last executing test programs: 12m7.412837586s ago: executing program 0 (id=3753): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@errors_remount}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000002480)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001940)) 12m7.103812389s ago: executing program 0 (id=3755): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 12m6.959263261s ago: executing program 0 (id=3756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) 12m6.06491583s ago: executing program 0 (id=3760): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 11m58.380661289s ago: executing program 0 (id=3781): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x10000000, 0xfffffdef) 11m58.21120311s ago: executing program 0 (id=3782): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 11m42.233123993s ago: executing program 32 (id=3782): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 3m12.217485847s ago: executing program 1 (id=5409): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="886e88", 0x3, 0x20008801, &(0x7f0000000240)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 3m12.148532998s ago: executing program 1 (id=5410): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000380)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m10.22962088s ago: executing program 1 (id=5414): socket$inet6(0xa, 0x1, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) 3m8.401938431s ago: executing program 1 (id=5422): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x141b82, 0xa9) write$cgroup_int(r0, &(0x7f0000000080)=0x6, 0x12) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") 3m7.204697354s ago: executing program 1 (id=5425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m6.287627865s ago: executing program 1 (id=5428): socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0xa9) write$cgroup_int(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") 2m50.997777019s ago: executing program 33 (id=5428): socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0xa9) write$cgroup_int(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") 6.239441998s ago: executing program 2 (id=6027): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 5.131202611s ago: executing program 2 (id=6029): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 5.103843211s ago: executing program 4 (id=6030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 4.899242764s ago: executing program 2 (id=6032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x12) 4.879469754s ago: executing program 4 (id=6033): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@user_xattr}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.713174046s ago: executing program 2 (id=6034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) 4.555684378s ago: executing program 2 (id=6035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0) 4.107207303s ago: executing program 5 (id=6036): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.987527444s ago: executing program 2 (id=6037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000100)={'system_u:object_r:udev_var_run_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x20000000000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x45) socket$packet(0x11, 0xa, 0x300) 3.747241407s ago: executing program 3 (id=5984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0xfffffffe}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x1a}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xe24}, "fc"}}]}]}]}}]}, 0x54}}, 0x0) 3.155375494s ago: executing program 5 (id=6038): unshare(0x22000600) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3.155057534s ago: executing program 4 (id=6039): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x4000) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 2.252172614s ago: executing program 3 (id=6041): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 2.036913186s ago: executing program 3 (id=6042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) 1.887238228s ago: executing program 3 (id=6043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x20000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.786595829s ago: executing program 5 (id=6044): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) tkill(0x0, 0x7) keyctl$get_persistent(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x2, 0x0) 1.71084592s ago: executing program 3 (id=6045): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x281, &(0x7f0000000100)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000003c0)=[{}], 0x0, 0x0) r3 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @empty, 0x0}, &(0x7f0000000300)=0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d", 0x21) write$UHID_INPUT(r4, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) 1.561905472s ago: executing program 6 (id=6046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 1.429043273s ago: executing program 6 (id=6047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8100, &(0x7f0000001dc0)={0xb, 0x75}, 0x20) 1.306353615s ago: executing program 6 (id=6048): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4c", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x46060480) 898.668749ms ago: executing program 4 (id=6049): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000500)=""/92, 0x5c}], 0x1}, 0x0) 897.754509ms ago: executing program 5 (id=6050): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 428.423895ms ago: executing program 3 (id=6051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) 394.219325ms ago: executing program 6 (id=6052): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0x12}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 286.948677ms ago: executing program 5 (id=6053): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r0, &(0x7f00000013c0)=""/4089, 0xff9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 223.381427ms ago: executing program 6 (id=6054): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0x5, 0x6, 0x1, 0x0, 0x7f, 0x0}) 186.228048ms ago: executing program 5 (id=6055): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="00220f000000a02b00000000ab874b"], 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 95.277048ms ago: executing program 6 (id=6056): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000007000000ff0fdc43e739e97700000700010000000000660a4eb6d3c5040a2a2d4493aef2a494d46befd0f7fc52aacda09f6e338592eedc7988ab3d8e92ab6698470b9705016d79982fe3f2b5362aef161732323873c7517410e891f0c2153936743abd78f2ab99d90c498436bd566b3a9fc7d9b68c6283c6e5b140242165acadccd07373c9148f663ea82c7127c0ed397414493f1d5704b0fb3a89cac33d0d8bf87532da1e2137cbf43405105c76a7610cb0bac1ac24530668447cbeb104b2725706f3c65237", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) accept$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @local}, &(0x7f0000000680)=0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x2}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 63.958259ms ago: executing program 4 (id=6057): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@errors_remount}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000002480)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001940)) 0s ago: executing program 4 (id=6058): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8, @ANYBLOB="00000000d3ec66ecc053c543da5f5f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x3, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000500)=[{{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x30) kernel console output (not intermixed with test programs): ead_dquot: Can't read quota structure for id 0 [ 1048.160723][T23074] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5593: Failed to acquire dquot type 1 [ 1048.184748][T23084] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.205744][T23074] EXT4-fs (loop3): 1 truncate cleaned up [ 1048.220703][T23074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1048.260587][T23098] loop2: detected capacity change from 0 to 512 [ 1048.295661][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5599'. [ 1048.304983][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5599'. [ 1048.326408][T23098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.339088][T23098] ext4 filesystem being mounted at /504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.368248][T23100] loop6: detected capacity change from 0 to 512 [ 1048.392864][T23100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1048.444552][T23100] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1048.540361][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.616051][T23100] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5596: bg 0: block 248: padding at end of block bitmap is not set [ 1048.633113][T23100] Quota error (device loop6): write_blk: dquota write failed [ 1048.640591][T23100] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1048.650615][T23100] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5596: Failed to acquire dquot type 1 [ 1048.668696][T23100] EXT4-fs (loop6): 1 truncate cleaned up [ 1049.161579][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.427824][T23100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1049.442931][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.712895][T23116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1052.226426][ T29] audit: type=1400 audit(1745566433.445:2613): avc: denied { wake_alarm } for pid=23125 comm="syz.4.5607" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.338897][T23117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1052.624058][T23147] warn_alloc: 3 callbacks suppressed [ 1052.624073][T23147] syz.4.5610: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1052.644107][T23147] CPU: 1 UID: 0 PID: 23147 Comm: syz.4.5610 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 1052.644139][T23147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1052.644156][T23147] Call Trace: [ 1052.644164][T23147] [ 1052.644174][T23147] __dump_stack+0x1d/0x30 [ 1052.644201][T23147] dump_stack_lvl+0xe8/0x140 [ 1052.644225][T23147] dump_stack+0x15/0x1b [ 1052.644252][T23147] warn_alloc+0x12b/0x1a0 [ 1052.644286][T23147] ? schedule+0x5f/0xd0 [ 1052.644320][T23147] ? futex_unqueue+0xb9/0xf0 [ 1052.644436][T23147] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 1052.644499][T23147] ? find_lowest_rq+0x63/0x160 [ 1052.644556][T23147] ? ___slab_alloc+0x11b/0x900 [ 1052.644655][T23147] ? should_fail_ex+0x30/0x280 [ 1052.644690][T23147] vmalloc_user_noprof+0x59/0x70 [ 1052.644707][T23147] ? xskq_create+0x80/0xe0 [ 1052.644774][T23147] xskq_create+0x80/0xe0 [ 1052.644796][T23147] xsk_init_queue+0x95/0xf0 [ 1052.644817][T23147] xsk_setsockopt+0x369/0x510 [ 1052.644839][T23147] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1052.644867][T23147] __sys_setsockopt+0x181/0x200 [ 1052.644991][T23147] __x64_sys_setsockopt+0x64/0x80 [ 1052.645030][T23147] x64_sys_call+0x2bd5/0x2fb0 [ 1052.645066][T23147] do_syscall_64+0xd0/0x1a0 [ 1052.645091][T23147] ? clear_bhb_loop+0x25/0x80 [ 1052.645119][T23147] ? clear_bhb_loop+0x25/0x80 [ 1052.645143][T23147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.645170][T23147] RIP: 0033:0x7f0afdb7e969 [ 1052.645191][T23147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.645282][T23147] RSP: 002b:00007f0afbd82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1052.645337][T23147] RAX: ffffffffffffffda RBX: 00007f0afdda6240 RCX: 00007f0afdb7e969 [ 1052.645363][T23147] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1052.645376][T23147] RBP: 00007f0afdc00ab1 R08: 0000000000000004 R09: 0000000000000000 [ 1052.645392][T23147] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.645408][T23147] R13: 0000000000000000 R14: 00007f0afdda6240 R15: 00007ffeefa73aa8 [ 1052.645438][T23147] [ 1052.645447][T23147] Mem-Info: [ 1052.862248][T23147] active_anon:114378 inactive_anon:0 isolated_anon:0 [ 1052.862248][T23147] active_file:24582 inactive_file:2445 isolated_file:0 [ 1052.862248][T23147] unevictable:0 dirty:202 writeback:0 [ 1052.862248][T23147] slab_reclaimable:3271 slab_unreclaimable:15238 [ 1052.862248][T23147] mapped:35972 shmem:90821 pagetables:1243 [ 1052.862248][T23147] sec_pagetables:0 bounce:0 [ 1052.862248][T23147] kernel_misc_reclaimable:0 [ 1052.862248][T23147] free:1775098 free_pcp:5375 free_cma:0 [ 1052.907567][T23147] Node 0 active_anon:457512kB inactive_anon:0kB active_file:98328kB inactive_file:9780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143888kB dirty:808kB writeback:0kB shmem:363284kB writeback_tmp:0kB kernel_stack:3296kB pagetables:4972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1052.936701][T23147] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1052.963586][T23147] lowmem_reserve[]: 0 2884 7863 7863 [ 1052.968941][T23147] Node 0 DMA32 free:2950096kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953628kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 1052.997332][T23147] lowmem_reserve[]: 0 0 4978 4978 [ 1053.002436][T23147] Node 0 Normal free:4134688kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:458904kB inactive_anon:0kB active_file:98328kB inactive_file:9780kB unevictable:0kB writepending:808kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:16888kB local_pcp:2100kB free_cma:0kB [ 1053.032729][T23147] lowmem_reserve[]: 0 0 0 0 [ 1053.037392][T23147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1053.050208][T23147] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950096kB [ 1053.066399][T23147] Node 0 Normal: 183*4kB (UME) 40*8kB (UM) 27*16kB (UME) 44*32kB (UME) 76*64kB (UME) 37*128kB (UME) 10*256kB (UME) 4*512kB (U) 45*1024kB (UM) 26*2048kB (UME) 981*4096kB (M) = 4134604kB [ 1053.084881][T23147] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1053.094305][T23147] 118747 total pagecache pages [ 1053.099134][T23147] 0 pages in swap cache [ 1053.103326][T23147] Free swap = 124996kB [ 1053.107510][T23147] Total swap = 124996kB [ 1053.111694][T23147] 2097051 pages RAM [ 1053.115506][T23147] 0 pages HighMem/MovableOnly [ 1053.120265][T23147] 80243 pages reserved [ 1053.524659][ T29] audit: type=1400 audit(1745566435.855:2614): avc: denied { create } for pid=23149 comm="syz.3.