last executing test programs: 6m31.824253983s ago: executing program 2 (id=2801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) setresgid(0x0, 0x0, 0xee00) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119800000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_GETDRIVER(r5, 0x8008550e, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100000000000000eda0f065160d0da60000060a010400000000000000000a0000050900020073797a320000010028000480240001800b0001006e756d67656e000014000280080002400000000708000140000000000900010073797a3100000000140000001100010000000000000000000e00000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb0, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x100, 0x40, 0x1, {0x22, 0xfcb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6, 0x80}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xf7, 0xfe, 0x3, 0x20, 0x19}, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0010b1c5000000000000"], 0x1, [{0x95, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}]}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chroot(&(0x7f00000003c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 6m31.187417115s ago: executing program 2 (id=2807): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_validatetrans(r0, 0x0, 0x70) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21f}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x23, 0x80805, 0x0) listen(r6, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000380)='cpu==0||!') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 6m30.444898209s ago: executing program 2 (id=2811): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) (async) r4 = socket(0xa, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd9d}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0c0}, 0x0) (async) sendfile(r4, r6, 0x0, 0x11000002) 6m30.242435004s ago: executing program 2 (id=2812): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x3ff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000d40)={0x10000, 0xc4, 0xff800002}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2279, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) write$P9_RLERRORu(r7, &(0x7f0000000200)={0xf, 0x7, 0x1, {{0x2, '(.'}, 0x45a}}, 0xf) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x3ff}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) (async) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000d40)={0x10000, 0xc4, 0xff800002}) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2279, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) (async) write$P9_RLERRORu(r7, &(0x7f0000000200)={0xf, 0x7, 0x1, {{0x2, '(.'}, 0x45a}}, 0xf) (async) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) (async) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) (async) 6m29.457751969s ago: executing program 2 (id=2816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 6m28.634362625s ago: executing program 2 (id=2826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000001480)=[{&(0x7f0000000200)='4', 0x1}, {&(0x7f0000001500)="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", 0x1000}], 0x2) 6m28.633983135s ago: executing program 32 (id=2826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000001480)=[{&(0x7f0000000200)='4', 0x1}, {&(0x7f0000001500)="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", 0x1000}], 0x2) 2m20.563344395s ago: executing program 5 (id=6347): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0x80, 0x0}}], 0x1, 0x4c000) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfca) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESDEC=r3], 0x18}}, 0x4000) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r5 = timerfd_create(0x9, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_delete(0x0) 2m19.873586209s ago: executing program 5 (id=6355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2m19.83676834s ago: executing program 5 (id=6357): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.81434396s ago: executing program 5 (id=6359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") io_uring_enter(r3, 0x4349, 0x6682, 0x44, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) 2m17.898950348s ago: executing program 5 (id=6367): getpid() syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000600)={0xd}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="b2c5c79f07ab3d9614d5c058db4a274ad23734c22ae51ea860b7ba11a89526f3e0c83d84e43f97065e049df95e", 0x2d}], 0x1}}], 0x2, 0x8008801) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='dlm_unlock_end\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2m17.222831431s ago: executing program 5 (id=6372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsopen(&(0x7f0000000380)='qnx6\x00', 0x1) 2m17.185937761s ago: executing program 33 (id=6372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsopen(&(0x7f0000000380)='qnx6\x00', 0x1) 2m11.421014045s ago: executing program 3 (id=6416): memfd_create(0x0, 0x5) syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x46e1, 0x0, 0x0, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x87) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in=@private, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000240)=""/144, 