.287858][ T3931] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.145: bg 0: block 248: padding at end of block bitmap is not set [ 55.291342][ T3942] Alternate GPT is invalid, using primary GPT. [ 55.308868][ T3942] loop0: p2 p3 p7 [ 55.309447][ T3931] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.145: Failed to acquire dquot type 1 [ 55.327131][ T3931] EXT4-fs (loop2): 1 truncate cleaned up [ 55.334840][ T3937] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 55.356569][ T3931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.408092][ T3946] loop3: detected capacity change from 0 to 4096 [ 55.419091][ T3937] bond1 (unregistering): Released all slaves [ 55.429996][ T3946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.489607][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.499679][ T3931] syz.2.145 (3931) used greatest stack depth: 9528 bytes left [ 55.539868][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 55.570532][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.679466][ T3968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.684151][ T3966] loop1: detected capacity change from 0 to 2048 [ 55.781605][ T3722] Alternate GPT is invalid, using primary GPT. [ 55.788703][ T3722] loop1: p2 p3 p7 [ 55.835468][ T3974] netlink: 64 bytes leftover after parsing attributes in process `syz.0.164'. [ 55.863033][ T3977] loop3: detected capacity change from 0 to 2048 [ 55.899357][ T3683] Alternate GPT is invalid, using primary GPT. [ 55.903256][ T3979] FAULT_INJECTION: forcing a failure. [ 55.903256][ T3979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.906248][ T3683] loop3: p2 p3 p7 [ 55.919458][ T3979] CPU: 0 UID: 0 PID: 3979 Comm: syz.0.166 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 55.919494][ T3979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.919552][ T3979] Call Trace: [ 55.919561][ T3979] [ 55.919573][ T3979] __dump_stack+0x1d/0x30 [ 55.919601][ T3979] dump_stack_lvl+0xe8/0x140 [ 55.919627][ T3979] dump_stack+0x15/0x1b [ 55.919655][ T3979] should_fail_ex+0x265/0x280 [ 55.919715][ T3979] should_fail+0xb/0x20 [ 55.919754][ T3979] should_fail_usercopy+0x1a/0x20 [ 55.919780][ T3979] _copy_from_iter+0xcf/0xdd0 [ 55.919806][ T3979] ? __build_skb_around+0x1a0/0x200 [ 55.919919][ T3979] ? __alloc_skb+0x223/0x320 [ 55.920006][ T3979] netlink_sendmsg+0x471/0x6b0 [ 55.920035][ T3979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.920061][ T3979] __sock_sendmsg+0x142/0x180 [ 55.920097][ T3979] ____sys_sendmsg+0x31e/0x4e0 [ 55.920193][ T3979] ___sys_sendmsg+0x17b/0x1d0 [ 55.920278][ T3979] __x64_sys_sendmsg+0xd4/0x160 [ 55.920311][ T3979] x64_sys_call+0x2999/0x2fb0 [ 55.920339][ T3979] do_syscall_64+0xd0/0x1a0 [ 55.920370][ T3979] ? clear_bhb_loop+0x40/0x90 [ 55.920475][ T3979] ? clear_bhb_loop+0x40/0x90 [ 55.920503][ T3979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.920534][ T3979] RIP: 0033:0x7f08c8d3e969 [ 55.920555][ T3979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.920578][ T3979] RSP: 002b:00007f08c73a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.920602][ T3979] RAX: ffffffffffffffda RBX: 00007f08c8f65fa0 RCX: 00007f08c8d3e969 [ 55.920675][ T3979] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 55.920691][ T3979] RBP: 00007f08c73a7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.920706][ T3979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.920722][ T3979] R13: 0000000000000000 R14: 00007f08c8f65fa0 R15: 00007fff25244458 [ 55.920746][ T3979] [ 56.032316][ T3972] loop2: detected capacity change from 0 to 512 [ 56.047360][ T3966] Alternate GPT is invalid, using primary GPT. [ 56.144540][ T3966] loop1: p2 p3 p7 [ 56.216363][ T3972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.233266][ T3977] Alternate GPT is invalid, using primary GPT. [ 56.240233][ T3977] loop3: p2 p3 p7 [ 56.251108][ T3972] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.269676][ T3989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 56.331995][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 56.436915][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 56.436961][ T29] audit: type=1326 audit(1747258345.134:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.447681][ T3990] netlink: 256 bytes leftover after parsing attributes in process `syz.1.169'. [ 56.467979][ T29] audit: type=1326 audit(1747258345.134:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.488078][ T29] audit: type=1326 audit(1747258345.164:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.532490][ T29] audit: type=1326 audit(1747258345.164:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.556553][ T29] audit: type=1326 audit(1747258345.164:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.651002][ T29] audit: type=1326 audit(1747258345.284:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.675315][ T29] audit: type=1326 audit(1747258345.284:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.699075][ T29] audit: type=1326 audit(1747258345.284:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.723394][ T29] audit: type=1326 audit(1747258345.284:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.747960][ T29] audit: type=1326 audit(1747258345.294:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 56.943387][ T4014] loop3: detected capacity change from 0 to 2048 [ 56.988121][ T4009] loop4: detected capacity change from 0 to 512 [ 57.002652][ T3722] Alternate GPT is invalid, using primary GPT. [ 57.010383][ T3722] loop3: p2 p3 p7 [ 57.023100][ T4009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.039122][ T4014] Alternate GPT is invalid, using primary GPT. [ 57.046409][ T4014] loop3: p2 p3 p7 [ 57.056620][ T4009] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.093625][ T4009] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.176: bg 0: block 248: padding at end of block bitmap is not set [ 57.185727][ T4009] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.176: Failed to acquire dquot type 1 [ 57.201375][ T4025] loop3: detected capacity change from 0 to 512 [ 57.217513][ T4009] EXT4-fs (loop4): 1 truncate cleaned up [ 57.229198][ T4009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.246422][ T4025] EXT4-fs: Ignoring removed nobh option [ 57.264439][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.277949][ T4025] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 57.287588][ T4025] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.182: attempt to clear invalid blocks 2 len 1 [ 57.326701][ T4028] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 57.335977][ T4025] EXT4-fs (loop3): Remounting filesystem read-only [ 57.344279][ T4025] EXT4-fs (loop3): 1 truncate cleaned up [ 57.352153][ T4025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.381434][ T4023] SELinux: failed to load policy [ 57.402403][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.510672][ T4009] syz.4.176 (4009) used greatest stack depth: 9360 bytes left [ 57.640957][ T4049] loop2: detected capacity change from 0 to 2048 [ 57.673253][ T4055] loop3: detected capacity change from 0 to 128 [ 57.680920][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.682916][ T4056] xt_socket: unknown flags 0xc [ 57.705490][ T4055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.744991][ T4049] Alternate GPT is invalid, using primary GPT. [ 57.753066][ T4049] loop2: p2 p3 p7 [ 57.768998][ T4061] loop4: detected capacity change from 0 to 512 [ 57.800123][ T4055] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.852296][ T4061] EXT4-fs: Ignoring removed orlov option [ 57.874578][ T4059] loop1: detected capacity change from 0 to 1024 [ 57.909705][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.935302][ T4061] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.946710][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.981175][ T4059] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.001331][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.003049][ T4059] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.197: bg 0: block 393: padding at end of block bitmap is not set [ 58.033063][ T4059] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 58.046301][ T4059] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.046301][ T4059] [ 58.096038][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.156032][ T4087] __nla_validate_parse: 3 callbacks suppressed [ 58.156051][ T4087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 58.360558][ T4101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 58.418642][ T4106] loop3: detected capacity change from 0 to 512 [ 58.425417][ T4106] EXT4-fs: Ignoring removed orlov option [ 58.449432][ T4106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.462959][ T4106] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.598617][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.624380][ T4111] loop4: detected capacity change from 0 to 128 [ 58.644036][ T4111] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.657112][ T4111] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.768234][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.911015][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 58.929905][ T4117] loop4: detected capacity change from 0 to 1024 [ 58.959403][ T4117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.973612][ T4117] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.992631][ T4117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.215: bg 0: block 393: padding at end of block bitmap is not set [ 59.008826][ T4117] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 59.021561][ T4117] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.021561][ T4117] [ 59.214449][ T4129] loop0: detected capacity change from 0 to 1024 [ 59.303034][ T4137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 59.381452][ T4142] loop4: detected capacity change from 0 to 2048 [ 59.609344][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 59.754181][ T4150] loop3: detected capacity change from 0 to 512 [ 59.770922][ T4150] EXT4-fs: Ignoring removed nobh option [ 59.798074][ T4150] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 59.823343][ T4150] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.223: attempt to clear invalid blocks 2 len 1 [ 59.848251][ T4153] IPv4: Oversized IP packet from 127.202.26.0 [ 59.863122][ T4150] EXT4-fs (loop3): Remounting filesystem read-only [ 59.883642][ T4150] EXT4-fs (loop3): 1 truncate cleaned up [ 59.948211][ T4162] FAULT_INJECTION: forcing a failure. [ 59.948211][ T4162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.962263][ T4162] CPU: 1 UID: 0 PID: 4162 Comm: syz.1.230 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 59.962397][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.962409][ T4162] Call Trace: [ 59.962416][ T4162] [ 59.962424][ T4162] __dump_stack+0x1d/0x30 [ 59.962451][ T4162] dump_stack_lvl+0xe8/0x140 [ 59.962495][ T4162] dump_stack+0x15/0x1b [ 59.962513][ T4162] should_fail_ex+0x265/0x280 [ 59.962606][ T4162] should_fail+0xb/0x20 [ 59.962781][ T4162] should_fail_usercopy+0x1a/0x20 [ 59.962844][ T4162] _copy_from_user+0x1c/0xb0 [ 59.962875][ T4162] proc_control+0x43/0xa0 [ 59.962950][ T4162] usbdev_ioctl+0x948/0x1710 [ 59.962994][ T4162] ? __pfx_usbdev_ioctl+0x10/0x10 [ 59.963026][ T4162] __se_sys_ioctl+0xcb/0x140 [ 59.963050][ T4162] __x64_sys_ioctl+0x43/0x50 [ 59.963079][ T4162] x64_sys_call+0x19a8/0x2fb0 [ 59.963118][ T4162] do_syscall_64+0xd0/0x1a0 [ 59.963145][ T4162] ? clear_bhb_loop+0x40/0x90 [ 59.963203][ T4162] ? clear_bhb_loop+0x40/0x90 [ 59.963229][ T4162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.963257][ T4162] RIP: 0033:0x7ff1eaece969 [ 59.963284][ T4162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.963302][ T4162] RSP: 002b:00007ff1e9537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.963378][ T4162] RAX: ffffffffffffffda RBX: 00007ff1eb0f5fa0 RCX: 00007ff1eaece969 [ 59.963391][ T4162] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 59.963426][ T4162] RBP: 00007ff1e9537090 R08: 0000000000000000 R09: 0000000000000000 [ 59.963442][ T4162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.963458][ T4162] R13: 0000000000000000 R14: 00007ff1eb0f5fa0 R15: 00007ffe8d70bcf8 [ 59.963482][ T4162] [ 60.295732][ T4173] loop2: detected capacity change from 0 to 512 [ 60.306321][ T4173] EXT4-fs: Ignoring removed orlov option [ 60.394104][ T4165] infiniband syz!: set active [ 60.399437][ T4165] infiniband syz!: added team_slave_0 [ 60.416711][ T4173] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.430085][ T4181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.497173][ T4165] RDS/IB: syz!: added [ 60.502550][ T4165] smc: adding ib device syz! with port count 1 [ 60.504734][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 60.525844][ T4165] smc: ib device syz! port 1 has pnetid [ 60.564572][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 60.573375][ T4197] loop4: detected capacity change from 0 to 512 [ 60.591772][ T4195] loop3: detected capacity change from 0 to 1024 [ 60.592848][ T4197] EXT4-fs: Ignoring removed nobh option [ 60.618188][ T4197] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 60.620445][ T4195] EXT4-fs: Ignoring removed orlov option [ 60.639321][ T4197] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.242: attempt to clear invalid blocks 2 len 1 [ 60.653134][ T4195] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.659711][ T4197] EXT4-fs (loop4): Remounting filesystem read-only [ 60.671812][ T4181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.680446][ T4197] EXT4-fs (loop4): 1 truncate cleaned up [ 60.832702][ T4195] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.904533][ T4181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.970876][ T4181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.046938][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 61.060484][ T4181] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.077812][ T4181] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.080770][ T4217] loop3: detected capacity change from 0 to 1024 [ 61.109635][ T4181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.140182][ T4217] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.181704][ T4181] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.226280][ T4228] loop4: detected capacity change from 0 to 2048 [ 61.271767][ T4217] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.249: bg 0: block 393: padding at end of block bitmap is not set [ 61.286653][ T4232] loop2: detected capacity change from 0 to 512 [ 61.288273][ T4217] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 61.306671][ T4217] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.306671][ T4217] [ 61.307470][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 61.320310][ T4232] EXT4-fs: Ignoring removed nobh option [ 61.352469][ T4232] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 61.364931][ T4232] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.254: attempt to clear invalid blocks 2 len 1 [ 61.413663][ T4232] EXT4-fs (loop2): Remounting filesystem read-only [ 61.445693][ T4232] EXT4-fs (loop2): 1 truncate cleaned up [ 61.652635][ T4246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.677476][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 61.677494][ T29] audit: type=1400 audit(1747258350.374:949): avc: denied { bind } for pid=4247 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.767855][ T29] audit: type=1400 audit(1747258350.414:950): avc: denied { write } for pid=4247 comm="+}[@" path="socket:[7200]" dev="sockfs" ino=7200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.792184][ T29] audit: type=1400 audit(1747258350.424:951): avc: denied { create } for pid=4242 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.812596][ T29] audit: type=1400 audit(1747258350.424:952): avc: denied { connect } for pid=4242 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.833126][ T29] audit: type=1400 audit(1747258350.424:953): avc: denied { ioctl } for pid=4242 comm="syz.1.258" path="socket:[7208]" dev="sockfs" ino=7208 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.187666][ T4266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.265'. [ 62.230654][ T29] audit: type=1400 audit(1747258350.924:954): avc: denied { getopt } for pid=4272 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.252264][ T4273] netlink: 'syz.3.270': attribute type 39 has an invalid length. [ 62.305566][ T29] audit: type=1326 audit(1747258350.994:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 62.330576][ T29] audit: type=1326 audit(1747258350.994:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 62.355962][ T29] audit: type=1326 audit(1747258350.994:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 62.381760][ T29] audit: type=1326 audit(1747258350.994:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 62.485951][ T3572] printk: udevd: 36 output lines suppressed due to ratelimiting [ 62.497969][ T4282] loop0: detected capacity change from 0 to 128 [ 62.517609][ T4282] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.551759][ T4284] loop1: detected capacity change from 0 to 2048 [ 62.609914][ T4284] Alternate GPT is invalid, using primary GPT. [ 62.617936][ T4284] loop1: p2 p3 p7 [ 62.662207][ T4294] loop1: detected capacity change from 0 to 2048 [ 62.716065][ T4301] loop0: detected capacity change from 0 to 1024 [ 62.751962][ T4301] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.779995][ T4301] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.280: bg 0: block 393: padding at end of block bitmap is not set [ 62.810691][ T4301] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 62.823819][ T4301] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.823819][ T4301] [ 63.034486][ T4319] FAULT_INJECTION: forcing a failure. [ 63.034486][ T4319] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.048632][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz.4.286 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 63.048675][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.048689][ T4319] Call Trace: [ 63.048696][ T4319] [ 63.048705][ T4319] __dump_stack+0x1d/0x30 [ 63.048731][ T4319] dump_stack_lvl+0xe8/0x140 [ 63.048755][ T4319] dump_stack+0x15/0x1b [ 63.048822][ T4319] should_fail_ex+0x265/0x280 [ 63.048872][ T4319] should_fail_alloc_page+0xf2/0x100 [ 63.048914][ T4319] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.049001][ T4319] alloc_pages_mpol+0xb3/0x250 [ 63.049032][ T4319] vma_alloc_folio_noprof+0x1aa/0x300 [ 63.049107][ T4319] handle_mm_fault+0x1056/0x2ae0 [ 63.049173][ T4319] ? mas_walk+0xf2/0x120 [ 63.049201][ T4319] do_user_addr_fault+0x636/0x1090 [ 63.049236][ T4319] exc_page_fault+0x54/0xc0 [ 63.049260][ T4319] asm_exc_page_fault+0x26/0x30 [ 63.049286][ T4319] RIP: 0033:0x7facf863bf6b [ 63.049341][ T4319] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 63.049358][ T4319] RSP: 002b:00007facf6cf4e10 EFLAGS: 00010246 [ 63.049373][ T4319] RAX: 00007facf6cf6f30 RBX: 00007facf8883620 RCX: 0000000000000000 [ 63.049385][ T4319] RDX: 00007facf6cf6f78 RSI: 00007facf86edbf8 RDI: 00007facf6cf4e30 [ 63.049457][ T4319] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 63.049473][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.049495][ T4319] R13: 0000000000000000 R14: 00007facf88b5fa0 R15: 00007ffd002aaf68 [ 63.049520][ T4319] [ 63.049559][ T4319] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 63.250928][ T4321] loop0: detected capacity change from 0 to 512 [ 63.257971][ T4321] EXT4-fs: Ignoring removed orlov option [ 63.279884][ T4321] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.333171][ T4327] loop4: detected capacity change from 0 to 2048 [ 63.379627][ T4327] Alternate GPT is invalid, using primary GPT. [ 63.386310][ T4327] loop4: p2 p3 p7 [ 63.769410][ T4342] __nla_validate_parse: 3 callbacks suppressed [ 63.769425][ T4342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 63.904875][ T4345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 63.975208][ T4347] capability: warning: `syz.2.295' uses 32-bit capabilities (legacy support in use) [ 64.234599][ T4357] loop0: detected capacity change from 0 to 2048 [ 64.264146][ T4359] loop3: detected capacity change from 0 to 2048 [ 64.331479][ T4359] Alternate GPT is invalid, using primary GPT. [ 64.338233][ T4359] loop3: p2 p3 p7 [ 64.393085][ T4366] loop0: detected capacity change from 0 to 1024 [ 64.400050][ T4366] EXT4-fs: Ignoring removed orlov option [ 64.417609][ T4366] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 64.481815][ T4375] loop2: detected capacity change from 0 to 512 [ 64.490147][ T4375] EXT4-fs: Ignoring removed orlov option [ 64.524407][ T4375] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.564928][ T4384] loop1: detected capacity change from 0 to 512 [ 64.571790][ T4384] EXT4-fs: Ignoring removed nobh option [ 64.579040][ T4384] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 64.591010][ T4384] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.308: attempt to clear invalid blocks 2 len 1 [ 64.605095][ T4384] EXT4-fs (loop1): Remounting filesystem read-only [ 64.622188][ T4390] loop3: detected capacity change from 0 to 128 [ 64.629489][ T4387] loop0: detected capacity change from 0 to 128 [ 64.636604][ T4384] EXT4-fs (loop1): 1 truncate cleaned up [ 64.645350][ T4390] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.681899][ T4387] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.735323][ T4396] loop1: detected capacity change from 0 to 128 [ 64.749024][ T4396] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.883118][ T4405] loop0: detected capacity change from 0 to 2048 [ 64.939949][ T4405] Alternate GPT is invalid, using primary GPT. [ 64.947344][ T4405] loop0: p2 p3 p7 [ 64.988874][ T4410] Zero length message leads to an empty skb [ 65.054483][ T4412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 65.172911][ T4413] loop0: detected capacity change from 0 to 1024 [ 65.210414][ T4413] EXT4-fs: Ignoring removed orlov option [ 65.225722][ T4413] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.451317][ T4420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 65.544722][ T4425] loop0: detected capacity change from 0 to 512 [ 65.554913][ T4425] EXT4-fs: Ignoring removed nobh option [ 65.563560][ T4425] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 65.574227][ T4425] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.322: attempt to clear invalid blocks 2 len 1 [ 65.596915][ T4425] EXT4-fs (loop0): Remounting filesystem read-only [ 65.616670][ T4433] loop4: detected capacity change from 0 to 128 [ 65.624591][ T4425] EXT4-fs (loop0): 1 truncate cleaned up [ 