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1053.922438][T23163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1054.266682][T23165] loop4: detected capacity change from 0 to 128 [ 1054.664790][T23170] loop3: detected capacity change from 0 to 256 [ 1054.721732][T23170] FAT-fs (loop3): codepage cp857 not found [ 1055.620296][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.633554][T23181] loop4: detected capacity change from 0 to 512 [ 1055.640883][T23181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1055.650479][T23181] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1055.657734][T23181] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 1055.667287][T23181] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1055.676836][T23181] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5621: Failed to acquire dquot type 1 [ 1055.716790][T23181] EXT4-fs (loop4): 1 truncate cleaned up [ 1055.723278][T23181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1055.789916][T23187] loop6: detected capacity change from 0 to 256 [ 1055.873527][T23190] loop2: detected capacity change from 0 to 512 [ 1055.982004][T23190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.994755][T23190] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.412276][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.530492][T23203] loop3: detected capacity change from 0 to 512 [ 1056.618760][T23203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1056.638163][T23203] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1056.646231][T23203] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1056.655739][T23203] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1056.665199][T23203] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5627: Failed to acquire dquot type 1 [ 1056.694103][T23203] EXT4-fs (loop3): 1 truncate cleaned up [ 1056.940484][T23210] loop6: detected capacity change from 0 to 256 [ 1057.115082][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.124936][T23203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1057.175305][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.193482][T23217] loop5: detected capacity change from 0 to 128 [ 1057.208928][T23218] loop2: detected capacity change from 0 to 256 [ 1057.227398][T23218] FAT-fs (loop2): codepage cp857 not found [ 1057.416154][T23225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1057.426197][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1057.759555][T23227] loop4: detected capacity change from 0 to 512 [ 1057.766891][T23227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1057.811339][T23227] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1057.818320][T23227] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 1057.827829][T23227] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1057.837331][T23227] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5634: Failed to acquire dquot type 1 [ 1057.851201][T23227] EXT4-fs (loop4): 1 truncate cleaned up [ 1057.865759][T23227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1058.412516][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1058.458212][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5636'. [ 1058.467792][T23241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5636'. [ 1058.497988][T23240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1058.928276][T23245] loop3: detected capacity change from 0 to 4096 [ 1058.974645][T23245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.321941][T23260] loop5: detected capacity change from 0 to 512 [ 1060.350302][T23260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1060.411067][T23260] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1060.420195][T23260] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1060.420466][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.429773][T23260] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1060.448186][T23260] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5643: Failed to acquire dquot type 1 [ 1060.507739][T23260] EXT4-fs (loop5): 1 truncate cleaned up [ 1060.527048][T23260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1060.659017][T23265] 9pnet_fd: Insufficient options for proto=fd [ 1060.666288][T23265] loop3: detected capacity change from 0 to 128 [ 1062.009649][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.605623][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5648'. [ 1062.629488][T23280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1062.868156][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5649'. [ 1062.879053][T23282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5649'. [ 1063.479660][T23285] loop5: detected capacity change from 0 to 256 [ 1063.501594][T23290] loop3: detected capacity change from 0 to 128 [ 1063.526153][T23285] FAT-fs (loop5): codepage cp857 not found [ 1063.725371][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5651'. [ 1063.953253][T23301] loop5: detected capacity change from 0 to 128 [ 1064.044944][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.221884][T23309] loop6: detected capacity change from 0 to 512 [ 1064.574749][T23309] EXT4-fs (loop6): 1 orphan inode deleted [ 1064.648845][ T37] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1064.658794][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 1064.686694][T23309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.723819][T23309] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.659573][T23323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1065.811694][T23327] loop4: detected capacity change from 0 to 512 [ 1066.019363][T23334] 9pnet_fd: Insufficient options for proto=fd [ 1066.026757][T23334] loop2: detected capacity change from 0 to 128 [ 1066.046866][T23327] EXT4-fs (loop4): 1 orphan inode deleted [ 1066.061663][T21379] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1066.071572][T21379] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 1066.089426][T23327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.118477][T23338] loop3: detected capacity change from 0 to 128 [ 1066.169232][T23327] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.435102][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.029419][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.206491][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5663'. [ 1067.229660][T23345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1067.274630][T23347] loop5: detected capacity change from 0 to 256 [ 1067.292370][T23347] FAT-fs (loop5): codepage cp857 not found [ 1067.914769][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5666'. [ 1068.138801][T23369] loop2: detected capacity change from 0 to 128 [ 1068.145267][T23368] loop5: detected capacity change from 0 to 512 [ 1068.156536][T23368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1068.181798][T23368] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1068.210779][T23368] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5669: bg 0: block 248: padding at end of block bitmap is not set [ 1068.257287][T23368] Quota error (device loop5): write_blk: dquota write failed [ 1068.264774][T23368] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1068.274861][T23368] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5669: Failed to acquire dquot type 1 [ 1068.291753][T23368] EXT4-fs (loop5): 1 truncate cleaned up [ 1068.402258][T23368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1068.518473][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5673'. [ 1068.528170][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5673'. [ 1069.451312][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5674'. [ 1069.461951][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5674'. [ 1069.870944][T23386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1069.881992][T23386] 9pnet_fd: Insufficient options for proto=fd [ 1070.259702][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5676'. [ 1070.281449][T23388] loop4: detected capacity change from 0 to 256 [ 1070.293333][T23390] loop6: detected capacity change from 0 to 512 [ 1070.300203][T23388] vfat: Bad value for 'shortname' [ 1070.504469][T23390] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1070.527759][T23390] EXT4-fs (loop6): 1 truncate cleaned up [ 1070.556809][T23390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.176008][T23403] loop3: detected capacity change from 0 to 256 [ 1071.270975][T23403] FAT-fs (loop3): codepage cp857 not found [ 1071.477711][T23409] loop2: detected capacity change from 0 to 256 [ 1071.534316][T23409] FAT-fs (loop2): codepage cp857 not found [ 1071.567714][T23405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5681'. [ 1071.727299][ T29] audit: type=1400 audit(1745566454.055:2615): avc: denied { bind } for pid=23412 comm="syz.4.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1071.784216][T23415] loop3: detected capacity change from 0 to 128 [ 1071.813457][T23417] loop4: detected capacity change from 0 to 512 [ 1071.892303][T23417] EXT4-fs (loop4): 1 orphan inode deleted [ 1071.909458][T23417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.923307][ T1845] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1071.933114][ T1845] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 1071.964990][T23417] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.181062][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.328726][T23427] loop2: detected capacity change from 0 to 256 [ 1072.462390][T23427] FAT-fs (loop2): codepage cp857 not found [ 1072.811534][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.990099][T23438] loop6: detected capacity change from 0 to 4096 [ 1073.072124][T23438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.260798][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1073.270228][T23444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1074.095559][T23458] loop3: detected capacity change from 0 to 256 [ 1074.108647][T23454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5694'. [ 1074.121499][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.150023][T23458] FAT-fs (loop3): codepage cp857 not found [ 1074.185158][T23462] loop4: detected capacity change from 0 to 128 [ 1074.461406][T23470] loop5: detected capacity change from 0 to 512 [ 1074.555862][T23472] loop2: detected capacity change from 0 to 512 [ 1075.486625][T23470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1075.513158][T23470] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1075.513346][T23472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.532282][T23472] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.665484][T23470] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1075.674997][T23470] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1075.684640][T23470] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5697: Failed to acquire dquot type 1 [ 1075.973068][T23483] loop3: detected capacity change from 0 to 512 [ 1076.170570][T23483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1076.337354][T23470] EXT4-fs (loop5): 1 truncate cleaned up [ 1076.345028][T23470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1076.525956][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.560859][T23483] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1076.634144][T23483] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5699: bg 0: block 248: padding at end of block bitmap is not set [ 1076.854915][T23483] Quota error (device loop3): write_blk: dquota write failed [ 1076.862387][T23483] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1076.872495][T23483] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5699: Failed to acquire dquot type 1 [ 1076.944675][T23494] loop2: detected capacity change from 0 to 256 [ 1076.987842][T23483] EXT4-fs (loop3): 1 truncate cleaned up [ 1077.016265][T23483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1077.336880][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5706'. [ 1077.371775][T23499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1077.890512][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.946911][T23503] loop6: detected capacity change from 0 to 512 [ 1078.001588][T23503] EXT4-fs (loop6): 1 orphan inode deleted [ 1078.007684][T23503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.040571][T21379] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1078.050410][T21379] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 1078.084967][T23507] loop4: detected capacity change from 0 to 256 [ 1078.114683][T23503] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.408148][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.500495][T23520] loop4: detected capacity change from 0 to 4096 [ 1079.663221][T23520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.899842][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.932748][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.115208][T23541] loop4: detected capacity change from 0 to 512 [ 1081.186050][T23543] loop6: detected capacity change from 0 to 128 [ 1081.203935][T23544] loop5: detected capacity change from 0 to 512 [ 1081.214895][T23544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1081.231353][T23543] msdos: Unknown parameter '00000000000000000000' [ 1081.290423][T23544] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1081.297666][T23544] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5718: bg 0: block 248: padding at end of block bitmap is not set [ 1081.316090][T23544] Quota error (device loop5): write_blk: dquota write failed [ 1081.323550][T23544] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1081.333585][T23544] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5718: Failed to acquire dquot type 1 [ 1081.349615][T23544] EXT4-fs (loop5): 1 truncate cleaned up [ 1081.356171][T23544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1081.581620][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.811405][T23541] EXT4-fs (loop4): 1 orphan inode deleted [ 1081.829584][ T1933] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1081.839418][ T1933] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 1081.868363][T23541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.165162][T23541] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.521410][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1082.571265][T23553] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1082.803218][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.915349][T23551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5720'. [ 1082.954285][T23562] loop5: detected capacity change from 0 to 512 [ 1083.022261][T23562] EXT4-fs (loop5): 1 orphan inode deleted [ 1083.048565][T23562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.064235][T11557] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1083.074125][T11557] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 