0x90}], 0x1) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_settime(r7, 0x1, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000180)="f30f1efc6645f10f0808c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b2c0000653ed9fa", 0x80000004, 0x0, {[0x7ffc]}}, 0x0, 0x8, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) 2m11.361449566s ago: executing program 3 (id=6417): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfa8c}}, './file0\x00'}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000580)={0x9, &(0x7f0000000540)=[{0xb, 0xd}, {0x4, 0x1652}, {0x1, 0xb}, {0x13, 0x2}, {0x7, 0x823e}, {0x6, 0x80}, {0xfff, 0x80}, {0x1}, {0x8001, 0x9}]}) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_clone3(&(0x7f0000000200)={0x80000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x29}, &(0x7f0000000100)=""/41, 0x29, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xa, 0x5, 0xffff, 0x2, 0x3, 0x0, 0x8}}, {0x14, 0x2, [0x4, 0x9, 0x6, 0x2, 0x9, 0x401, 0x7, 0x7]}}, {{0x1c, 0x1, {0xff, 0x40, 0xbf8e, 0x4800, 0x1, 0x4db0, 0x3, 0x1}}, {0xfffffffffffffe89, 0x2, [0x1]}}, {{0x1c, 0x1, {0x16, 0x1, 0x5, 0xc, 0x0, 0x40, 0x5, 0x3}}, {0xa, 0x2, [0x80, 0x7fff, 0x7]}}]}]}, 0xb8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', r5, 0x29, 0x2, 0x1, 0xffffb261, 0x41, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x40, 0x8000, 0x0, 0xb}}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)=r7}, 0x20) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000080)=0x2e9aa845) (async, rerun: 64) capset(&(0x7f0000000400)={0x20080522, r1}, 0x0) (rerun: 64) 2m11.337206376s ago: executing program 3 (id=6418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000f80)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x4}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="a5"]}]}, 0x24}], 0x1}, 0x0) (fail_nth: 3) 2m11.309015107s ago: executing program 3 (id=6419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") io_uring_enter(r3, 0x4349, 0x6682, 0x44, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) 2m10.423026994s ago: executing program 3 (id=6429): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000001100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) socket$kcm(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m10.12594802s ago: executing program 3 (id=6438): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fb}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.12547634s ago: executing program 34 (id=6438): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fb}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) close_range(r0, 0xffffffffffffffff, 0x0) 5.840687295s ago: executing program 1 (id=8235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) 5.829413635s ago: executing program 1 (id=8236): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x20040140) listen(r1, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.767846117s ago: executing program 1 (id=8237): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 5.733529627s ago: executing program 1 (id=8238): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_validatetrans(r0, 0x0, 0x70) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21f}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x23, 0x80805, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000380)='cpu==0||!') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f00000008c0)=ANY=[@ANYBLOB=',msize=0x0000000000000001,access=user,posixacl,seclabel,fscontext=s']) 1.709518896s ago: executing program 6 (id=8283): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) getpid() syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) 1.469866521s ago: executing program 7 (id=8287): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 1.097073888s ago: executing program 7 (id=8290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x114, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x98) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000340)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x24) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000100), &(0x7f00000004c0)=0x4) lseek(r4, 0xfffffffffffff800, 0x2) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r13 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r13, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) 829.885733ms ago: executing program 4 (id=8296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 809.041584ms ago: executing program 6 (id=8297): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 776.870494ms ago: executing program 7 (id=8299): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085bcf500950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 726.354415ms ago: executing program 0 (id=8300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 725.690385ms ago: executing program 6 (id=8301): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x20040140) listen(r1, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 655.211466ms ago: executing program 6 (id=8302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f00000192c0)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x1000000000000}, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 