65.632005][ T4433] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.753670][ T4436] loop2: detected capacity change from 0 to 512 [ 65.760349][ T4438] loop3: detected capacity change from 0 to 2048 [ 65.771312][ T4436] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.790509][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 65.802026][ T4438] Alternate GPT is invalid, using primary GPT. [ 65.808562][ T4438] loop3: p2 p3 p7 [ 65.965442][ T4455] loop0: detected capacity change from 0 to 1024 [ 65.975348][ T4455] EXT4-fs: Ignoring removed orlov option [ 65.982411][ T4455] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 66.143402][ T4462] loop1: detected capacity change from 0 to 128 [ 66.184165][ T4462] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.282292][ T4467] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.291589][ T4467] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 66.495731][ T4478] loop1: detected capacity change from 0 to 512 [ 66.503640][ T4478] EXT4-fs: Ignoring removed nobh option [ 66.567636][ T4480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 66.608538][ T4478] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 66.619958][ T4478] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.342: attempt to clear invalid blocks 2 len 1 [ 66.635171][ T4478] EXT4-fs (loop1): Remounting filesystem read-only [ 66.644159][ T4478] EXT4-fs (loop1): 1 truncate cleaned up [ 66.847514][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 66.847530][ T29] audit: type=1326 audit(1747258355.544:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 66.894608][ T4484] loop4: detected capacity change from 0 to 1024 [ 66.910212][ T29] audit: type=1326 audit(1747258355.574:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 66.922587][ T4483] loop3: detected capacity change from 0 to 1024 [ 66.936726][ T29] audit: type=1326 audit(1747258355.574:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 66.944356][ T4484] EXT4-fs: Ignoring removed orlov option [ 66.969834][ T29] audit: type=1326 audit(1747258355.574:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 66.978819][ T4484] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.001705][ T29] audit: type=1326 audit(1747258355.574:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 67.001742][ T29] audit: type=1326 audit(1747258355.574:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 67.055879][ T4487] loop2: detected capacity change from 0 to 512 [ 67.066426][ T29] audit: type=1326 audit(1747258355.574:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 67.066551][ T29] audit: type=1326 audit(1747258355.574:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 67.075394][ T4487] EXT4-fs: Ignoring removed orlov option [ 67.098781][ T29] audit: type=1326 audit(1747258355.574:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 67.156284][ T29] audit: type=1326 audit(1747258355.574:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 67.184776][ T4483] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.257579][ T4487] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.273340][ T4483] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.345: bg 0: block 393: padding at end of block bitmap is not set [ 67.297486][ T4502] loop1: detected capacity change from 0 to 512 [ 67.322941][ T4502] EXT4-fs: Ignoring removed nobh option [ 67.332312][ T4483] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 67.346445][ T4483] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.346445][ T4483] [ 67.365634][ T4502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.379635][ T4502] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.389897][ T4506] loop4: detected capacity change from 0 to 2048 [ 67.410851][ T4502] EXT4-fs (loop1): 1 truncate cleaned up [ 67.414895][ T4512] loop0: detected capacity change from 0 to 512 [ 67.424613][ T4512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.439357][ T4502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 67.448919][ T4502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 67.463924][ T4517] loop3: detected capacity change from 0 to 512 [ 67.472161][ T4517] EXT4-fs: Ignoring removed nobh option [ 67.482811][ T4517] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 67.483697][ T4512] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.502411][ T4517] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.354: attempt to clear invalid blocks 2 len 1 [ 67.517910][ T4517] EXT4-fs (loop3): Remounting filesystem read-only [ 67.523174][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 67.538206][ T4512] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.353: corrupted xattr block 19: overlapping e_value [ 67.553924][ T4512] EXT4-fs (loop0): Remounting filesystem read-only [ 67.554137][ T4517] EXT4-fs (loop3): 1 truncate cleaned up [ 67.560784][ T4512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 67.577654][ T4512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 67.590045][ T4512] netlink: 'syz.0.353': attribute type 3 has an invalid length. [ 67.735077][ T4533] loop3: detected capacity change from 0 to 1024 [ 67.756639][ T4533] EXT4-fs: Ignoring removed orlov option [ 67.768295][ T4533] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.874572][ T4541] loop1: detected capacity change from 0 to 8192 [ 67.908224][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 67.923640][ T4541] IPVS: Error joining to the multicast group [ 68.121197][ T4549] loop1: detected capacity change from 0 to 512 [ 68.128053][ T4549] EXT4-fs: Ignoring removed oldalloc option [ 68.134390][ T4549] EXT4-fs: Ignoring removed nobh option [ 68.160826][ T4549] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 68.209899][ T4549] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 68.228249][ T4556] loop3: detected capacity change from 0 to 128 [ 68.269156][ T4556] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.322356][ T4570] loop0: detected capacity change from 0 to 512 [ 68.329707][ T4570] EXT4-fs: Ignoring removed orlov option [ 68.352964][ T4572] loop1: detected capacity change from 0 to 128 [ 68.363481][ T4570] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.386831][ T4572] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.586789][ T4601] netlink: 'syz.3.383': attribute type 27 has an invalid length. [ 68.630275][ T4599] loop1: detected capacity change from 0 to 764 [ 68.645220][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.652866][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.700438][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.700509][ T4599] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 68.713231][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.750547][ T4601] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.759988][ T4601] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.769567][ T4601] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.778973][ T4601] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.904968][ T4599] team0: Port device geneve1 added [ 68.919536][ T4614] loop4: detected capacity change from 0 to 128 [ 68.943337][ T4614] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.983490][ T4620] loop3: detected capacity change from 0 to 128 [ 69.005496][ T4620] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.125323][ T4630] loop3: detected capacity change from 0 to 512 [ 69.135432][ T4630] EXT4-fs: Ignoring removed orlov option [ 69.148605][ T4630] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.300896][ T4655] loop2: detected capacity change from 0 to 128 [ 69.315476][ T4655] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.365034][ T4662] loop0: detected capacity change from 0 to 512 [ 69.373171][ T4662] EXT4-fs: Ignoring removed orlov option [ 69.387964][ T4662] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.450544][ T4669] bond1: entered promiscuous mode [ 69.456685][ T4669] bond1: entered allmulticast mode [ 69.462425][ T4669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.474909][ T4669] bond1 (unregistering): Released all slaves [ 69.515436][ T4676] loop2: detected capacity change from 0 to 512 [ 69.571376][ T4681] loop4: detected capacity change from 0 to 512 [ 69.595352][ T4683] __nla_validate_parse: 1 callbacks suppressed [ 69.595382][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 69.772135][ T4706] loop2: detected capacity change from 0 to 512 [ 69.783439][ T4706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec01c, mo2=0002] [ 69.793585][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 69.805416][ T4706] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.831180][ T4706] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 69.857247][ T4706] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 69.864357][ T4706] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.422: iget: bogus i_mode (177755) [ 69.880727][ T4706] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.422: couldn't read orphan inode 13 (err -117) [ 69.898704][ T4706] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 69.909045][ T4706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec01c, mo2=0002] [ 69.926906][ T4706] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 70.043612][ T4727] loop4: detected capacity change from 0 to 1024 [ 70.051581][ T4727] EXT4-fs: Ignoring removed orlov option [ 70.060816][ T4727] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.088547][ T4731] loop3: detected capacity change from 0 to 128 [ 70.105917][ T4731] EXT4-fs: Ignoring removed nobh option [ 70.117805][ T4735] mmap: syz.2.434 (4735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.132930][ T4731] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.148936][ T4735] FAULT_INJECTION: forcing a failure. [ 70.148936][ T4735] name failslab, interval 1, probability 0, space 0, times 0 [ 70.164040][ T4735] CPU: 0 UID: 0 PID: 4735 Comm: syz.2.434 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 70.164077][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 70.164242][ T4735] Call Trace: [ 70.164249][ T4735] [ 70.164261][ T4735] __dump_stack+0x1d/0x30 [ 70.164289][ T4735] dump_stack_lvl+0xe8/0x140 [ 70.164314][ T4735] dump_stack+0x15/0x1b [ 70.164390][ T4735] should_fail_ex+0x265/0x280 [ 70.164423][ T4735] should_failslab+0x8c/0xb0 [ 70.164508][ T4735] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 70.164531][ T4735] ? proc_alloc_inode+0x34/0x90 [ 70.164570][ T4735] ? __pfx_proc_alloc_inode+0x10/0x10 [ 70.164657][ T4735] proc_alloc_inode+0x34/0x90 [ 70.164686][ T4735] alloc_inode+0x40/0x170 [ 70.164722][ T4735] new_inode+0x1d/0xe0 [ 70.164821][ T4735] proc_pid_make_inode+0x1f/0xd0 [ 70.164854][ T4735] proc_pident_instantiate+0x44/0x190 [ 70.164882][ T4735] proc_pident_lookup+0x112/0x190 [ 70.164925][ T4735] proc_tgid_base_lookup+0x2b/0x40 [ 70.164951][ T4735] __lookup_slow+0x193/0x250 [ 70.164977][ T4735] lookup_slow+0x3c/0x60 [ 70.165010][ T4735] link_path_walk+0x71d/0x8b0 [ 70.165084][ T4735] path_openat+0x1de/0x2170 [ 70.165121][ T4735] ? kmem_cache_free+0xdd/0x2f0 [ 70.165174][ T4735] ? audit_log_end+0x1d7/0x1f0 [ 70.165211][ T4735] do_filp_open+0x109/0x230 [ 70.165245][ T4735] ? __pfx_kfree_link+0x10/0x10 [ 70.165355][ T4735] do_sys_openat2+0xa6/0x110 [ 70.165380][ T4735] __x64_sys_openat+0xf2/0x120 [ 70.165405][ T4735] x64_sys_call+0x1af/0x2fb0 [ 70.165432][ T4735] do_syscall_64+0xd0/0x1a0 [ 70.165456][ T4735] ? clear_bhb_loop+0x40/0x90 [ 70.165480][ T4735] ? clear_bhb_loop+0x40/0x90 [ 70.165544][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.165571][ T4735] RIP: 0033:0x7f37f3dcd2d0 [ 70.165591][ T4735] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 70.165612][ T4735] RSP: 002b:00007f37f2436f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 70.165636][ T4735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f37f3dcd2d0 [ 70.165653][ T4735] RDX: 0000000000000000 RSI: 00007f37f3e50bc9 RDI: 00000000ffffff9c [ 70.165703][ T4735] RBP: 00007f37f3e50bc9 R08: 0000000000000000 R09: 0000000000000000 [ 70.165719][ T4735] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 70.165733][ T4735] R13: 0000000000000000 R14: 00007f37f3ff5fa0 R15: 00007ffccc7a6148 [ 70.165758][ T4735] [ 70.581491][ T4745] loop2: detected capacity change from 0 to 512 [ 70.588764][ T4745] EXT4-fs: Ignoring removed orlov option [ 70.668411][ T4753] netlink: 'syz.4.439': attribute type 5 has an invalid length. [ 70.681887][ T4745] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.714094][ T4753] pim6reg1: entered promiscuous mode [ 70.719863][ T4753] pim6reg1: entered allmulticast mode [ 71.085208][ T4767] loop1: detected capacity change from 0 to 1024 [ 71.129088][ T4767] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.206531][ T4767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.443: bg 0: block 393: padding at end of block bitmap is not set [ 71.251423][ T4767] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 71.264237][ T4767] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.264237][ T4767] [ 71.372354][ T4771] loop1: detected capacity change from 0 to 1024 [ 71.391456][ T4771] EXT4-fs: Ignoring removed orlov option [ 71.418317][ T4773] loop3: detected capacity change from 0 to 512 [ 71.442693][ T4771] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 71.455280][ T4773] EXT4-fs: Ignoring removed orlov option [ 71.471170][ T4775] loop2: detected capacity change from 0 to 128 [ 71.481347][ T4771] EXT4-fs mount: 98 callbacks suppressed [ 71.481363][ T4771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.502861][ T4773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.519173][ T4775] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.538789][ T4773] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.558783][ T4775] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.616190][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.651619][ T4782] loop0: detected capacity change from 0 to 512 [ 71.684732][ T4782] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.448: invalid indirect mapped block 256 (level 2) [ 71.700381][ T4782] EXT4-fs (loop0): 2 truncates cleaned up [ 71.700880][ T4786] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 71.707956][ T4782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.737751][ T4782] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.448: bg 0: block 5: invalid block bitmap [ 71.755032][ T4782] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 71.768983][ T4782] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.768983][ T4782] [ 71.779931][ T4782] EXT4-fs (loop0): Total free blocks count 0 [ 71.781460][ T4786] loop1: detected capacity change from 0 to 512 [ 71.786148][ T4782] EXT4-fs (loop0): Free/Dirty block details [ 71.786169][ T4782] EXT4-fs (loop0): free_blocks=0 [ 71.801739][ T4786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.806830][ T4782] EXT4-fs (loop0): dirty_blocks=44 [ 71.822546][ T4786] EXT4-fs (loop1): 1 truncate cleaned up [ 71.823721][ T4782] EXT4-fs (loop0): Block reservation details [ 71.836516][ T4782] EXT4-fs (loop0): i_reserved_data_blocks=44 [ 71.840319][ T4786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.859348][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.921420][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.943993][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.989287][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 71.989304][ T29] audit: type=1400 audit(1747258360.684:1339): avc: denied { read } for pid=4800 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.002486][ T4806] loop0: detected capacity change from 0 to 1024 [ 72.048324][ T4808] loop2: detected capacity change from 0 to 1024 [ 72.050379][ T29] audit: type=1326 audit(1747258360.684:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.056533][ T4808] EXT4-fs: Ignoring removed orlov option [ 72.079272][ T29] audit: type=1326 audit(1747258360.684:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.090971][ T4803] bridge_slave_0: left allmulticast mode [ 72.108785][ T29] audit: type=1326 audit(1747258360.684:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.114143][ T4803] bridge_slave_0: left promiscuous mode [ 72.138513][ T29] audit: type=1326 audit(1747258360.684:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.144256][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.168431][ T29] audit: type=1326 audit(1747258360.684:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.183681][ T4808] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.198926][ T29] audit: type=1326 audit(1747258360.684:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.198978][ T29] audit: type=1326 audit(1747258360.684:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.213482][ T4806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.234146][ T29] audit: type=1326 audit(1747258360.684:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.298176][ T29] audit: type=1326 audit(1747258360.684:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 72.324445][ T4806] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.345387][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.362113][ T4803] bridge_slave_1: left allmulticast mode [ 72.368234][ T4803] bridge_slave_1: left promiscuous mode [ 72.374205][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.382918][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.397976][ T4803] bond0: (slave bond_slave_0): Releasing backup interface [ 72.403677][ T4806] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.455: bg 0: block 393: padding at end of block bitmap is not set [ 72.422382][ T4806] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 72.435969][ T4806] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.435969][ T4806] [ 72.447194][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.447698][ T4803] bond0: (slave bond_slave_1): Releasing backup interface [ 72.482220][ T4803] team0: Port device team_slave_0 removed [ 72.498014][ T4803] team0: Port device team_slave_1 removed [ 72.498609][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.505362][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.521078][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.539336][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.547409][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.548322][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 72.618287][ T4824] loop0: detected capacity change from 0 to 128 [ 72.625553][ T4803] team0: Port device geneve1 removed [ 72.655727][ T4824] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.687920][ T4824] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.772634][ T4831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 72.800916][ T3325] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.863040][ T4836] loop3: detected capacity change from 0 to 128 [ 72.963546][ T4845] FAULT_INJECTION: forcing a failure. [ 72.963546][ T4845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.974784][ T4848] loop3: detected capacity change from 0 to 512 [ 72.977645][ T4845] CPU: 1 UID: 0 PID: 4845 Comm: syz.4.469 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 72.977730][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 72.977746][ T4845] Call Trace: [ 72.977754][ T4845] [ 72.977764][ T4845] __dump_stack+0x1d/0x30 [ 72.977867][ T4845] dump_stack_lvl+0xe8/0x140 [ 72.977892][ T4845] dump_stack+0x15/0x1b [ 72.977914][ T4845] should_fail_ex+0x265/0x280 [ 72.977958][ T4845] should_fail+0xb/0x20 [ 72.978013][ T4845] should_fail_usercopy+0x1a/0x20 [ 72.978038][ T4845] _copy_from_user+0x1c/0xb0 [ 72.978068][ T4845] ___sys_sendmsg+0xc1/0x1d0 [ 72.978115][ T4845] __x64_sys_sendmsg+0xd4/0x160 [ 72.978300][ T4845] x64_sys_call+0x2999/0x2fb0 [ 72.978327][ T4845] do_syscall_64+0xd0/0x1a0 [ 72.978358][ T4845] ? clear_bhb_loop+0x40/0x90 [ 72.978387][ T4845] ? clear_bhb_loop+0x40/0x90 [ 72.978415][ T4845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.978516][ T4845] RIP: 0033:0x7facf868e969 [ 72.978538][ T4845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.978576][ T4845] RSP: 002b:00007facf6cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.978599][ T4845] RAX: ffffffffffffffda RBX: 00007facf88b5fa0 RCX: 00007facf868e969 [ 72.978653][ T4845] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 72.978668][ T4845] RBP: 00007facf6cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.978683][ T4845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.978698][ T4845] R13: 0000000000000000 R14: 00007facf88b5fa0 R15: 00007ffd002aaf68 [ 72.978730][ T4845] [ 73.176686][ T4850] loop4: detected capacity change from 0 to 128 [ 73.184052][ T4848] EXT4-fs: Ignoring removed orlov option [ 73.204919][ T4850] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.218767][ T4839] loop0: detected capacity change from 0 to 512 [ 73.226186][ T4850] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.266681][ T4848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.284023][ T4848] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.296323][ T4839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.313621][ T4833] loop1: detected capacity change from 0 to 512 [ 73.318746][ T4839] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.348421][ T4833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.376565][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 73.394080][ T4833] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.411511][ T4860] loop2: detected capacity change from 0 to 1024 [ 73.423207][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.434484][ T4860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.434568][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 73.475863][ T4860] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.496345][ T4860] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.472: bg 0: block 393: padding at end of block bitmap is not set [ 73.515295][ T4860] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 73.529135][ T4860] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.529135][ T4860] [ 73.564354][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.613962][ T4869] loop4: detected capacity change from 0 to 128 [ 73.634902][ T4871] bond1: entered promiscuous mode [ 73.641347][ T4871] bond1: entered allmulticast mode [ 73.666155][ T4871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.677958][ T4869] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.700681][ T4871] bond1 (unregistering): Released all slaves [ 73.725938][ T4869] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.820254][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.889534][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.948114][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.012757][ T4881] loop0: detected capacity change from 0 to 512 [ 74.020653][ T4883] loop4: detected capacity change from 0 to 512 [ 74.038620][ T4883] EXT4-fs: Ignoring removed nobh option [ 74.046196][ T4883] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 74.051059][ T4881] EXT4-fs: Ignoring removed nobh option [ 74.062297][ T4883] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.479: attempt to clear invalid blocks 2 len 1 [ 74.078468][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.089159][ T4881] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 74.098383][ T4881] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.478: attempt to clear invalid blocks 2 len 1 [ 74.114117][ T4881] EXT4-fs (loop0): Remounting filesystem read-only [ 74.124203][ T4883] EXT4-fs (loop4): Remounting filesystem read-only [ 74.139880][ T4883] EXT4-fs (loop4): 1 truncate cleaned up [ 74.149034][ T4883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.173047][ T4881] EXT4-fs (loop0): 1 truncate cleaned up [ 74.180627][ T4881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.242702][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.269651][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.290344][ T4891] loop1: detected capacity change from 0 to 128 [ 74.370449][ T4899] loop2: detected capacity change from 0 to 1024 [ 74.386778][ T4891] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.418293][ T4891] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.454642][ T4899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.469133][ T4899] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.502942][ T4899] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.485: bg 0: block 393: padding at end of block bitmap is not set [ 74.522225][ T4899] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 74.535963][ T4899] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.535963][ T4899] [ 74.570515][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.583431][ T4907] loop0: detected capacity change from 0 to 512 [ 74.595396][ T4907] EXT4-fs: Ignoring removed orlov option [ 74.621315][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.635481][ T4907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.651127][ T4907] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.670205][ T4911] loop1: detected capacity change from 0 to 128 [ 74.700984][ T4911] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.722132][ T4911] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.729898][ T4918] loop3: detected capacity change from 0 to 1024 [ 74.763867][ T4918] EXT4-fs: Ignoring removed orlov option [ 74.792355][ T4918] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 74.819516][ T4918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.845015][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.871025][ T4930] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 74.872420][ T4928] IPVS: stopping master sync thread 4930 ... [ 74.919238][ T4935] loop2: detected capacity change from 0 to 512 [ 74.926882][ T4935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.941361][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.949099][ T4937] loop1: detected capacity change from 0 to 512 [ 74.953430][ T4935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.957438][ T4937] EXT4-fs: Ignoring removed nobh option [ 74.972377][ T4935] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.994525][ T4937] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 75.004008][ T4937] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.496: attempt to clear invalid blocks 2 len 1 [ 75.026466][ T4937] EXT4-fs (loop1): Remounting filesystem read-only [ 75.044198][ T4937] EXT4-fs (loop1): 1 truncate cleaned up [ 75.052251][ T4937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.092835][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.110066][ T4946] loop3: detected capacity change from 0 to 512 [ 75.118214][ T4946] EXT4-fs: Ignoring removed orlov option [ 75.118218][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.141048][ T4950] loop2: detected capacity change from 0 to 128 [ 75.142406][ T4949] loop1: detected capacity change from 0 to 512 [ 75.155181][ T4949] EXT4-fs: Ignoring removed orlov option [ 75.155672][ T4950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.176467][ T4950] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.188360][ T4946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.223324][ T4946] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.240434][ T4949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.254949][ T4949] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.307191][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.326326][ T4961] loop2: detected capacity change from 0 to 512 [ 75.334349][ T4961] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 75.409590][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.421443][ T4961] infiniband syz1: set active [ 75.426521][ T4961] infiniband syz1: added syz_tun [ 75.535613][ T4961] RDS/IB: syz1: added [ 75.544950][ T4961] smc: adding ib device syz1 with port count 1 [ 75.569586][ T4961] smc: ib device syz1 port 1 has pnetid [ 75.607133][ T4976] loop0: detected capacity change from 0 to 128 [ 75.666435][ T4978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 75.767521][ T4976] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.807614][ T4976] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.028183][ T3325] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.062352][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.257995][ T4986] x_tables: duplicate underflow at hook 1 [ 76.293009][ T4989] loop3: detected capacity change from 0 to 512 [ 76.306581][ T4989] EXT4-fs: Ignoring removed nobh option [ 76.359292][ T4989] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 76.368318][ T4989] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.510: attempt to clear invalid blocks 2 len 1 [ 76.403206][ T4998] loop4: detected capacity change from 0 to 512 [ 76.412188][ T4989] EXT4-fs (loop3): Remounting filesystem read-only [ 76.434057][ T4989] EXT4-fs (loop3): 1 truncate cleaned up [ 76.441207][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.500029][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.510035][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.531672][ T4999] loop4: detected capacity change from 0 to 1024 [ 76.542556][ T4999] EXT4-fs: Ignoring removed orlov option [ 76.569057][ T4999] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.598645][ T4999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.614291][ T5003] loop1: detected capacity change from 0 to 128 [ 76.635000][ T5011] loop3: detected capacity change from 0 to 128 [ 76.652980][ T5003] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.670025][ T5003] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.716693][ T5011] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.744709][ T5011] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.820751][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.849787][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.898029][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.010752][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 77.010834][ T29] audit: type=1326 audit(1747258365.684:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.040511][ T29] audit: type=1326 audit(1747258365.684:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.109166][ T5038] loop4: detected capacity change from 0 to 512 [ 77.136948][ T5038] EXT4-fs: Ignoring removed nobh option [ 77.174869][ T5042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 77.274816][ T5038] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 77.300059][ T5038] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.525: attempt to clear invalid blocks 2 len 1 [ 77.438974][ T5038] EXT4-fs (loop4): Remounting filesystem read-only [ 77.464975][ T5051] loop3: detected capacity change from 0 to 128 [ 77.510020][ T5038] EXT4-fs (loop4): 1 truncate cleaned up [ 77.532804][ T5051] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.549922][ T5053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5053 comm=syz.0.531 [ 77.580759][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.588748][ T5051] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.629900][ T5053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.531'. [ 77.634196][ T5056] loop2: detected capacity change from 0 to 128 [ 77.657890][ T29] audit: type=1326 audit(1747258366.344:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.682290][ T29] audit: type=1326 audit(1747258366.344:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.690155][ T5056] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.707476][ T29] audit: type=1326 audit(1747258366.344:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c8d71225 code=0x7ffc0000 [ 77.707518][ T29] audit: type=1326 audit(1747258366.344:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.794287][ T29] audit: type=1326 audit(1747258366.354:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.870443][ T29] audit: type=1326 audit(1747258366.494:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.894346][ T29] audit: type=1326 audit(1747258366.504:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.918331][ T29] audit: type=1326 audit(1747258366.504:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c8d3e969 code=0x7ffc0000 [ 77.975676][ T5072] loop0: detected capacity change from 0 to 2048 [ 78.102205][ T5072] loop0: unable to read partition table [ 78.126610][ T5072] loop0: partition table beyond EOD, truncated [ 78.132936][ T5072] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 78.534535][ T5092] loop4: detected capacity change from 0 to 512 [ 78.534861][ T5098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 78.570727][ T5092] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.602535][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 78.625117][ T5103] io-wq is not configured for unbound workers [ 78.641094][ T5099] loop0: detected capacity change from 0 to 512 [ 78.689905][ T5099] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.721575][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 79.114646][ T5112] loop3: detected capacity change from 0 to 128 [ 79.144656][ T5112] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.232180][ T5116] syzkaller0: entered promiscuous mode [ 79.237976][ T5116] syzkaller0: entered allmulticast mode [ 79.259442][ T5118] IPv6: Can't replace route, no match found [ 79.269869][ T5119] loop2: detected capacity change from 0 to 256 [ 79.309439][ T5119] vfat: Unknown parameter 'uni_xlat' [ 79.366570][ T5121] loop4: detected capacity change from 0 to 1024 [ 79.395625][ T5124] loop1: detected capacity change from 0 to 128 [ 79.414547][ T5124] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.427939][ T5121] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.448154][ T5121] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.551: bg 0: block 393: padding at end of block bitmap is not set [ 79.469846][ T5133] loop0: detected capacity change from 0 to 128 [ 79.482045][ T5131] loop3: detected capacity change from 0 to 512 [ 79.490643][ T5131] EXT4-fs: Ignoring removed nobh option [ 79.505349][ T5121] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 79.518495][ T5121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.518495][ T5121] [ 79.529621][ T5131] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 79.539942][ T5131] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.554: attempt to clear invalid blocks 2 len 1 [ 79.566009][ T5131] EXT4-fs (loop3): Remounting filesystem read-only [ 79.573550][ T5131] EXT4-fs (loop3): 1 truncate cleaned up [ 79.612898][ T5142] bridge0: entered promiscuous mode [ 79.623075][ T5142] macvlan2: entered promiscuous mode [ 79.636951][ T5142] bridge0: port 3(macvlan2) entered blocking state [ 79.643855][ T5142] bridge0: port 3(macvlan2) entered disabled state [ 79.659054][ T5142] macvlan2: entered allmulticast mode [ 79.664838][ T5142] bridge0: entered allmulticast mode [ 79.725152][ T5142] macvlan2: left allmulticast mode [ 79.730735][ T5142] bridge0: left allmulticast mode [ 79.746763][ T5142] bridge0: left promiscuous mode [ 79.847486][ T5150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 79.971060][ T5149] netlink: 147 bytes leftover after parsing attributes in process `syz.3.560'. [ 79.988141][ T5149] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 80.278752][ T5160] loop0: detected capacity change from 0 to 128 [ 80.300184][ T5164] loop3: detected capacity change from 0 to 128 [ 80.308986][ T5160] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.381386][ T5166] syz.2.567 uses obsolete (PF_INET,SOCK_PACKET) [ 80.520401][ T5175] loop4: detected capacity change from 0 to 1024 [ 80.542840][ T5179] loop0: detected capacity change from 0 to 512 [ 80.550928][ T5179] EXT4-fs: Ignoring removed orlov option [ 80.571924][ T5175] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.603005][ T5179] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.633853][ T5175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.570: bg 0: block 393: padding at end of block bitmap is not set [ 80.674447][ T5175] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 80.687629][ T5175] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.687629][ T5175] [ 80.789919][ T5185] bridge0: entered promiscuous mode [ 80.796416][ T5185] macvlan2: entered promiscuous mode [ 80.804477][ T5185] bridge0: port 3(macvlan2) entered blocking state [ 80.811438][ T5185] bridge0: port 3(macvlan2) entered disabled state [ 80.820417][ T5185] macvlan2: entered allmulticast mode [ 80.826189][ T5185] bridge0: entered allmulticast mode [ 80.834016][ T5185] macvlan2: left allmulticast mode [ 80.839325][ T5185] bridge0: left allmulticast mode [ 80.846696][ T5185] bridge0: left promiscuous mode [ 81.014326][ T5196] loop3: detected capacity change from 0 to 512 [ 81.023542][ T5196] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.041688][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 81.647570][ T5217] loop2: detected capacity change from 0 to 1024 [ 81.670137][ T5217] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.699040][ T5217] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.585: bg 0: block 393: padding at end of block bitmap is not set [ 81.717947][ T5217] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 81.730941][ T5217] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.730941][ T5217] [ 81.815738][ T5232] loop2: detected capacity change from 0 to 512 [ 81.831514][ T5228] hub 2-0:1.0: USB hub found [ 81.838433][ T5232] EXT4-fs: Ignoring removed orlov option [ 81.844468][ T5228] hub 2-0:1.0: 8 ports detected [ 81.893866][ T5232] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.923588][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 81.970295][ T5247] loop0: detected capacity change from 0 to 1024 [ 81.980187][ T5247] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.991462][ T5247] EXT4-fs (loop0): group descriptors corrupted! [ 82.191778][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 82.191863][ T29] audit: type=1400 audit(1747258370.884:1896): avc: denied { mounton } for pid=5253 comm="syz.4.598" path="/119/file0" dev="tmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.231728][ T29] audit: type=1400 audit(1747258370.884:1897): avc: denied { mount } for pid=5253 comm="syz.4.598" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.254504][ T29] audit: type=1400 audit(1747258370.894:1898): avc: denied { write } for pid=5253 comm="syz.4.598" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.275665][ T29] audit: type=1400 audit(1747258370.894:1899): avc: denied { open } for pid=5253 comm="syz.4.598" path="/119/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.298097][ T29] audit: type=1326 audit(1747258370.904:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facf8685927 code=0x7ffc0000 [ 82.321873][ T29] audit: type=1326 audit(1747258370.904:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facf862ab39 code=0x7ffc0000 [ 82.327610][ T5259] netlink: 112 bytes leftover after parsing attributes in process `syz.3.600'. [ 82.345751][ T29] audit: type=1326 audit(1747258370.904:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facf8685927 code=0x7ffc0000 [ 82.355873][ T5259] netlink: 992 bytes leftover after parsing attributes in process `syz.3.600'. [ 82.379407][ T29] audit: type=1326 audit(1747258370.904:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facf862ab39 code=0x7ffc0000 [ 82.416172][ T29] audit: type=1326 audit(1747258370.904:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facf8685927 code=0x7ffc0000 [ 82.440831][ T29] audit: type=1326 audit(1747258370.904:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facf862ab39 code=0x7ffc0000 [ 82.535582][ T5264] loop3: detected capacity change from 0 to 128 [ 82.564512][ T5267] loop4: detected capacity change from 0 to 1024 [ 82.564505][ T5264] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.619102][ T5267] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.646360][ T5267] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.602: bg 0: block 393: padding at end of block bitmap is not set [ 82.664975][ T5267] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 82.678293][ T5267] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.678293][ T5267] [ 82.773058][ T5277] FAULT_INJECTION: forcing a failure. [ 82.773058][ T5277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.787227][ T5277] CPU: 1 UID: 0 PID: 5277 Comm: syz.3.606 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 82.787320][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.787336][ T5277] Call Trace: [ 82.787346][ T5277] [ 82.787356][ T5277] __dump_stack+0x1d/0x30 [ 82.787427][ T5277] dump_stack_lvl+0xe8/0x140 [ 82.787452][ T5277] dump_stack+0x15/0x1b [ 82.787530][ T5277] should_fail_ex+0x265/0x280 [ 82.787718][ T5277] should_fail+0xb/0x20 [ 82.787756][ T5277] should_fail_usercopy+0x1a/0x20 [ 82.787783][ T5277] _copy_from_user+0x1c/0xb0 [ 82.787876][ T5277] memdup_user_nul+0x5f/0xe0 [ 82.787902][ T5277] sel_commit_bools_write+0xd2/0x270 [ 82.787932][ T5277] vfs_writev+0x3ee/0x870 [ 82.788032][ T5277] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 82.788165][ T5277] ? mutex_lock+0xd/0x30 [ 82.788189][ T5277] do_writev+0xe7/0x210 [ 82.788213][ T5277] __x64_sys_writev+0x45/0x50 [ 82.788251][ T5277] x64_sys_call+0x2006/0x2fb0 [ 82.788278][ T5277] do_syscall_64+0xd0/0x1a0 [ 82.788380][ T5277] ? clear_bhb_loop+0x40/0x90 [ 82.788408][ T5277] ? clear_bhb_loop+0x40/0x90 [ 82.788494][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.788521][ T5277] RIP: 0033:0x7fe9b933e969 [ 82.788575][ T5277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.788605][ T5277] RSP: 002b:00007fe9b79a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 82.788633][ T5277] RAX: ffffffffffffffda RBX: 00007fe9b9565fa0 RCX: 00007fe9b933e969 [ 82.788664][ T5277] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 82.788679][ T5277] RBP: 00007fe9b79a7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.788773][ T5277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.788839][ T5277] R13: 0000000000000000 R14: 00007fe9b9565fa0 R15: 00007ffe3ca87fc8 [ 82.788868][ T5277] [ 83.023867][ T5280] FAULT_INJECTION: forcing a failure. [ 83.023867][ T5280] name failslab, interval 1, probability 0, space 0, times 0 [ 83.037093][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: syz.2.607 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 83.037173][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.037191][ T5280] Call Trace: [ 83.037199][ T5280] [ 83.037210][ T5280] __dump_stack+0x1d/0x30 [ 83.037239][ T5280] dump_stack_lvl+0xe8/0x140 [ 83.037259][ T5280] dump_stack+0x15/0x1b [ 83.037327][ T5280] should_fail_ex+0x265/0x280 [ 83.037375][ T5280] should_failslab+0x8c/0xb0 [ 83.037417][ T5280] kmem_cache_alloc_node_noprof+0x57/0x320 [ 83.037518][ T5280] ? __alloc_skb+0x101/0x320 [ 83.037564][ T5280] __alloc_skb+0x101/0x320 [ 83.037619][ T5280] netlink_alloc_large_skb+0xba/0xf0 [ 83.037795][ T5280] netlink_sendmsg+0x3cf/0x6b0 [ 83.037828][ T5280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.037907][ T5280] __sock_sendmsg+0x142/0x180 [ 83.038018][ T5280] ____sys_sendmsg+0x31e/0x4e0 [ 83.038051][ T5280] ___sys_sendmsg+0x17b/0x1d0 [ 83.038091][ T5280] __x64_sys_sendmsg+0xd4/0x160 [ 83.038127][ T5280] x64_sys_call+0x2999/0x2fb0 [ 83.038187][ T5280] do_syscall_64+0xd0/0x1a0 [ 83.038220][ T5280] ? clear_bhb_loop+0x40/0x90 [ 83.038251][ T5280] ? clear_bhb_loop+0x40/0x90 [ 83.038314][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.038414][ T5280] RIP: 0033:0x7f37f3dce969 [ 83.038434][ T5280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.038473][ T5280] RSP: 002b:00007f37f2437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.038500][ T5280] RAX: ffffffffffffffda RBX: 00007f37f3ff5fa0 RCX: 00007f37f3dce969 [ 83.038517][ T5280] RDX: 0000000024008000 RSI: 0000200000000840 RDI: 0000000000000005 [ 83.038604][ T5280] RBP: 00007f37f2437090 R08: 0000000000000000 R09: 0000000000000000 [ 83.038618][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.038631][ T5280] R13: 0000000000000000 R14: 00007f37f3ff5fa0 R15: 00007ffccc7a6148 [ 83.038655][ T5280] [ 83.043627][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 83.311702][ T5285] loop3: detected capacity change from 0 to 128 [ 83.359354][ T5285] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.514962][ T5301] loop0: detected capacity change from 0 to 512 [ 83.547118][ T5301] EXT4-fs: Ignoring removed orlov option [ 83.617647][ T5301] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.652063][ T5307] loop2: detected capacity change from 0 to 1024 [ 83.668943][ T5309] loop4: detected capacity change from 0 to 128 [ 83.688150][ T5307] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.701276][ T5309] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.708818][ T5307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.615: bg 0: block 393: padding at end of block bitmap is not set [ 83.751071][ T5307] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 83.764125][ T5307] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.764125][ T5307] [ 83.811239][ T5317] loop2: detected capacity change from 0 to 512 [ 83.819757][ T5317] EXT4-fs: Ignoring removed nobh option [ 83.829558][ T5317] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 83.840801][ T5317] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.618: attempt to clear invalid blocks 2 len 1 [ 83.855100][ T5317] EXT4-fs (loop2): Remounting filesystem read-only [ 83.862807][ T5317] EXT4-fs (loop2): 1 truncate cleaned up [ 83.875330][ T5320] loop4: detected capacity change from 0 to 512 [ 83.886727][ T5320] EXT4-fs: Ignoring removed nobh option [ 83.904752][ T5320] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 83.915273][ T5320] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.619: attempt to clear invalid blocks 2 len 1 [ 83.971080][ T5320] EXT4-fs (loop4): Remounting filesystem read-only [ 83.980259][ T5320] EXT4-fs (loop4): 1 truncate cleaned up [ 83.981278][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.004271][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.065692][ T5328] FAULT_INJECTION: forcing a failure. [ 84.065692][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 84.078425][ T5328] CPU: 1 UID: 0 PID: 5328 Comm: syz.4.622 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 84.078452][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.078466][ T5328] Call Trace: [ 84.078474][ T5328] [ 84.078490][ T5328] __dump_stack+0x1d/0x30 [ 84.078556][ T5328] dump_stack_lvl+0xe8/0x140 [ 84.078577][ T5328] dump_stack+0x15/0x1b [ 84.078597][ T5328] should_fail_ex+0x265/0x280 [ 84.078676][ T5328] should_failslab+0x8c/0xb0 [ 84.078818][ T5328] kmem_cache_alloc_node_noprof+0x57/0x320 [ 84.078847][ T5328] ? __alloc_skb+0x101/0x320 [ 84.078904][ T5328] __alloc_skb+0x101/0x320 [ 84.078999][ T5328] ? audit_log_start+0x365/0x6c0 [ 84.079033][ T5328] audit_log_start+0x380/0x6c0 [ 84.079074][ T5328] audit_seccomp+0x48/0x100 [ 84.079180][ T5328] ? __seccomp_filter+0x68c/0x10d0 [ 84.079204][ T5328] __seccomp_filter+0x69d/0x10d0 [ 84.079229][ T5328] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.079259][ T5328] ? vfs_write+0x75e/0x8d0 [ 84.079293][ T5328] __secure_computing+0x82/0x150 [ 84.079350][ T5328] syscall_trace_enter+0xcf/0x1e0 [ 84.079424][ T5328] do_syscall_64+0xaa/0x1a0 [ 84.079454][ T5328] ? clear_bhb_loop+0x40/0x90 [ 84.079490][ T5328] ? clear_bhb_loop+0x40/0x90 [ 84.079517][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.079589][ T5328] RIP: 0033:0x7facf868e969 [ 84.079608][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.079629][ T5328] RSP: 002b:00007facf6cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.079651][ T5328] RAX: ffffffffffffffda RBX: 00007facf88b5fa0 RCX: 00007facf868e969 [ 84.079687][ T5328] RDX: 0000000000000044 RSI: 0000000000000029 RDI: 0000000000000004 [ 84.079702][ T5328] RBP: 00007facf6cf7090 R08: 0000200000001080 R09: 0000000000000000 [ 84.079717][ T5328] R10: 0000200000001040 R11: 0000000000000246 R12: 0000000000000001 [ 84.079731][ T5328] R13: 0000000000000000 R14: 00007facf88b5fa0 R15: 00007ffd002aaf68 [ 84.079773][ T5328] [ 84.291436][ T5323] loop2: detected capacity change from 0 to 512 [ 84.311017][ T5323] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.336196][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 84.365209][ T5335] xt_connbytes: Forcing CT accounting to be enabled [ 84.376549][ T5335] Cannot find del_set index 1 as target [ 84.383310][ T5335] netlink: 'syz.4.625': attribute type 4 has an invalid length. [ 84.391124][ T5335] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.625'. [ 84.401579][ T5339] geneve0: entered allmulticast mode [ 84.402647][ T5335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'. [ 84.435044][ T5335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 84.478305][ T5344] loop1: detected capacity change from 0 to 512 [ 84.486800][ T5344] EXT4-fs: Ignoring removed orlov option [ 84.502225][ T5346] loop4: detected capacity change from 0 to 128 [ 84.522346][ T5346] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.569658][ T5344] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.678932][ T5353] loop1: detected capacity change from 0 to 512 [ 84.682155][ T5354] loop4: detected capacity change from 0 to 512 [ 84.688173][ T5353] EXT4-fs: Ignoring removed nobh option [ 84.692042][ T5354] EXT4-fs: Ignoring removed orlov option [ 84.700059][ T5353] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 84.712373][ T5353] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.630: attempt to clear invalid blocks 2 len 1 [ 84.733449][ T5353] EXT4-fs (loop1): Remounting filesystem read-only [ 84.741112][ T5353] EXT4-fs (loop1): 1 truncate cleaned up [ 84.765232][ T5354] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.776345][ T5342] loop0: detected capacity change from 0 to 512 [ 84.790345][ T5342] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.841836][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 84.860836][ T5364] hub 2-0:1.0: USB hub found [ 84.865823][ T5364] hub 2-0:1.0: 8 ports detected [ 84.927659][ T5370] loop1: detected capacity change from 0 to 512 [ 84.938135][ T5368] loop4: detected capacity change from 0 to 512 [ 84.962343][ T5370] EXT4-fs: Ignoring removed orlov option [ 84.977686][ T5368] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 85.000097][ T5370] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.012007][ T5368] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 85.069692][ T5368] EXT4-fs (loop4): 1 truncate cleaned up [ 85.081414][ T5368] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.639102][ T5387] loop0: detected capacity change from 0 to 512 [ 85.648811][ T5387] EXT4-fs: Ignoring removed orlov option [ 85.659411][ T5387] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.698786][ T5391] loop3: detected capacity change from 0 to 128 [ 85.708257][ T5391] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.788038][ T5395] loop4: detected capacity change from 0 to 2048 [ 85.941615][ T5411] loop3: detected capacity change from 0 to 512 [ 85.949305][ T5411] EXT4-fs: Ignoring removed nobh option [ 85.957494][ T5411] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 85.969442][ T5411] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.649: attempt to clear invalid blocks 2 len 1 [ 85.983450][ T5411] EXT4-fs (loop3): Remounting filesystem read-only [ 85.991812][ T5411] EXT4-fs (loop3): 1 truncate cleaned up [ 86.118566][ T5423] loop9: detected capacity change from 0 to 7 [ 86.125140][ T5423] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.144313][ T5422] loop1: detected capacity change from 0 to 2048 [ 86.151297][ T5423] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.159383][ T5423] loop9: unable to read partition table [ 86.166075][ T5423] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 86.166075][ T5423] U) failed (rc=-5) [ 86.225323][ T5422] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.262838][ T5422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.277288][ T5429] loop3: detected capacity change from 0 to 128 [ 86.302362][ T5429] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.476540][ T5438] loop1: detected capacity change from 0 to 1024 [ 86.509597][ T5438] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.583126][ T5438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.658: bg 0: block 393: padding at end of block bitmap is not set [ 86.599920][ T5438] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 86.611063][ T5450] loop3: detected capacity change from 0 to 512 [ 86.613353][ T5438] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.613353][ T5438] [ 86.631585][ T5450] EXT4-fs: Ignoring removed nobh option [ 86.664177][ T5450] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 86.679171][ T5453] loop0: detected capacity change from 0 to 128 [ 86.694411][ T5450] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.661: attempt to clear invalid blocks 2 len 1 [ 86.695753][ T5453] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.709048][ T5450] EXT4-fs (loop3): Remounting filesystem read-only [ 86.746570][ T5450] EXT4-fs (loop3): 1 truncate cleaned up [ 86.776566][ T5456] loop1: detected capacity change from 0 to 128 [ 86.789185][ T5456] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.828212][ T5461] Cannot find del_set index 1 as target [ 86.835083][ T5461] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 86.842999][ T5461] __nla_validate_parse: 1 callbacks suppressed [ 86.843013][ T5461] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.665'. [ 86.864765][ T5461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.665'. [ 86.913702][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.665'. [ 86.980305][ T5473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5473 comm=syz.4.668 [ 86.996915][ T5473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.668'. [ 86.998619][ T5469] hub 2-0:1.0: USB hub found [ 87.011914][ T5469] hub 2-0:1.0: 8 ports detected [ 87.039848][ T5477] loop4: detected capacity change from 0 to 512 [ 87.064453][ T5477] EXT4-fs: Ignoring removed orlov option [ 87.110628][ T5482] loop1: detected capacity change from 0 to 1024 [ 87.148502][ T5477] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.165609][ T5482] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.191059][ T5471] loop0: detected capacity change from 0 to 512 [ 87.191264][ T5482] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.674: bg 0: block 393: padding at end of block bitmap is not set [ 87.205282][ T5493] loop2: detected capacity change from 0 to 512 [ 87.218334][ T5482] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 87.218368][ T5482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.218368][ T5482] [ 87.248198][ T5493] EXT4-fs: Ignoring removed nobh option [ 87.248363][ T5471] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.274832][ T5493] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 87.280949][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 87.286800][ T5493] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.675: attempt to clear invalid blocks 2 len 1 [ 87.307301][ T5493] EXT4-fs (loop2): Remounting filesystem read-only [ 87.341085][ T5493] EXT4-fs (loop2): 1 truncate cleaned up [ 87.354035][ T5500] loop3: detected capacity change from 0 to 128 [ 87.388342][ T5500] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.474496][ T5509] loop2: detected capacity change from 0 to 2048 [ 87.530768][ T5509] Alternate GPT is invalid, using primary GPT. [ 87.537473][ T5509] loop2: p2 p3 p7 [ 87.562044][ T5512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5512 comm=syz.3.682 [ 87.579936][ T5512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.682'. [ 87.596818][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 87.596833][ T29] audit: type=1326 audit(1747258376.294:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 87.638390][ T29] audit: type=1326 audit(1747258376.324:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 87.716148][ T29] audit: type=1326 audit(1747258376.364:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 87.741237][ T29] audit: type=1326 audit(1747258376.364:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 87.765388][ T29] audit: type=1326 audit(1747258376.364:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 87.829132][ T5516] hub 2-0:1.0: USB hub found [ 87.834276][ T5516] hub 2-0:1.0: 8 ports detected [ 87.948961][ T5525] loop2: detected capacity change from 0 to 512 [ 87.957280][ T5525] EXT4-fs: Ignoring removed orlov option [ 87.997246][ T5527] loop4: detected capacity change from 0 to 512 [ 