1083.127520][T23562] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.486345][T23573] loop6: detected capacity change from 0 to 256 [ 1083.644374][T23573] FAT-fs (loop6): codepage cp857 not found [ 1083.917797][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.254035][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5727'. [ 1084.264589][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5727'. [ 1084.983425][T23597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5731'. [ 1084.992989][T23597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5731'. [ 1085.013134][T23598] loop4: detected capacity change from 0 to 512 [ 1085.064540][T23598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.077168][T23598] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.147200][T23604] loop2: detected capacity change from 0 to 128 [ 1086.673194][T23612] loop6: detected capacity change from 0 to 128 [ 1086.680700][T23612] msdos: Unknown parameter '00000000000000000000' [ 1086.694811][T23612] netlink: 'syz.6.5734': attribute type 4 has an invalid length. [ 1087.741768][T23607] loop3: detected capacity change from 0 to 512 [ 1088.379084][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.474609][T23619] loop6: detected capacity change from 0 to 256 [ 1088.483461][T23607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1088.497557][T23619] vfat: Bad value for 'shortname' [ 1088.614474][T23607] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1088.614512][T23607] EXT4-fs: failed to create workqueue [ 1088.629515][T23607] EXT4-fs (loop3): mount failed [ 1089.154508][T23631] loop4: detected capacity change from 0 to 512 [ 1089.191402][T23631] EXT4-fs (loop4): 1 orphan inode deleted [ 1089.206272][T23631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.218887][ T51] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1089.228788][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 1089.389569][T23631] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.583256][T23643] loop6: detected capacity change from 0 to 512 [ 1090.381168][T23643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1090.394042][T23643] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1090.401294][T23643] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1090.410776][T23643] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1090.420242][T23643] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5745: Failed to acquire dquot type 1 [ 1090.435989][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.472443][T23643] EXT4-fs (loop6): 1 truncate cleaned up [ 1090.478638][T23643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1090.786285][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.907581][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.584275][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5748'. [ 1091.720561][T23668] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1091.980438][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1091.992572][T23677] loop3: detected capacity change from 0 to 256 [ 1092.019415][ T29] audit: type=1400 audit(1745566474.345:2616): avc: denied { shutdown } for pid=23678 comm="syz.6.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1092.039981][T23677] vfat: Bad value for 'shortname' [ 1094.653981][T23704] loop2: detected capacity change from 0 to 512 [ 1095.204139][T23708] netlink: 'syz.6.5761': attribute type 4 has an invalid length. [ 1096.449343][T23705] 9pnet_fd: Insufficient options for proto=fd [ 1096.590377][T23705] loop3: detected capacity change from 0 to 128 [ 1097.215227][T23712] loop6: detected capacity change from 0 to 128 [ 1097.998126][T23704] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 1098.966707][T23729] loop2: detected capacity change from 0 to 512 [ 1098.973979][T23728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1098.983339][T23725] batadv0: entered promiscuous mode [ 1098.989577][T23725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1099.008258][T23725] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1099.065112][T23733] loop5: detected capacity change from 0 to 512 [ 1099.149576][T23736] loop4: detected capacity change from 0 to 512 [ 1099.168750][T23736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.181564][T23736] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.397039][T23733] EXT4-fs (loop5): 1 orphan inode deleted [ 1099.415926][T23729] EXT4-fs (loop2): 1 orphan inode deleted [ 1099.477004][T23729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.497488][T23733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.596093][T23729] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.615862][T23733] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.093750][ T37] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1100.103624][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 1100.624122][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.278283][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.289931][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.421932][ T29] audit: type=1400 audit(1745566483.745:2617): avc: denied { create } for pid=23763 comm="syz.4.5779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1101.582117][T23768] loop2: detected capacity change from 0 to 512 [ 1101.583598][ T29] audit: type=1400 audit(1745566483.915:2618): avc: denied { create } for pid=23770 comm="syz.4.5781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1101.608215][ T29] audit: type=1400 audit(1745566483.915:2619): avc: denied { write } for pid=23770 comm="syz.4.5781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1101.974815][T23768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1102.094711][T23768] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1102.121951][T23768] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5777: bg 0: block 248: padding at end of block bitmap is not set [ 1102.317521][T23782] 9pnet_fd: Insufficient options for proto=fd [ 1102.324961][T23782] loop4: detected capacity change from 0 to 128 [ 1102.460563][T23784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5784'. [ 1102.533168][T23768] Quota error (device loop2): write_blk: dquota write failed [ 1102.540703][T23768] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1102.550927][T23768] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5777: Failed to acquire dquot type 1 [ 1102.577414][T23762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5778'. [ 1103.172076][T23768] EXT4-fs (loop2): 1 truncate cleaned up [ 1103.441378][T23768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1103.538315][T23794] loop5: detected capacity change from 0 to 4096 [ 1104.087756][T23786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5785'. [ 1104.133902][T23794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.293214][T23802] loop4: detected capacity change from 0 to 512 [ 1104.305512][T23802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1105.303199][T23802] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1105.310439][T23802] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5788: bg 0: block 248: padding at end of block bitmap is not set [ 1105.325182][T23802] Quota error (device loop4): write_blk: dquota write failed [ 1105.332626][T23802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1105.342601][T23802] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5788: Failed to acquire dquot type 1 [ 1105.354883][T23802] EXT4-fs (loop4): 1 truncate cleaned up [ 1105.362225][T23802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1105.597196][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.927654][T23807] loop5: detected capacity change from 0 to 512 [ 1105.958136][T23808] loop6: detected capacity change from 0 to 512 [ 1105.969186][T23808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1105.989357][T23807] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1106.080041][T23808] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1106.087294][T23808] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1106.096732][T23808] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1106.106162][T23808] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5790: Failed to acquire dquot type 1 [ 1106.122500][T23807] EXT4-fs (loop5): 1 truncate cleaned up [ 1106.128362][T23808] EXT4-fs (loop6): 1 truncate cleaned up [ 1106.135623][T23808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1106.157001][T23807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.882486][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.891824][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.406965][T23817] loop4: detected capacity change from 0 to 256 [ 1107.439725][T23817] vfat: Bad value for 'shortname' [ 1107.447661][T23820] loop6: detected capacity change from 0 to 256 [ 1107.983372][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.998269][T23820] FAT-fs (loop6): codepage cp857 not found [ 1108.157727][T23831] loop5: detected capacity change from 0 to 512 [ 1108.181112][T23831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.279950][T23831] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.350575][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.394183][T23842] 9pnet_fd: Insufficient options for proto=fd [ 1108.401791][T23842] loop4: detected capacity change from 0 to 128 [ 1109.823044][T23852] loop6: detected capacity change from 0 to 256 [ 1109.991811][T23848] loop5: detected capacity change from 0 to 512 [ 1110.129989][T23848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.142692][T23848] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.261479][T23852] FAT-fs (loop6): codepage cp857 not found [ 1110.882509][T23868] loop6: detected capacity change from 0 to 512 [ 1110.939464][T23869] loop3: detected capacity change from 0 to 256 [ 1111.050951][T23860] loop4: detected capacity change from 0 to 128 [ 1111.063571][T23860] msdos: Unknown parameter '00000000000000000000' [ 1111.220372][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.255598][T23868] EXT4-fs (loop6): 1 orphan inode deleted [ 1111.269460][T17503] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1111.279304][T17503] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 1111.291233][T23868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.304255][T23868] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.304311][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.351415][T23878] loop5: detected capacity change from 0 to 256 [ 1111.399576][T23878] FAT-fs (loop5): codepage cp857 not found [ 1111.539439][ T29] audit: type=1400 audit(1745566493.865:2620): avc: denied { create } for pid=23867 comm="syz.6.5807" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1111.559614][ T29] audit: type=1400 audit(1745566493.865:2621): avc: denied { read write open } for pid=23867 comm="syz.6.5807" path=2F36352F66696C65312F2E02 dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1111.873760][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.921043][T23894] loop6: detected capacity change from 0 to 512 [ 1111.948102][T23894] EXT4-fs (loop6): 1 orphan inode deleted [ 1111.955088][T23894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.967804][ T51] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1111.968082][T23894] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.977609][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 1112.004035][T23900] loop4: detected capacity change from 0 to 128 [ 1112.014647][T23901] loop3: detected capacity change from 0 to 512 [ 1112.061902][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1112.070025][T23900] msdos: Unknown parameter '00000000000000000000' [ 1112.071081][T23902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1112.142622][T23901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1112.155426][T23901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1112.162690][T23901] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1112.172182][T23901] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1112.181641][T23901] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5816: Failed to acquire dquot type 1 [ 1112.197633][T23901] EXT4-fs (loop3): 1 truncate cleaned up [ 1112.203800][T23901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1112.696563][T23910] loop5: detected capacity change from 0 to 512 [ 1112.825084][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.874089][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.915432][T23910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.934683][T23910] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.037891][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.072859][T23918] loop3: detected capacity change from 0 to 512 [ 1113.084828][T23918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1113.126576][T23918] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1113.237417][T23918] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5819: bg 0: block 248: padding at end of block bitmap is not set [ 1113.260297][T23924] warn_alloc: 2 callbacks suppressed [ 1113.260316][T23924] syz.2.5822: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1113.280317][T23924] CPU: 1 UID: 0 PID: 23924 Comm: syz.2.5822 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 1113.280349][T23924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1113.280439][T23924] Call Trace: [ 1113.280449][T23924] [ 1113.280458][T23924] __dump_stack+0x1d/0x30 [ 1113.280478][T23924] dump_stack_lvl+0xe8/0x140 [ 1113.280579][T23924] dump_stack+0x15/0x1b [ 1113.280601][T23924] warn_alloc+0x12b/0x1a0 [ 1113.280690][T23924] ? schedule+0x5f/0xd0 [ 1113.280728][T23924] ? futex_unqueue+0xb9/0xf0 [ 1113.280787][T23924] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 1113.280844][T23924] ? __pfx_futex_wake_mark+0x10/0x10 [ 1113.280870][T23924] ? __rcu_read_unlock+0x4f/0x70 [ 1113.280967][T23924] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1113.281047][T23924] ? should_fail_ex+0x30/0x280 [ 1113.281082][T23924] ? xskq_create+0x36/0xe0 [ 1113.281112][T23924] ? should_failslab+0x8c/0xb0 [ 1113.281165][T23924] vmalloc_user_noprof+0x59/0x70 [ 1113.281184][T23924] ? xskq_create+0x80/0xe0 [ 1113.281206][T23924] xskq_create+0x80/0xe0 [ 1113.281228][T23924] xsk_init_queue+0x95/0xf0 [ 1113.281255][T23924] xsk_setsockopt+0x369/0x510 [ 1113.281310][T23924] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1113.281339][T23924] __sys_setsockopt+0x181/0x200 [ 1113.281459][T23924] ? fpregs_restore_userregs+0x7d/0x190 [ 1113.281559][T23924] __x64_sys_setsockopt+0x64/0x80 [ 1113.281588][T23924] x64_sys_call+0x2bd5/0x2fb0 [ 1113.281641][T23924] do_syscall_64+0xd0/0x1a0 [ 1113.281665][T23924] ? clear_bhb_loop+0x25/0x80 [ 1113.281686][T23924] ? clear_bhb_loop+0x25/0x80 [ 1113.281712][T23924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.281739][T23924] RIP: 0033:0x7ff81333e969 [ 1113.281758][T23924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.281799][T23924] RSP: 002b:00007ff8119a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1113.281834][T23924] RAX: ffffffffffffffda RBX: 00007ff813565fa0 RCX: 00007ff81333e969 [ 1113.281850][T23924] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1113.281906][T23924] RBP: 00007ff8133c0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 1113.281923][T23924] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.281939][T23924] R13: 0000000000000000 R14: 00007ff813565fa0 R15: 00007ffeaa9c6678 [ 1113.281963][T23924] [ 1113.281972][T23924] Mem-Info: [ 1113.340368][T23918] Quota error (device loop3): write_blk: dquota write failed [ 1113.343116][T23924] active_anon:127683 inactive_anon:0 isolated_anon:0 [ 1113.343116][T23924] active_file:24582 inactive_file:2490 isolated_file:0 [ 1113.343116][T23924] unevictable:1508 dirty:154 writeback:0 [ 1113.343116][T23924] slab_reclaimable:3303 slab_unreclaimable:15424 [ 1113.343116][T23924] mapped:38634 shmem:107056 pagetables:1207 [ 1113.343116][T23924] sec_pagetables:0 bounce:0 [ 1113.343116][T23924] kernel_misc_reclaimable:0 [ 1113.343116][T23924] free:1759335 free_pcp:6109 free_cma:0 [ 1113.348391][T23918] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1113.353370][T23924] Node 0 active_anon:510732kB inactive_anon:0kB active_file:98328kB inactive_file:9960kB unevictable:6032kB isolated(anon):0kB isolated(file):0kB mapped:154536kB dirty:616kB writeback:0kB shmem:428224kB writeback_tmp:0kB kernel_stack:3248kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1113.358730][T23918] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5819: Failed to acquire dquot type 1 [ 1113.584986][ T29] audit: type=1400 audit(1745566495.915:2622): avc: denied { bind } for pid=23920 comm="syz.5.