618.771547ms ago: executing program 0 (id=8303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xc7f}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 440.339271ms ago: executing program 4 (id=8304): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 352.357783ms ago: executing program 0 (id=8305): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 293.629864ms ago: executing program 0 (id=8306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) 293.253024ms ago: executing program 1 (id=8242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) r2 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0xa28c, 0x100, 0x0, 0x210}) close(r2) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 248.791235ms ago: executing program 0 (id=8307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4040880) 225.532885ms ago: executing program 4 (id=8308): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="7f0000000000000092f400653a6c804a82eca2de8c5aa388552b"], 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, 0x0, 0x48010) syz_io_uring_setup(0x7243, &(0x7f0000000280)={0x0, 0x5b53, 0x8000, 0x1, 0x2a6}, 0x0, &(0x7f0000000300)) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)=ANY=[], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) 166.600096ms ago: executing program 6 (id=8309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4040880) 120.906937ms ago: executing program 0 (id=8310): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f01000100000000000000", @ANYRES32, @ANYBLOB="0000000000000004000000000000000000000000c393063d316b92531bbaea0c7fbf5989139a34e9eda53d21168549ad3414e1c1532b971d93b588ba5308e1490afdce08211d85e08c7384e7e6271bcad99d77301be3a815e5656a0d6747a71cf8d09db2f758c94687a14a6fa60b6bde70d5fdf1c88e569741b1798530d21257d749", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70876e9e3f09e93f584e00000000000007b8af8ff00000000bfa200fcd5e300000000000702000048ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r6 = io_uring_setup(0x7691, &(0x7f00000004c0)={0x0, 0x58fb, 0x8000, 0x801, 0x3bd}) close_range(r6, 0xffffffffffffffff, 0x0) personality(0x5000007) 120.570807ms ago: executing program 4 (id=8311): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 120.054977ms ago: executing program 7 (id=8312): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x20040140) listen(r1, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 117.435897ms ago: executing program 4 (id=8313): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000000b2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 116.890497ms ago: executing program 6 (id=8314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xc7f}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 104.752897ms ago: executing program 1 (id=8315): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f01000100000000000000", @ANYRES32, @ANYBLOB="0000000000000004000000000000000000000000c393063d316b92531bbaea0c7fbf5989139a34e9eda53d21168549ad3414e1c1532b971d93b588ba5308e1490afdce08211d85e08c7384e7e6271bcad99d77301be3a815e5656a0d6747a71cf8d09db2f758c94687a14a6fa60b6bde70d5fdf1c88e569741b1798530d21257d749", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70876e9e3f09e93f584e00000000000007b8af8ff00000000bfa200fcd5e300000000000702000048ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r7 = io_uring_setup(0x7691, &(0x7f00000004c0)={0x0, 0x58fb, 0x8000, 0x801, 0x3bd}) close_range(r7, 0xffffffffffffffff, 0x0) personality(0x5000007) ppoll(0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b4e, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r9, 0x400, 0x2) ioctl$EVIOCSABS0(r9, 0x401845c0, &(0x7f0000000180)={0x4, 0x7fff, 0x47, 0x10, 0x8, 0x8}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) 97.380938ms ago: executing program 7 (id=8316): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140), 0x0) 679.9µs ago: executing program 7 (id=8317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$eJzs3dFrW9cZAPDvynbiJM7sbHvIwpaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYGxraZ/61JdCn0uh5E9oC4H2vZTSEtokfWihrYrkqyZxZVsmlpVYvx8c33PuvfL3HQsd69x7uTeAjnUqIsYioisizkZEf7o+k5ZYWy/V/R7cvzVZLUlUKtc+TSJJ19V/V5Iuj6Qv642Iv/454h/J9+OWVlbnJgqF/FLazpXnF3OlldVzs/MTM/mZ/MLYyPDF0UujF0aHdq2vl//40f///eqfLr/1mxsfjH9y5p/VtPrSbY/3oxlrTe633vWe2t+irjsilnYS7BnWlfanp92JAADQlOp3/B9GxC8i4uFL7c4GAAAAaIXK7/viqySiAgAAAOxbmdo1sEkmm14L0BeZTDa7fg3vj+NwplAslX89XVxemFq/VnYgejLTs4X8UHqt8ED0JNX2cK3+qH1+Q3skIo5FxH/7D9Xa2cliYardBz8AAACgQxzZMP//vH99/g8AAADsMwPtTgAAAABoOfN/AAAA2P82nf8n3XubCAAAANAKf7lypVoq9edfT11fWZ4rXj83lS/NZeeXJ7OTxaXF7EyxOFO7Z9/8dr+vUCwu/jYWlm/myvlSOVdaWR2fLy4vlMdrz/Uez3tONAAAAOy9Yz+/834SEWu/O1QrVQfSbU3M1cdamx3QSpmd7Z60Kg9g73W1OwGgbba5wPedn+5VIsCecz4e2GZi/78N7R0eNgAAAJ4Fgz95qvP/zgfCc8xEHjqX8//QudzgCzqX8//Q4Q5uv0vvZhve3uVcAACAlumrlSSTTc8F9kUmk81GHK09FqAnmZ4t5Ici4gcR8V5/z8Fqe7jdSQMAAAAAAAAAAAAAAAAAAAAAAADAc6ZSSaICAAAA7GsRmY+T9EH+g/2n+zYeHziQfNFfW0bEjZevvXBzolxeGq6u/+y79eUX0/Xn23EEAwAAANioPk+vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDc9uH9rsl72Mu69P0TEQKP43dFbW/a+0R8Rhx8m0f3Y65KI6NqF+Gu3I+J4o/hJNa0YSLPYGD8TEYfaHP/ILsSHTnanOv6MNfr8ZeJUbdn489edlqd179Rm41+mPv7VxrlG49/RJmOcuPt6btP4tyNOdDcef+rxk6ccf//+t9XVzbZVXokYbPj/J3kiVq48v5grrayem52fmMnP5BdGRoYvjl4avTA6lJueLeTTnw1j/Odnb36zVf8PbxJ/YJv+n26y/1/fvXn/R1vEP/PLjfG/rL3/x7eIX/3b/yr9P1DdPlivr63XH3fytXdPbtX/qU36v937f6bJ/p+9+q8Pm9wVANgDpZXVuYlCIb+k8lxWeryDKltVrqYf9B2/vM0DEwAAsOsefelvdyYAAAAAAAAAAAAAAAAAAADQuVp+E7KDT95ZoLd9XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NK3AQAA///VO9QU") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 