88.004516][ T5527] EXT4-fs: Ignoring removed orlov option [ 88.013851][ T5525] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.051779][ T5527] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.113780][ T5538] loop0: detected capacity change from 0 to 1024 [ 88.128859][ T5538] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.155296][ T5538] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.689: bg 0: block 393: padding at end of block bitmap is not set [ 88.170694][ T5538] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 88.184397][ T5538] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.184397][ T5538] [ 88.241936][ T5544] loop3: detected capacity change from 0 to 512 [ 88.250176][ T5544] EXT4-fs: Ignoring removed nobh option [ 88.260489][ T5544] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 88.269590][ T5544] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.691: attempt to clear invalid blocks 2 len 1 [ 88.283238][ T5544] EXT4-fs (loop3): Remounting filesystem read-only [ 88.291363][ T5544] EXT4-fs (loop3): 1 truncate cleaned up [ 88.349280][ T5557] loop3: detected capacity change from 0 to 128 [ 88.359430][ T5557] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.510884][ T5562] loop1: detected capacity change from 0 to 512 [ 88.522008][ T5562] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.556764][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 88.720655][ T29] audit: type=1326 audit(1747258377.414:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 88.744176][ T29] audit: type=1326 audit(1747258377.414:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 88.810302][ T5579] loop3: detected capacity change from 0 to 1024 [ 88.829255][ T29] audit: type=1326 audit(1747258377.414:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 88.853006][ T29] audit: type=1326 audit(1747258377.414:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 88.876576][ T29] audit: type=1326 audit(1747258377.414:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b933e969 code=0x7ffc0000 [ 88.913316][ T5579] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.939892][ T5579] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.703: bg 0: block 393: padding at end of block bitmap is not set [ 88.956756][ T5579] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 88.969467][ T5579] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.969467][ T5579] [ 88.986207][ T5585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5585 comm=syz.2.706 [ 89.272882][ T5597] xt_connbytes: Forcing CT accounting to be enabled [ 89.291219][ T5597] Cannot find del_set index 1 as target [ 89.306444][ T5597] netlink: 'syz.2.710': attribute type 4 has an invalid length. [ 89.314736][ T5597] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.710'. [ 89.348730][ T5597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.710'. [ 89.361717][ T5597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 89.461867][ T5608] loop2: detected capacity change from 0 to 2048 [ 89.588761][ T5616] loop0: detected capacity change from 0 to 128 [ 89.611011][ T5617] loop1: detected capacity change from 0 to 1024 [ 89.622860][ T5616] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.673466][ T5617] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.742840][ T5617] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.718: bg 0: block 393: padding at end of block bitmap is not set [ 89.777588][ T5617] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 89.790567][ T5617] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.790567][ T5617] [ 89.924054][ T5638] loop0: detected capacity change from 0 to 512 [ 89.946709][ T5641] Cannot find add_set index 0 as target [ 89.946742][ T5638] EXT4-fs: Ignoring removed nobh option [ 89.953172][ T5645] loop3: detected capacity change from 0 to 128 [ 89.964479][ T5643] loop4: detected capacity change from 0 to 2048 [ 89.971471][ T5628] loop2: detected capacity change from 0 to 512 [ 89.979975][ T5641] netlink: 'syz.1.724': attribute type 4 has an invalid length. [ 90.000344][ T5628] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.018815][ T5645] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.059046][ T5638] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 90.068187][ T5638] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.725: attempt to clear invalid blocks 2 len 1 [ 90.097366][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 90.115955][ T5638] EXT4-fs (loop0): 1 truncate cleaned up [ 90.188448][ T5660] loop1: detected capacity change from 0 to 2048 [ 90.200610][ T5661] hub 2-0:1.0: USB hub found [ 90.205720][ T5661] hub 2-0:1.0: 8 ports detected [ 90.234154][ T5665] loop4: detected capacity change from 0 to 128 [ 90.273167][ T5665] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.462874][ T5676] loop3: detected capacity change from 0 to 1024 [ 90.508574][ T5676] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.582318][ T5686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5686 comm=syz.4.739 [ 90.591850][ T5676] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.735: bg 0: block 393: padding at end of block bitmap is not set [ 90.638493][ T5676] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 90.651275][ T5676] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.651275][ T5676] [ 90.681465][ T5671] loop0: detected capacity change from 0 to 512 [ 90.710341][ T5671] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.841856][ T5696] loop4: detected capacity change from 0 to 128 [ 90.907629][ T5704] loop2: detected capacity change from 0 to 512 [ 90.919987][ T5703] loop3: detected capacity change from 0 to 2048 [ 90.938617][ T5704] EXT4-fs: Ignoring removed orlov option [ 91.019371][ T5704] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.027446][ T5696] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.163127][ T5715] openvswitch: netlink: Message has 6 unknown bytes. [ 91.197980][ T5721] loop4: detected capacity change from 0 to 128 [ 91.208503][ T5721] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.264650][ T5724] loop1: detected capacity change from 0 to 512 [ 91.308435][ T5724] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.749: Failed to acquire dquot type 1 [ 91.323480][ T5724] EXT4-fs (loop1): 1 truncate cleaned up [ 91.335520][ T5724] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.387590][ T5728] FAULT_INJECTION: forcing a failure. [ 91.387590][ T5728] name failslab, interval 1, probability 0, space 0, times 0 [ 91.401013][ T5728] CPU: 0 UID: 0 PID: 5728 Comm: syz.4.750 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 91.401044][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.401083][ T5728] Call Trace: [ 91.401091][ T5728] [ 91.401107][ T5728] __dump_stack+0x1d/0x30 [ 91.401135][ T5728] dump_stack_lvl+0xe8/0x140 [ 91.401184][ T5728] dump_stack+0x15/0x1b [ 91.401208][ T5728] should_fail_ex+0x265/0x280 [ 91.401255][ T5728] should_failslab+0x8c/0xb0 [ 91.401298][ T5728] __kmalloc_noprof+0xa5/0x3e0 [ 91.401391][ T5728] ? copy_splice_read+0xc2/0x5f0 [ 91.401419][ T5728] copy_splice_read+0xc2/0x5f0 [ 91.401508][ T5728] ? __pfx_copy_splice_read+0x10/0x10 [ 91.401533][ T5728] splice_direct_to_actor+0x26c/0x680 [ 91.401560][ T5728] ? __pfx_direct_splice_actor+0x10/0x10 [ 91.401671][ T5728] do_splice_direct+0xda/0x150 [ 91.401696][ T5728] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 91.401726][ T5728] do_sendfile+0x380/0x640 [ 91.401752][ T5728] __x64_sys_sendfile64+0x105/0x150 [ 91.401819][ T5728] x64_sys_call+0xb39/0x2fb0 [ 91.401846][ T5728] do_syscall_64+0xd0/0x1a0 [ 91.401871][ T5728] ? clear_bhb_loop+0x40/0x90 [ 91.401963][ T5728] ? clear_bhb_loop+0x40/0x90 [ 91.401986][ T5728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.402008][ T5728] RIP: 0033:0x7facf868e969 [ 91.402027][ T5728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.402067][ T5728] RSP: 002b:00007facf6cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.402092][ T5728] RAX: ffffffffffffffda RBX: 00007facf88b5fa0 RCX: 00007facf868e969 [ 91.402105][ T5728] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 91.402117][ T5728] RBP: 00007facf6cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.402135][ T5728] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 91.402161][ T5728] R13: 0000000000000000 R14: 00007facf88b5fa0 R15: 00007ffd002aaf68 [ 91.402180][ T5728] [ 91.628792][ T5719] loop3: detected capacity change from 0 to 512 [ 91.648086][ T5719] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.659490][ T5733] loop1: detected capacity change from 0 to 1024 [ 91.673165][ T5736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5736 comm=syz.0.752 [ 91.696152][ T5733] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.757919][ T5745] loop0: detected capacity change from 0 to 2048 [ 91.768694][ T5746] loop4: detected capacity change from 0 to 2048 [ 91.792556][ T5749] loop2: detected capacity change from 0 to 128 [ 91.820683][ T3315] ================================================================== [ 91.828949][ T3315] BUG: KCSAN: data-race in mlock_folio / need_mlock_drain [ 91.836270][ T3315] [ 91.838737][ T3315] read-write to 0xffff888237c26610 of 1 bytes by task 5719 on cpu 0: [ 91.847270][ T3315] mlock_folio+0x128/0x200 [ 91.851741][ T3315] folio_add_file_rmap_ptes+0x19b/0x1a0 [ 91.857568][ T3315] set_pte_range+0x205/0x420 [ 91.862203][ T3315] filemap_map_pages+0x61f/0xab0 [ 91.867712][ T3315] handle_mm_fault+0x14df/0x2ae0 [ 91.872973][ T3315] __get_user_pages+0xde2/0x1d20 [ 91.878735][ T3315] __mm_populate+0x243/0x3a0 [ 91.883638][ T3315] __se_sys_mlockall+0x368/0x3d0 [ 91.889787][ T3315] __x64_sys_mlockall+0x1f/0x30 [ 91.894809][ T3315] x64_sys_call+0x290a/0x2fb0 [ 91.899516][ T3315] do_syscall_64+0xd0/0x1a0 [ 91.904075][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.912755][ T3315] [ 91.915383][ T3315] read to 0xffff888237c26610 of 1 bytes by task 3315 on cpu 1: [ 91.924279][ T3315] need_mlock_drain+0x30/0x50 [ 91.929368][ T3315] __lru_add_drain_all+0x220/0x3f0 [ 91.934810][ T3315] lru_add_drain_all+0x10/0x20 [ 91.941580][ T3315] invalidate_bdev+0x47/0x70 [ 91.947892][ T3315] ext4_put_super+0x624/0x7d0 [ 91.953533][ T3315] generic_shutdown_super+0xe6/0x210 [ 91.960580][ T3315] kill_block_super+0x2a/0x70 [ 91.965494][ T3315] ext4_kill_sb+0x42/0x80 [ 91.969895][ T3315] deactivate_locked_super+0x75/0x1c0 [ 91.977176][ T3315] deactivate_super+0x97/0xa0 [ 91.982274][ T3315] cleanup_mnt+0x269/0x2e0 [ 91.987045][ T3315] __cleanup_mnt+0x19/0x20 [ 91.991748][ T3315] task_work_run+0x131/0x1a0 [ 91.996786][ T3315] resume_user_mode_work+0x6a/0x70 [ 92.002951][ T3315] syscall_exit_to_user_mode+0x77/0xb0 [ 92.008545][ T3315] do_syscall_64+0xdd/0x1a0 [ 92.013185][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.019482][ T3315] [ 92.022538][ T3315] value changed: 0x03 -> 0x0a [ 92.027427][ T3315] [ 92.029864][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 92.036932][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 92.049700][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 92.059994][ T3315] ================================================================== [ 92.073088][ T5749] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.108187][ T5755] __nla_validate_parse: 10 callbacks suppressed [ 92.108207][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'.