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1113.611864][T23924] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.623140][ T29] audit: type=1400 audit(1745566495.915:2623): avc: denied { listen } for pid=23920 comm="syz.5.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1113.642523][T23924] lowmem_reserve[]: 0 2884 7863 7863 [ 1113.694475][T23924] Node 0 DMA32 free:2950096kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953628kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 1113.722886][T23924] lowmem_reserve[]: 0 0 4978 4978 [ 1113.728048][T23924] Node 0 Normal free:4071932kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:517312kB inactive_anon:0kB active_file:98328kB inactive_file:9932kB unevictable:64kB writepending:628kB present:5242880kB managed:5098244kB mlocked:64kB bounce:0kB free_pcp:20068kB local_pcp:5128kB free_cma:0kB [ 1113.758476][T23924] lowmem_reserve[]: 0 0 0 0 [ 1113.763066][T23924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1113.775887][T23924] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950096kB [ 1113.792114][T23924] Node 0 Normal: 58*4kB (UE) 51*8kB (UME) 59*16kB (UE) 35*32kB (UME) 124*64kB (UME) 74*128kB (UME) 26*256kB (UME) 12*512kB (UM) 10*1024kB (UM) 11*2048kB (UE) 978*4096kB (M) = 4071568kB [ 1113.810851][T23924] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1113.820242][T23924] 132896 total pagecache pages [ 1113.825017][T23924] 0 pages in swap cache [ 1113.829183][T23924] Free swap = 124996kB [ 1113.833400][T23924] Total swap = 124996kB [ 1113.837559][T23924] 2097051 pages RAM [ 1113.841456][T23924] 0 pages HighMem/MovableOnly [ 1113.846280][T23924] 80243 pages reserved [ 1113.939627][T23918] EXT4-fs (loop3): 1 truncate cleaned up [ 1113.976250][T23935] loop5: detected capacity change from 0 to 512 [ 1113.983778][T23935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1113.989638][T23918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1113.996611][T23935] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1114.011476][T23935] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5823: Failed to acquire dquot type 1 [ 1114.026618][T23936] loop2: detected capacity change from 0 to 512 [ 1114.033605][T23935] EXT4-fs (loop5): 1 truncate cleaned up [ 1114.040067][T23935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1114.082916][T23936] EXT4-fs (loop2): 1 orphan inode deleted [ 1114.089156][T23936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.111050][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 1114.136538][T23936] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.761962][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.791824][T23945] loop5: detected capacity change from 0 to 512 [ 1114.865927][T23945] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1114.879466][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.908755][T23945] EXT4-fs (loop5): 1 truncate cleaned up [ 1114.972303][T23945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.791150][T23956] loop2: detected capacity change from 0 to 512 [ 1115.922269][T23956] EXT4-fs (loop2): 1 orphan inode deleted [ 1115.947211][T23956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.030249][T23956] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.211933][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.223196][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.331750][T23968] loop2: detected capacity change from 0 to 512 [ 1117.340485][T23968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1117.355571][T23968] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1117.362370][T23968] __quota_error: 5 callbacks suppressed [ 1117.362471][T23968] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 1117.377451][T23968] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1117.387016][T23968] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5832: Failed to acquire dquot type 1 [ 1117.412376][T23968] EXT4-fs (loop2): 1 truncate cleaned up [ 1117.429469][T23968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1118.120935][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.174055][T23985] loop4: detected capacity change from 0 to 256 [ 1118.478461][T23991] loop5: detected capacity change from 0 to 512 [ 1118.508113][T23991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1118.532744][T23991] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1118.541407][T23991] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5838: bg 0: block 248: padding at end of block bitmap is not set [ 1118.556641][T23991] Quota error (device loop5): write_blk: dquota write failed [ 1118.564160][T23991] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1118.574176][T23991] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5838: Failed to acquire dquot type 1 [ 1118.588543][T23991] EXT4-fs (loop5): 1 truncate cleaned up [ 1118.596362][T23991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1118.739492][T23985] FAT-fs (loop4): codepage cp857 not found [ 1118.773689][T23995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1119.581527][T24000] loop4: detected capacity change from 0 to 512 [ 1119.622013][T24000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1119.682391][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5840'. [ 1119.692319][T24003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5840'. [ 1120.091721][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.105924][T24000] EXT4-fs (loop4): 1 truncate cleaned up [ 1120.120895][T24000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.291010][T24010] loop3: detected capacity change from 0 to 256 [ 1120.370102][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.510290][T24010] vfat: Bad value for 'shortname' [ 1121.251296][T24023] loop3: detected capacity change from 0 to 128 [ 1121.810324][T12194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.856644][T24029] loop5: detected capacity change from 0 to 4096 [ 1121.930442][T24029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.010709][T24033] loop4: detected capacity change from 0 to 256 [ 1122.250022][T24042] loop3: detected capacity change from 0 to 512 [ 1122.296653][T24042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1122.349107][T24044] netlink: 'syz.4.5850': attribute type 4 has an invalid length. [ 1122.384083][T24042] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1122.393807][T24042] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5851: bg 0: block 248: padding at end of block bitmap is not set [ 1122.408783][T24042] Quota error (device loop3): write_blk: dquota write failed [ 1122.416265][T24042] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1122.426325][T24042] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5851: Failed to acquire dquot type 1 [ 1122.445572][T24042] EXT4-fs (loop3): 1 truncate cleaned up [ 1122.452865][T24042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1123.988392][T24046] loop4: detected capacity change from 0 to 128 [ 1124.096628][ T29] audit: type=1400 audit(1745566506.425:2626): avc: denied { read } for pid=24049 comm="syz.6.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1124.199681][ T29] audit: type=1400 audit(1745566506.475:2627): avc: denied { bind } for pid=24049 comm="syz.6.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1124.219080][ T29] audit: type=1400 audit(1745566506.475:2628): avc: denied { write } for pid=24049 comm="syz.6.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1124.411805][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.486721][T24060] loop6: detected capacity change from 0 to 128 [ 1124.493491][T24060] msdos: Unknown parameter '00000000000000000000' [ 1124.501442][T24060] netlink: 'syz.6.5855': attribute type 4 has an invalid length. [ 1124.657521][T24062] loop3: detected capacity change from 0 to 512 [ 1124.748467][T24062] EXT4-fs (loop3): 1 orphan inode deleted [ 1124.769320][ T1845] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1124.779186][ T1845] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 1124.798625][T24062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.858099][T24062] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.063746][T24085] loop2: detected capacity change from 0 to 2048 [ 1126.224142][T24085] loop2: p1 < > p2 p3 < p5 > p4 [ 1126.229133][T24085] loop2: partition table partially beyond EOD, truncated [ 1126.241543][T24068] chnl_net:caif_netlink_parms(): no params data found [ 1126.269365][T24085] loop2: p1 start 4278190080 is beyond EOD, truncated [ 1126.276212][T24085] loop2: p2 start 16908800 is beyond EOD, truncated [ 1126.292160][T24085] loop2: p4 start 11326 is beyond EOD, truncated [ 1126.298554][T24085] loop2: p5 start 16908800 is beyond EOD, truncated [ 1126.355913][T24068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.363068][T24068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.391023][T24068] bridge_slave_0: entered allmulticast mode [ 1126.406374][T24068] bridge_slave_0: entered promiscuous mode [ 1126.413563][T24068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.420720][T24068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.428425][T24068] bridge_slave_1: entered allmulticast mode [ 1126.435455][T24068] bridge_slave_1: entered promiscuous mode [ 1126.471022][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1126.511183][ T1845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.543044][T24068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.621358][ T1845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.652719][T24097] loop6: detected capacity change from 0 to 2048 [ 1126.665138][T24068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.704112][T24097] loop6: p1 < > p2 p3 < p5 > p4 [ 1126.709155][T24097] loop6: partition table partially beyond EOD, truncated [ 1126.716322][T24097] loop6: p1 start 4278190080 is beyond EOD, truncated [ 1126.723216][T24097] loop6: p2 start 16908800 is beyond EOD, truncated [ 1126.731505][T24068] team0: Port device team_slave_0 added [ 1126.739778][T24097] loop6: p4 start 11326 is beyond EOD, truncated [ 1126.746145][T24097] loop6: p5 start 16908800 is beyond EOD, truncated [ 1126.755054][ T1845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.780093][T24068] team0: Port device team_slave_1 added [ 1126.833752][ T1845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.867417][T24068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.874498][T24068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.900556][T24068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.929946][T24068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.936933][T24068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.962990][T24068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.975524][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1127.019967][T24104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1127.195426][ T1845] team0: Port device geneve1 removed [ 1127.381753][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.218156][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1128.268433][T24108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1128.352962][T24109] loop6: detected capacity change from 0 to 4096 [ 1128.405745][T24109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.601331][ T1845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.621309][ T1845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.639797][ T1845] bond0 (unregistering): Released all slaves [ 1128.655546][T24068] hsr_slave_0: entered promiscuous mode [ 1128.679044][T24068] hsr_slave_1: entered promiscuous mode [ 1128.703744][T24068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.724646][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.750670][T24068] Cannot create hsr debugfs directory [ 1128.834086][ T1845] hsr_slave_0: left promiscuous mode [ 1128.892623][ T1845] hsr_slave_1: left promiscuous mode [ 1128.947361][ T1845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.954972][ T1845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.019556][ T1845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.027034][ T1845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.099537][ T1845] veth1_macvtap: left promiscuous mode [ 1129.111557][ T1845] veth0_macvtap: left promiscuous mode [ 1129.127418][ T1845] veth1_vlan: left promiscuous mode [ 1129.284985][ T1845] team0 (unregistering): Port device team_slave_1 removed [ 1129.676827][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.789530][ T1845] team0 (unregistering): Port device team_slave_0 removed [ 1129.911895][T24152] loop5: detected capacity change from 0 to 512 [ 1129.920463][T24153] warn_alloc: 3 callbacks suppressed [ 1129.920479][T24153] syz.6.5872: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1129.941117][T24153] CPU: 0 UID: 0 PID: 24153 Comm: syz.6.5872 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 1129.941169][T24153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1129.941210][T24153] Call Trace: [ 1129.941216][T24153] [ 1129.941223][T24153] __dump_stack+0x1d/0x30 [ 1129.941248][T24153] dump_stack_lvl+0xe8/0x140 [ 1129.941273][T24153] dump_stack+0x15/0x1b [ 1129.941293][T24153] warn_alloc+0x12b/0x1a0 [ 1129.941385][T24153] ? schedule+0x5f/0xd0 [ 1129.941416][T24153] ? futex_unqueue+0xb9/0xf0 [ 1129.941475][T24153] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 1129.941513][T24153] ? __pfx_futex_wake_mark+0x10/0x10 [ 1129.941538][T24153] ? __rcu_read_unlock+0x4f/0x70 [ 1129.941633][T24153] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1129.941664][T24153] ? should_fail_ex+0x30/0x280 [ 1129.941747][T24153] ? xskq_create+0x36/0xe0 [ 1129.941771][T24153] ? should_failslab+0x8c/0xb0 [ 1129.941798][T24153] vmalloc_user_noprof+0x59/0x70 [ 1129.941817][T24153] ? xskq_create+0x80/0xe0 [ 1129.941899][T24153] xskq_create+0x80/0xe0 [ 1129.941923][T24153] xsk_init_queue+0x95/0xf0 [ 1129.942012][T24153] xsk_setsockopt+0x369/0x510 [ 1129.942034][T24153] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1129.942057][T24153] __sys_setsockopt+0x181/0x200 [ 1129.942110][T24153] ? fpregs_restore_userregs+0xbb/0x190 [ 1129.942139][T24153] __x64_sys_setsockopt+0x64/0x80 [ 1129.942282][T24153] x64_sys_call+0x2bd5/0x2fb0 [ 1129.942330][T24153] do_syscall_64+0xd0/0x1a0 [ 1129.942360][T24153] ? clear_bhb_loop+0x25/0x80 [ 1129.942382][T24153] ? clear_bhb_loop+0x25/0x80 [ 1129.942403][T24153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.942440][T24153] RIP: 0033:0x7f896bc7e969 [ 1129.942509][T24153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.942529][T24153] RSP: 002b:00007f896a2a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1129.942548][T24153] RAX: ffffffffffffffda RBX: 00007f896bea6160 RCX: 00007f896bc7e969 [ 1129.942561][T24153] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1129.942634][T24153] RBP: 00007f896bd00ab1 R08: 0000000000000004 R09: 0000000000000000 [ 1129.942646][T24153] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.942659][T24153] R13: 0000000000000000 R14: 00007f896bea6160 R15: 00007ffc5da68978 [ 1129.942677][T24153] [ 1129.942687][T24153] Mem-Info: [ 1130.180252][T24153] active_anon:68992 inactive_anon:0 isolated_anon:0 [ 1130.180252][T24153] active_file:24582 inactive_file:2468 isolated_file:0 [ 1130.180252][T24153] unevictable:0 dirty:214 writeback:0 [ 1130.180252][T24153] slab_reclaimable:3275 slab_unreclaimable:15945 [ 1130.180252][T24153] mapped:35242 shmem:46807 pagetables:1238 [ 1130.180252][T24153] sec_pagetables:0 bounce:0 [ 1130.180252][T24153] kernel_misc_reclaimable:0 [ 1130.180252][T24153] free:1814326 free_pcp:10805 free_cma:0 [ 1130.225444][T24153] Node 0 active_anon:275968kB inactive_anon:0kB active_file:98328kB inactive_file:9872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140968kB dirty:856kB writeback:0kB shmem:187228kB writeback_tmp:0kB kernel_stack:3328kB pagetables:4952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1130.254669][T24153] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.281614][T24153] lowmem_reserve[]: 0 2884 7863 7863 [ 1130.287066][T24153] Node 0 DMA32 free:2950096kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953628kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 1130.315693][T24153] lowmem_reserve[]: 0 0 4978 4978 [ 1130.320795][T24153] Node 0 Normal free:4291848kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:275968kB inactive_anon:0kB active_file:98328kB inactive_file:9872kB unevictable:0kB writepending:856kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:39664kB local_pcp:26236kB free_cma:0kB [ 1130.351035][T24153] lowmem_reserve[]: 0 0 0 0 [ 1130.355660][T24153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1130.368486][T24153] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950096kB [ 1130.384597][T24153] Node 0 Normal: 1214*4kB (UM) 1179*8kB (UME) 2703*16kB (UME) 1484*32kB (UME) 862*64kB (UM) 209*128kB (UM) 147*256kB (UM) 66*512kB (UME) 23*1024kB (UM) 4*2048kB (UME) 977*4096kB (M) = 4291904kB [ 1130.403999][T24153] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1130.413333][T24153] 73857 total pagecache pages [ 1130.418013][T24153] 0 pages in swap cache [ 1130.422198][T24153] Free swap = 124996kB [ 1130.426410][T24153] Total swap = 124996kB [ 1130.430589][T24153] 2097051 pages RAM [ 1130.434402][T24153] 0 pages HighMem/MovableOnly [ 1130.439081][T24153] 80243 pages reserved [ 1130.553592][T24152] EXT4-fs (loop5): 1 orphan inode deleted [ 1130.572590][T24158] loop3: detected capacity change from 0 to 128 [ 1130.581108][T17503] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1130.591044][T17503] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 1130.612075][T24152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.630966][T24158] EXT4-fs: test_dummy_encryption option not supported [ 1130.876189][T24152] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.889134][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 1130.943380][T24167] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1131.784702][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.790703][T24068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1131.816999][T24068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1131.841800][T24068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1131.868784][T24068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1132.115927][T24068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.132101][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1132.149804][T24068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.173608][T24178] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1132.179569][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.190298][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.198112][T24202] loop5: detected capacity change from 0 to 4096 [ 1132.222826][T24068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1132.233340][T24068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1132.333483][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.340762][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.452059][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1132.504378][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1132.639181][T24202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.740900][T24219] loop3: detected capacity change from 0 to 512 [ 1132.784369][T24219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.797047][T24219] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.845954][T24068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.142020][T24068] veth0_vlan: entered promiscuous mode [ 1133.158642][T24068] veth1_vlan: entered promiscuous mode [ 1133.187472][T24068] veth0_macvtap: entered promiscuous mode [ 1133.210451][T24068] veth1_macvtap: entered promiscuous mode [ 1133.235193][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.245897][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.255733][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.266247][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.276101][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.286571][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.296404][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.306844][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.321132][T24264] loop2: detected capacity change from 0 to 512 [ 1133.328704][T24264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1133.338608][T24264] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1133.367034][T24264] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 1133.376610][T24264] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1133.386161][T24264] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5881: Failed to acquire dquot type 1 [ 1133.429358][T24068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.438946][T24264] EXT4-fs (loop2): 1 truncate cleaned up [ 1133.473059][T24264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1133.489736][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.500374][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.510250][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.520755][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.530630][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.541124][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.551016][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.557107][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.561531][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.664126][T24068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.680402][T24068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.684509][T24273] loop3: detected capacity change from 0 to 256 [ 1133.689246][T24068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.689287][T24068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.712990][T24068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.733347][T24273] FAT-fs (loop3): codepage cp857 not found [ 1133.861982][T24278] loop4: detected capacity change from 0 to 512 [ 1133.907682][T24268] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5882'. [ 1133.932629][T24278] EXT4-fs (loop4): 1 orphan inode deleted [ 1133.945683][T24278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.960346][T21379] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1133.970188][T21379] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 1133.989527][T24278] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.127302][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.601282][T24286] loop3: detected capacity change from 0 to 512 [ 1134.707289][T24286] EXT4-fs (loop3): 1 orphan inode deleted [ 1134.713549][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.726991][T11557] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1134.730172][T24286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.736899][T11557] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 1134.819874][T24286] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.177535][T24300] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5888'. [ 1136.026389][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.269814][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5890'. [ 1136.278910][T24309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1136.623465][T24313] loop4: detected capacity change from 0 to 512 [ 1136.711278][T24313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1136.729361][T24313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1136.736841][T24313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5891: bg 0: block 248: padding at end of block bitmap is not set [ 1136.753170][T24313] Quota error (device loop4): write_blk: dquota write failed [ 1136.760709][T24313] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1136.770663][T24313] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5891: Failed to acquire dquot type 1 [ 1136.784715][T24313] EXT4-fs (loop4): 1 truncate cleaned up [ 1136.791426][T24313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1137.693428][T24326] loop2: detected capacity change from 0 to 128 [ 1137.700736][T24327] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5896'. [ 1138.041869][T24337] loop5: detected capacity change from 0 to 512 [ 1138.146447][T24337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.235987][T24337] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.236745][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.294356][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.321835][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.372093][T24346] loop3: detected capacity change from 0 to 512 [ 1138.379441][T24346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1138.389032][T24346] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1138.396574][T24346] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1138.406076][T24346] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1138.415520][T24346] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5898: Failed to acquire dquot type 1 [ 1138.428661][T24346] EXT4-fs (loop3): 1 truncate cleaned up [ 1138.434898][T24346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1138.469132][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5901'. [ 1138.517026][T24348] loop5: detected capacity change from 0 to 256 [ 1138.599076][T24348] FAT-fs (loop5): codepage cp857 not found [ 1138.715946][T24360] loop4: detected capacity change from 0 to 512 [ 1138.725106][T24360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1138.746947][T24360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1138.756782][T24360] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 1138.766231][T24360] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1138.775648][T24360] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5904: Failed to acquire dquot type 1 [ 1138.788570][T24360] EXT4-fs (loop4): 1 truncate cleaned up [ 1138.794852][T24360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1138.926347][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5905'. [ 1138.935898][T24363] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1139.174842][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.324112][ T29] audit: type=1400 audit(1745566521.655:2629): avc: denied { write } for pid=24365 comm="syz.3.5907" name="raw6" dev="proc" ino=4026532768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1139.404096][T24371] loop5: detected capacity change from 0 to 512 [ 1139.423454][T24371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.436070][T24371] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.498895][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.642720][T24378] loop6: detected capacity change from 0 to 512 [ 1139.692307][T24378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.714341][T24378] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.728251][T24378] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5911: bg 0: block 18: invalid block bitmap [ 1139.771475][ T29] audit: type=1400 audit(1745566522.055:2630): avc: denied { create } for pid=24377 comm="syz.6.5911" name="file4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1139.842280][T24385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5910'. [ 1139.874087][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.028729][T24388] loop4: detected capacity change from 0 to 128 [ 1140.064313][T24388] EXT4-fs: test_dummy_encryption option not supported [ 1140.233886][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.244870][T24391] loop6: detected capacity change from 0 to 512 [ 1140.287786][T24391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1140.304393][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1140.313692][T24392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1140.384593][T24391] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1140.412206][T24391] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1140.421741][T24391] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1140.431208][T24391] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5913: Failed to acquire dquot type 1 [ 1141.258569][T24391] EXT4-fs (loop6): 1 truncate cleaned up [ 1141.275338][T24391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1141.716126][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.141443][T24420] loop6: detected capacity change from 0 to 256 [ 1142.150101][T24421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5923'. [ 1142.213947][T24421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1142.227606][T24420] FAT-fs (loop6): codepage cp857 not found [ 1142.377631][T24426] loop2: detected capacity change from 0 to 2048 [ 1142.410395][ T3295] loop2: p1 < > p2 p3 < p5 > p4 [ 1142.415433][ T3295] loop2: partition table partially beyond EOD, truncated [ 1142.433122][ T3295] loop2: p1 start 4278190080 is beyond EOD, truncated [ 1142.439980][ T3295] loop2: p2 start 16908800 is beyond EOD, truncated [ 1142.440927][T24403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.462766][ T3295] loop2: p4 start 11326 is beyond EOD, truncated [ 1142.469150][ T3295] loop2: p5 start 16908800 is beyond EOD, truncated [ 1142.773231][T24426] loop2: p1 < > p2 p3 < p5 > p4 [ 1142.778234][T24426] loop2: partition table partially beyond EOD, truncated [ 1142.785765][T24426] loop2: p1 start 4278190080 is beyond EOD, truncated [ 1142.792560][T24426] loop2: p2 start 16908800 is beyond EOD, truncated [ 1142.850913][T24426] loop2: p4 start 11326 is beyond EOD, truncated [ 1142.857355][T24426] loop2: p5 start 16908800 is beyond EOD, truncated [ 1142.904446][T24433] loop3: detected capacity change from 0 to 128 [ 1143.018490][ T29] audit: type=1400 audit(1745566525.275:2631): avc: denied { kexec_image_load } for pid=24436 comm="syz.6.5928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1143.066085][T24444] loop6: detected capacity change from 0 to 128 [ 1143.216671][T24444] EXT4-fs: test_dummy_encryption option not supported [ 1143.476910][T24450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5930'. [ 1143.487768][T24450] 9pnet_fd: Insufficient options for proto=fd [ 1144.195645][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5929'. [ 1144.205052][T24456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1144.360397][T24458] loop2: detected capacity change from 0 to 512 [ 1144.529253][T24465] loop6: detected capacity change from 0 to 128 [ 1144.617005][T24469] syz.3.5933: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1144.631577][T24469] CPU: 0 UID: 0 PID: 24469 Comm: syz.3.5933 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 1144.631614][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1144.631628][T24469] Call Trace: [ 1144.631635][T24469] [ 1144.631643][T24469] __dump_stack+0x1d/0x30 [ 1144.631666][T24469] dump_stack_lvl+0xe8/0x140 [ 1144.631768][T24469] dump_stack+0x15/0x1b [ 1144.631783][T24469] warn_alloc+0x12b/0x1a0 [ 1144.631896][T24469] ? schedule+0x5f/0xd0 [ 1144.631961][T24469] ? futex_unqueue+0xb9/0xf0 [ 1144.631997][T24469] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 1144.632058][T24469] ? cgroup_rstat_updated+0xa3/0x510 [ 1144.632084][T24469] ? plist_check_list+0x1cf/0x210 [ 1144.632191][T24469] ? ___slab_alloc+0x275/0x900 [ 1144.632271][T24469] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 1144.632296][T24469] ? should_fail_ex+0x30/0x280 [ 1144.632337][T24469] vmalloc_user_noprof+0x59/0x70 [ 1144.632392][T24469] ? xskq_create+0x80/0xe0 [ 1144.632417][T24469] xskq_create+0x80/0xe0 [ 1144.632448][T24469] xsk_init_queue+0x95/0xf0 [ 1144.632503][T24469] xsk_setsockopt+0x369/0x510 [ 1144.632529][T24469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1144.632558][T24469] __sys_setsockopt+0x181/0x200 [ 1144.632592][T24469] ? fpregs_restore_userregs+0xbb/0x190 [ 1144.632681][T24469] __x64_sys_setsockopt+0x64/0x80 [ 1144.632718][T24469] x64_sys_call+0x2bd5/0x2fb0 [ 1144.632739][T24469] do_syscall_64+0xd0/0x1a0 [ 1144.632762][T24469] ? clear_bhb_loop+0x25/0x80 [ 1144.632784][T24469] ? clear_bhb_loop+0x25/0x80 [ 1144.632853][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.632873][T24469] RIP: 0033:0x7fcadb07e969 [ 1144.632887][T24469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.632904][T24469] RSP: 002b:00007fcad9282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1144.632928][T24469] RAX: ffffffffffffffda RBX: 00007fcadb2a6240 RCX: 00007fcadb07e969 [ 1144.632984][T24469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1144.633000][T24469] RBP: 00007fcadb100ab1 R08: 0000000000000004 R09: 0000000000000000 [ 1144.633016][T24469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.633057][T24469] R13: 0000000000000000 R14: 00007fcadb2a6240 R15: 00007fffb48779a8 [ 1144.633076][T24469] [ 1144.633085][T24469] Mem-Info: [ 1144.867259][T24469] active_anon:91294 inactive_anon:0 isolated_anon:0 [ 1144.867259][T24469] active_file:24582 inactive_file:2481 isolated_file:0 [ 1144.867259][T24469] unevictable:0 dirty:140 writeback:2 [ 1144.867259][T24469] slab_reclaimable:3268 slab_unreclaimable:15746 [ 1144.867259][T24469] mapped:38103 shmem:69400 pagetables:1205 [ 1144.867259][T24469] sec_pagetables:0 bounce:0 [ 1144.867259][T24469] kernel_misc_reclaimable:0 [ 1144.867259][T24469] free:1795829 free_pcp:7247 free_cma:0 [ 1144.897827][T24458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.912415][T24469] Node 0 active_anon:365176kB inactive_anon:0kB active_file:98328kB inactive_file:9924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152412kB dirty:560kB writeback:8kB shmem:277600kB writeback_tmp:0kB kernel_stack:3280kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1144.953934][T24469] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1144.980801][T24469] lowmem_reserve[]: 0 2884 7863 7863 [ 1144.986187][T24469] Node 0 DMA32 free:2950096kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953628kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 1145.006690][T24458] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.014844][T24469] lowmem_reserve[]: 0 0 4978 4978 [ 1145.030398][T24469] Node 0 Normal free:4217860kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:365292kB inactive_anon:0kB active_file:98328kB inactive_file:9924kB unevictable:0kB writepending:568kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:25304kB local_pcp:15048kB free_cma:0kB [ 1145.060824][T24469] lowmem_reserve[]: 0 0 0 0 [ 1145.065378][T24469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1145.078210][T24469] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950096kB [ 1145.094347][T24469] Node 0 Normal: 223*4kB (UME) 237*8kB (UE) 96*16kB (UE) 51*32kB (UE) 757*64kB (UME) 297*128kB (UM) 179*256kB (UM) 80*512kB (UME) 26*1024kB (UM) 5*2048kB (UME) 977*4096kB (M) = 4217860kB [ 1145.108557][T24458] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5934: bg 0: block 18: invalid block bitmap [ 1145.113235][T24469] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1145.113260][T24469] 96463 total pagecache pages [ 1145.139701][T24469] 0 pages in swap cache [ 1145.143871][T24469] Free swap = 124996kB [ 1145.148035][T24469] Total swap = 124996kB [ 1145.152238][T24469] 2097051 pages RAM [ 1145.156129][T24469] 0 pages HighMem/MovableOnly [ 1145.160854][T24469] 80243 pages reserved [ 1145.215059][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.276584][T24480] loop5: detected capacity change from 0 to 512 [ 1145.369845][T24482] loop2: detected capacity change from 0 to 512 [ 1145.403622][T24482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1145.440641][T24482] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1145.447886][T24482] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5936: bg 0: block 248: padding at end of block bitmap is not set [ 1145.465085][T24482] Quota error (device loop2): write_blk: dquota write failed [ 1145.472509][T24482] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1145.482518][T24482] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5936: Failed to acquire dquot type 1 [ 1145.496297][T24482] EXT4-fs (loop2): 1 truncate cleaned up [ 1145.503298][T24482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1145.645217][T24480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.763910][T24488] loop3: detected capacity change from 0 to 512 [ 1145.801137][T24480] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.832943][T24491] loop6: detected capacity change from 0 to 256 [ 1145.856793][T24488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1145.960141][T24488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1145.992904][T24491] FAT-fs (loop6): codepage cp857 not found [ 1146.016119][T24488] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1146.025691][T24488] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1146.035120][T24488] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5938: Failed to acquire dquot type 1 [ 1146.071594][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.333602][T24488] EXT4-fs (loop3): 1 truncate cleaned up [ 1146.344816][T24488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1146.509749][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.528480][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5940'. [ 1146.542176][T24496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1146.727504][T24500] loop4: detected capacity change from 0 to 512 [ 1146.763137][T24500] EXT4-fs (loop4): 1 orphan inode deleted [ 1146.769771][T24500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.783668][T24500] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.967837][T21379] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1146.977708][T21379] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 1146.990225][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.132225][T24514] loop6: detected capacity change from 0 to 512 [ 1147.144345][T24514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1147.165869][T24514] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1147.174224][T24514] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1147.183699][T24514] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1147.193137][T24514] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5946: Failed to acquire dquot type 1 [ 1147.206792][T24514] EXT4-fs (loop6): 1 truncate cleaned up [ 1147.213404][T24514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1147.243046][T24515] loop2: detected capacity change from 0 to 4096 [ 1147.256439][T24515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.272471][T24520] loop3: detected capacity change from 0 to 512 [ 1147.290942][T24520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.303676][T24520] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.592705][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.943995][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.944376][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.974938][T24533] loop6: detected capacity change from 0 to 512 [ 1148.421240][T24533] EXT4-fs (loop6): 1 orphan inode deleted [ 1148.442928][ T51] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1148.452862][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 1148.482903][T24533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.519642][T24533] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.464477][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.650963][T24546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1149.973319][T24551] loop2: detected capacity change from 0 to 256 [ 1150.024815][T24553] loop3: detected capacity change from 0 to 512 [ 1150.241853][T24551] FAT-fs (loop2): codepage cp857 not found [ 1150.362341][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.389281][T24553] EXT4-fs (loop3): 1 orphan inode deleted [ 1150.395485][T24553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.469394][T24553] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.570694][ T51] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1150.580774][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 1150.817978][T24569] loop6: detected capacity change from 0 to 4096 [ 1150.837633][T24569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.199334][T24581] loop5: detected capacity change from 0 to 128 [ 1151.206320][T24581] msdos: Unknown parameter '00000000000000000000' [ 1151.217098][T24581] netlink: 'syz.5.5961': attribute type 4 has an invalid length. [ 1151.393274][T24585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1151.410519][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.714605][T24589] loop4: detected capacity change from 0 to 128 [ 1151.761737][T24589] EXT4-fs: test_dummy_encryption option not supported [ 1152.299262][T24593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5965'. [ 1152.308394][T24593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1153.066861][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5963'. [ 1153.076192][T24594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5963'. [ 1153.306397][T24599] loop4: detected capacity change from 0 to 512 [ 1153.380569][T24599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.431289][T24599] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.454858][T24599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5967: bg 0: block 18: invalid block bitmap [ 1153.491088][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.504157][T24608] loop6: detected capacity change from 0 to 512 [ 1153.512019][T24608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1153.521338][T24608] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1153.528112][T24608] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1153.537622][T24608] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1153.547065][T24608] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5969: Failed to acquire dquot type 1 [ 1153.570604][T24608] EXT4-fs (loop6): 1 truncate cleaned up [ 1153.577477][T24608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1153.721308][T24615] loop4: detected capacity change from 0 to 128 [ 1153.788647][T11852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.830595][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5975'. [ 1153.996072][T24625] loop2: detected capacity change from 0 to 512 [ 1154.101314][T24625] EXT4-fs (loop2): 1 orphan inode deleted [ 1154.123468][ T37] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1154.133330][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 1154.147596][T24625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.199816][T24625] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.290467][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.998856][T12722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.282145][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5978'. [ 1155.292783][T24647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5978'. [ 1155.626290][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5979'. [ 1155.635598][T24649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5979'. [ 1156.147092][T24653] loop6: detected capacity change from 0 to 256 [ 1156.643276][T24655] loop5: detected capacity change from 0 to 512 [ 1156.934156][T24655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.988689][T24655] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.058046][T24655] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5982: bg 0: block 18: invalid block bitmap [ 1157.067873][T24671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5986'. [ 1157.126514][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.358900][T24676] loop4: detected capacity change from 0 to 512 [ 1157.421839][T24676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.439318][T24676] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.458522][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5990'. [ 1157.491926][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.522260][T24686] loop5: detected capacity change from 0 to 256 [ 1157.528929][T24686] vfat: Bad value for 'shortname' [ 1157.584752][T24662] chnl_net:caif_netlink_parms(): no params data found [ 1157.620984][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.648261][T24694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5991'. [ 1157.652629][T24692] loop6: detected capacity change from 0 to 512 [ 1157.811005][ T29] audit: type=1400 audit(1745566540.145:2632): avc: denied { bind } for pid=24700 comm="syz.2.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1157.966560][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.980077][T24692] EXT4-fs (loop6): 1 orphan inode deleted [ 1157.986351][T24692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.013445][T24692] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.037642][T11557] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1158.047560][T11557] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 1158.324648][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.388888][T24662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.396313][T24662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.459432][T24662] bridge_slave_0: entered allmulticast mode [ 1158.466229][T24662] bridge_slave_0: entered promiscuous mode [ 1158.473205][T24662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.480357][T24662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.487733][T24662] bridge_slave_1: entered allmulticast mode [ 1158.494605][T24662] bridge_slave_1: entered promiscuous mode [ 1158.541173][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.575308][T24662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.607565][T24662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.757852][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 1158.765117][T24662] team0: Port device team_slave_0 added [ 1158.911445][T24723] loop4: detected capacity change from 0 to 128 [ 1158.945083][T24723] EXT4-fs: test_dummy_encryption option not supported [ 1159.656351][T24727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6000'. [ 1159.786638][T24727] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1160.028225][T24662] team0: Port device team_slave_1 added [ 1160.071352][T24662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.078338][T24662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.104448][T24662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.140099][T24737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1160.548913][ T37] team0: Port device geneve1 removed [ 1160.549372][T22207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.040647][T24748] __nla_validate_parse: 1 callbacks suppressed [ 1161.040677][T24748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6005'. [ 1161.061793][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.071697][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.081354][ T37] bond0 (unregistering): Released all slaves [ 1161.089955][T24662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.096926][T24662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.097105][T24749] loop4: detected capacity change from 0 to 256 [ 1161.122915][T24662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.141327][T24749] vfat: Bad value for 'shortname' [ 1161.296505][T24662] hsr_slave_0: entered promiscuous mode [ 1161.303172][T24662] hsr_slave_1: entered promiscuous mode [ 1161.318080][ T37] hsr_slave_0: left promiscuous mode [ 1161.324090][ T37] hsr_slave_1: left promiscuous mode [ 1161.330473][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.337922][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.346579][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.354116][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.366466][ T37] veth1_macvtap: left promiscuous mode [ 1161.374673][ T37] veth0_macvtap: left promiscuous mode [ 1161.381697][ T37] veth1_vlan: left promiscuous mode [ 1161.538141][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1161.572563][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1161.796224][ T29] audit: type=1326 audit(1745566544.125:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1161.819947][ T29] audit: type=1326 audit(1745566544.125:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1161.878842][ T29] audit: type=1326 audit(1745566544.175:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1161.902489][ T29] audit: type=1326 audit(1745566544.175:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1161.926152][ T29] audit: type=1326 audit(1745566544.175:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1161.949781][ T29] audit: type=1326 audit(1745566544.175:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1161.953231][T24770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1161.973464][ T29] audit: type=1326 audit(1745566544.175:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1162.005103][ T29] audit: type=1326 audit(1745566544.175:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1162.028651][ T29] audit: type=1326 audit(1745566544.175:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1162.052208][ T29] audit: type=1326 audit(1745566544.175:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.5.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f092269e969 code=0x7ffc0000 [ 1162.165817][T24803] loop6: detected capacity change from 0 to 512 [ 1162.173182][T24803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1162.208085][T24804] loop4: detected capacity change from 0 to 128 [ 1162.249496][T24803] EXT4-fs (loop6): 1 truncate cleaned up [ 1162.262494][T24804] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1162.286286][T24803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.325275][T24804] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.347921][T24662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1162.358676][T24803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.374119][T24662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1162.399735][T24068] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.427077][T24662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1162.439105][T24828] futex_wake_op: syz.2.6021 tries to shift op by -1; fix this program [ 1162.443312][T24662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1162.490542][T24832] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6022'. [ 1162.499608][T24832] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6022'. [ 1162.646363][T24662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.660904][T24662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.681124][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.688288][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.714952][T24662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1162.725448][T24662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1162.746325][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.753520][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.188441][T24856] loop4: detected capacity change from 0 to 512 [ 1163.195139][T24856] EXT4-fs: test_dummy_encryption option not supported [ 1163.791978][T24662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.850354][T24869] IPv4: Oversized IP packet from 127.202.26.0 [ 1164.686150][T24873] loop5: detected capacity change from 0 to 512 [ 1164.704896][T24873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1164.770868][T24873] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1164.778045][T24873] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6026: bg 0: block 248: padding at end of block bitmap is not set [ 1164.794193][T24873] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6026: Failed to acquire dquot type 1 [ 1164.843833][T24873] EXT4-fs (loop5): 1 truncate cleaned up [ 1164.934168][T24873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1165.185596][T24662] veth0_vlan: entered promiscuous mode [ 1165.193453][T24662] veth1_vlan: entered promiscuous mode [ 1165.305053][T24895] loop4: detected capacity change from 0 to 512 [ 1165.333472][T24662] veth0_macvtap: entered promiscuous mode [ 1165.370052][T24662] veth1_macvtap: entered promiscuous mode [ 1165.421318][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.431888][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.441725][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.452235][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.462146][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.472657][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.482488][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.493013][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.532409][T24905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.545139][T24905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.647818][T24662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.680983][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.691602][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.701441][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.711966][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.721823][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.732391][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.742257][T24662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.752797][T24662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.931263][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.940383][T24895] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1165.943869][T24662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.958990][T24895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 1165.964143][T24662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.976006][T24662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.984802][T24662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.993606][T24662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.010720][T24895] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.6033: corrupted in-inode xattr: e_value size too large [ 1166.048039][T24895] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6033: couldn't read orphan inode 15 (err -117) [ 1166.068032][T24895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.914356][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.120730][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1167.120749][ T29] audit: type=1400 audit(1745566549.455:2666): avc: denied { write } for pid=24941 comm="syz.4.6039" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1167.150284][ T29] audit: type=1400 audit(1745566549.455:2667): avc: denied { open } for pid=24941 comm="syz.4.6039" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1167.353916][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1167.365144][T24943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1168.131376][ T29] audit: type=1326 audit(1745566550.415:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24951 comm="syz.3.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3652ee969 code=0x7ffc0000 [ 1168.155197][ T29] audit: type=1326 audit(1745566550.415:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24951 comm="syz.3.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3652ee969 code=0x7ffc0000 [ 1168.178752][ T29] audit: type=1326 audit(1745566550.415:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24951 comm="syz.3.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fc3652ee969 code=0x7ffc0000 [ 1168.202502][ T29] audit: type=1326 audit(1745566550.415:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24951 comm="syz.3.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3652ee969 code=0x7ffc0000 [ 1168.373054][T24968] loop5: detected capacity change from 0 to 1024 [ 1168.527559][T24968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.603588][T24968] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.688210][T24968] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1168.761820][T24950] chnl_net:caif_netlink_parms(): no params data found [ 1168.802564][T24968] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 1168.814947][T24968] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1168.814947][T24968] [ 1168.824696][T24968] EXT4-fs (loop5): Total free blocks count 0 [ 1168.830789][T24968] EXT4-fs (loop5): Free/Dirty block details [ 1168.836731][T24968] EXT4-fs (loop5): free_blocks=4293918720 [ 1168.842580][T24968] EXT4-fs (loop5): dirty_blocks=16 [ 1168.847770][T24968] EXT4-fs (loop5): Block reservation details [ 1168.853871][T24968] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1169.023775][ T29] audit: type=1326 audit(1745566551.015:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.6.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896bc7e969 code=0x7ffc0000 [ 1169.047557][ T29] audit: type=1326 audit(1745566551.015:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.6.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896bc7e969 code=0x7ffc0000 [ 1169.071306][ T29] audit: type=1326 audit(1745566551.035:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.6.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f896bc7e969 code=0x7ffc0000 [ 1169.095021][ T29] audit: type=1326 audit(1745566551.035:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.6.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896bc7e969 code=0x7ffc0000 [ 1169.108318][T24991] loop6: detected capacity change from 0 to 2048 [ 1169.125329][T24991] ext4: Unknown parameter 'noacl' [ 1169.185338][T15497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.227026][T24997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.246840][T24997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.267915][T24950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.275156][T24950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.283909][T24950] bridge_slave_0: entered allmulticast mode [ 1169.290570][T24950] bridge_slave_0: entered promiscuous mode [ 1169.297596][T24950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.304909][T24950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.313579][T24950] bridge_slave_1: entered allmulticast mode [ 1169.320493][T24950] bridge_slave_1: entered promiscuous mode [ 1169.343999][T24950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.356824][T24950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.398585][T24950] team0: Port device team_slave_0 added [ 1169.405826][T24950] team0: Port device team_slave_1 added [ 1169.426561][T24950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.433663][T24950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.459667][T24950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.471183][T24950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.478229][T24950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.504173][T24950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.531586][T24950] hsr_slave_0: entered promiscuous mode [ 1169.537905][T24950] hsr_slave_1: entered promiscuous mode [ 1169.545006][T24950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.552692][T24950] Cannot create hsr debugfs directory [ 1169.566656][ T330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.623611][ T330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.672670][ T330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.721840][ T330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.873329][T25019] usb usb1: check_ctrlrecip: process 25019 (syz.6.6054) requesting ep 01 but needs 81 [ 1169.883521][T25019] vhci_hcd: default hub control req: 0205 v0006 i0001 l0 [ 1169.905339][T25022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.915800][T25022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.943790][ T330] team0: Port device geneve1 removed [ 1170.025030][T25032] loop4: detected capacity change from 0 to 512 [ 1170.041945][T25032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.055800][T25032] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.078615][T24068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.103089][T25038] loop4: detected capacity change from 0 to 1024 [ 1170.109959][T25038] EXT4-fs: Ignoring removed orlov option [ 1170.118680][T25038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.425114][T25040] ================================================================== [ 1170.433241][T25040] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 1170.442910][T25040] [ 1170.445243][T25040] write to 0xffff8881069e5c58 of 4 bytes by task 25038 on cpu 1: [ 1170.452982][T25040] inode_cgwb_move_to_attached+0x9b/0x310 [ 1170.458728][T25040] writeback_single_inode+0x2af/0x3e0 [ 1170.464140][T25040] sync_inode_metadata+0x5b/0x90 [ 1170.469130][T25040] generic_buffers_fsync_noflush+0xd9/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1170.475077][T25040] ext4_sync_file+0x1ab/0x690 [ 1170.479788][T25040] vfs_fsync_range+0x10a/0x130 [ 1170.484580][T25040] ext4_buffered_write_iter+0x34f/0x3c0 [ 1170.490147][T25040] ext4_file_write_iter+0x383/0xf00 [ 1170.495359][T25040] iter_file_splice_write+0x5ef/0x970 [ 1170.500752][T25040] direct_splice_actor+0x153/0x2a0 [ 1170.505971][T25040] splice_direct_to_actor+0x30f/0x680 [ 1170.511361][T25040] do_splice_direct+0xda/0x150 [ 1170.516139][T25040] do_sendfile+0x380/0x640 [ 1170.520570][T25040] __x64_sys_sendfile64+0x105/0x150 [ 1170.525779][T25040] x64_sys_call+0xb39/0x2fb0 [ 1170.530390][T25040] do_syscall_64+0xd0/0x1a0 [ 1170.534906][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.540808][T25040] [ 1170.543157][T25040] read to 0xffff8881069e5c58 of 4 bytes by task 25040 on cpu 0: [ 1170.550788][T25040] generic_buffers_fsync_noflush+0x80/0x120 [ 1170.556700][T25040] ext4_sync_file+0x1ab/0x690 [ 1170.561390][T25040] vfs_fsync_range+0x10a/0x130 [ 1170.566162][T25040] ext4_buffered_write_iter+0x34f/0x3c0 [ 1170.571718][T25040] ext4_file_write_iter+0x383/0xf00 [ 1170.576926][T25040] iter_file_splice_write+0x5ef/0x970 [ 1170.582328][T25040] direct_splice_actor+0x153/0x2a0 [ 1170.587460][T25040] splice_direct_to_actor+0x30f/0x680 [ 1170.592869][T25040] do_splice_direct+0xda/0x150 [ 1170.597650][T25040] do_sendfile+0x380/0x640 [ 1170.602081][T25040] __x64_sys_sendfile64+0x105/0x150 [ 1170.607298][T25040] x64_sys_call+0xb39/0x2fb0 [ 1170.611896][T25040] do_syscall_64+0xd0/0x1a0 [ 1170.616410][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.622395][T25040] [ 1170.624717][T25040] value changed: 0x00000002 -> 0x00000020 [ 1170.630432][T25040] [ 1170.632754][T25040] Reported by Kernel Concurrency Sanitizer on: [ 1170.638907][T25040] CPU: 0 UID: 0 PID: 25040 Comm: syz.4.6058 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 1170.651419][T25040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1170.661482][T25040] ================================================================== [ 1170.931451][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.943053][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.952973][ T330] bond0 (unregistering): Released all slaves [ 1171.042401][ T330] hsr_slave_0: left promiscuous mode [ 1171.059758][ T330] hsr_slave_1: left promiscuous mode [ 1171.065445][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.072986][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.081445][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.088855][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.098787][ T330] veth1_macvtap: left promiscuous mode [ 1171.104462][ T330] veth0_macvtap: left promiscuous mode [ 1171.110268][ T330] veth1_vlan: left promiscuous mode [ 1171.176696][ T330] team0 (unregistering): Port device team_slave_1 removed [ 1171.187157][ T330] team0 (unregistering): Port device team_slave_0 removed [ 1171.485013][T25041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.643553][ T330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.692033][ T330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.741730][ T330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.792839][ T330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.869027][ T330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.902550][ T330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.942261][ T330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.002244][ T330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.083733][ T330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.125791][ T330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.163276][ T330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.231920][ T330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.310621][ T330] bridge_slave_1: left allmulticast mode [ 1172.316336][ T330] bridge_slave_1: left promiscuous mode [ 1172.322119][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.330034][ T330] bridge_slave_0: left allmulticast mode [ 1172.335685][ T330] bridge_slave_0: left promiscuous mode [ 1172.341602][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.349726][ T330] bridge_slave_1: left allmulticast mode [ 1172.355412][ T330] bridge_slave_1: left promiscuous mode [ 1172.361130][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.368782][ T330] bridge_slave_0: left allmulticast mode [ 1172.374512][ T330] bridge_slave_0: left promiscuous mode [ 1172.380223][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.390397][ T330] bridge_slave_1: left allmulticast mode [ 1172.396036][ T330] bridge_slave_1: left promiscuous mode [ 1172.401828][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.409666][ T330] bridge_slave_0: left allmulticast mode [ 1172.415385][ T330] bridge_slave_0: left promiscuous mode [ 1172.421134][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.741124][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.750549][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.760168][ T330] bond0 (unregistering): Released all slaves [ 1173.769164][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.778962][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.788431][ T330] bond0 (unregistering): Released all slaves [ 1173.797428][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.807058][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.816542][ T330] bond0 (unregistering): Released all slaves [ 1173.825878][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.835492][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.845518][ T330] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1173.854060][ T330] batadv0: left promiscuous mode [ 1173.860533][ T330] bond0 (unregistering): Released all slaves [ 1173.913379][ T330] hsr_slave_0: left promiscuous mode [ 1173.920684][ T330] hsr_slave_1: left promiscuous mode [ 1173.926389][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.934296][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.945532][ T330] hsr_slave_0: left promiscuous mode [ 1173.951491][ T330] hsr_slave_1: left promiscuous mode [ 1173.957197][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.964816][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.973615][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.981101][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.990422][ T330] hsr_slave_0: left promiscuous mode [ 1173.995991][ T330] hsr_slave_1: left promiscuous mode [ 1174.001680][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.009179][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.016857][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.024418][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.033735][ T330] hsr_slave_0: left promiscuous mode [ 1174.039496][ T330] hsr_slave_1: left promiscuous mode [ 1174.045082][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.052589][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.060488][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.067940][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.082590][ T330] veth1_macvtap: left promiscuous mode [ 1174.088147][ T330] veth0_macvtap: left promiscuous mode [ 1174.093874][ T330] veth1_vlan: left promiscuous mode [ 1174.099168][ T330] veth0_vlan: left promiscuous mode [ 1174.105100][ T330] veth1_macvtap: left promiscuous mode [ 1174.110629][ T330] veth0_macvtap: left promiscuous mode [ 1174.116108][ T330] veth1_vlan: left promiscuous mode [ 1174.121423][ T330] veth0_vlan: left promiscuous mode [ 1174.127236][ T330] veth1_macvtap: left promiscuous mode [ 1174.133067][ T330] veth0_macvtap: left promiscuous mode [ 1174.138639][ T330] veth1_vlan: left promiscuous mode [ 1174.253748][ T330] team0 (unregistering): Port device team_slave_1 removed [ 1174.264005][ T330] team0 (unregistering): Port device team_slave_0 removed [ 1174.317043][ T330] team0 (unregistering): Port device team_slave_1 removed [ 1174.326814][ T330] team0 (unregistering): Port device team_slave_0 removed [ 1174.382421][ T330] team0 (unregistering): Port device team_slave_1 removed [ 1174.391730][ T330] team0 (unregistering): Port device team_slave_0 removed [ 1174.445898][ T330] team0 (unregistering): Port device team_slave_1 removed [ 1174.455065][ T330] team0 (unregistering): Port device team_slave_0 removed [ 1175.194438][ T330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.242342][ T330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.281877][ T330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.332061][ T330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.412307][ T330] bridge_slave_1: left allmulticast mode [ 1175.418121][ T330] bridge_slave_1: left promiscuous mode [ 1175.423889][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.433148][ T330] bridge_slave_0: left allmulticast mode [ 1175.438825][ T330] bridge_slave_0: left promiscuous mode [ 1175.444705][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.561599][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.571577][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.581225][ T330] bond0 (unregistering): Released all slaves [ 1175.622522][ T330] hsr_slave_0: left promiscuous mode [ 1175.628206][ T330] hsr_slave_1: left promiscuous mode [ 1175.634368][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.641882][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.649733][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.657144][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.668017][ T330] veth1_macvtap: left promiscuous mode [ 1175.673687][ T330] veth0_macvtap: left promiscuous mode [ 1175.679731][ T330] veth1_vlan: left promiscuous mode [ 1175.684985][ T330] veth0_vlan: left promiscuous mode [ 1175.748265][ T330] team0 (unregistering): Port device team_slave_1 removed [ 1175.757829][ T330] team0 (unregistering): Port device team_slave_0 removed