0s ago: executing program 4 (id=8318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) kernel console output (not intermixed with test programs): et: couldn't find an available UDC or it's busy [ 614.356521][T30670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 614.358811][T30673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.377871][T30673] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 614.563648][T30683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7475'. [ 614.884420][T30711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.899631][T30711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.910355][T30711] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 614.925841][T30715] netlink: 'syz.7.7490': attribute type 1 has an invalid length. [ 614.939947][T30715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.130217][T30729] netlink: 'syz.7.7495': attribute type 13 has an invalid length. [ 615.130294][T30731] team_slave_1: Caught tx_queue_len zero misconfig [ 615.249167][T30735] sd 0:0:1:0: device reset [ 615.313192][T30745] loop7: detected capacity change from 0 to 1024 [ 615.323526][T30745] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.7503: Failed to acquire dquot type 0 [ 615.336051][T30745] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 615.351038][T30745] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.7503: corrupted inode contents [ 615.363452][T30745] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.7503: mark_inode_dirty error [ 615.375077][T30745] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.7503: corrupted inode contents [ 615.387144][T30745] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.7503: mark_inode_dirty error [ 615.398957][T30745] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.7503: corrupted inode contents [ 615.412997][T30745] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 615.423664][T30745] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.7503: corrupted inode contents [ 615.446709][T30745] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.7503: mark_inode_dirty error [ 615.458526][T30745] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 615.470882][T30745] EXT4-fs (loop7): 1 truncate cleaned up [ 615.477487][T30752] __nla_validate_parse: 5 callbacks suppressed [ 615.477501][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7506'. [ 615.480945][T30756] loop1: detected capacity change from 0 to 512 [ 615.501012][T30756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 615.510670][T30745] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.7503: Failed to acquire dquot type 0 [ 615.531386][T30756] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.558490][T30762] netlink: 'syz.7.7509': attribute type 13 has an invalid length. [ 615.577546][T30764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7510'. [ 615.619479][T30764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7510'. [ 615.704595][T30774] loop1: detected capacity change from 0 to 512 [ 615.711416][T30774] EXT4-fs: Ignoring removed orlov option [ 615.718498][T30774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 615.729641][T30779] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 615.733322][T30778] netlink: 'syz.6.7516': attribute type 1 has an invalid length. [ 615.746762][T30776] FAULT_INJECTION: forcing a failure. [ 615.746762][T30776] name failslab, interval 1, probability 0, space 0, times 0 [ 615.755831][T30778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.759480][T30776] CPU: 1 UID: 0 PID: 30776 Comm: syz.0.7515 Not tainted syzkaller #0 PREEMPT(voluntary) [ 615.759520][T30776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.759540][T30776] Call Trace: [ 615.759549][T30776] [ 615.759558][T30776] __dump_stack+0x1d/0x30 [ 615.759651][T30776] dump_stack_lvl+0xe8/0x140 [ 615.759679][T30776] dump_stack+0x15/0x1b [ 615.759817][T30776] should_fail_ex+0x265/0x280 [ 615.759851][T30776] ? copy_ipcs+0xf5/0x3b0 [ 615.759950][T30776] should_failslab+0x8c/0xb0 [ 615.759984][T30776] __kmalloc_cache_noprof+0x4c/0x320 [ 615.760036][T30776] copy_ipcs+0xf5/0x3b0 [ 615.760079][T30776] create_new_namespaces+0x12a/0x3d0 [ 615.760154][T30776] unshare_nsproxy_namespaces+0xe8/0x120 [ 615.760200][T30776] ksys_unshare+0x3d0/0x6d0 [ 615.760240][T30776] ? ksys_write+0x192/0x1a0 [ 615.760272][T30776] __x64_sys_unshare+0x1f/0x30 [ 615.760315][T30776] x64_sys_call+0x2911/0x2ff0 [ 615.760371][T30776] do_syscall_64+0xd2/0x200 [ 615.760414][T30776] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 615.760448][T30776] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 615.760509][T30776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.760538][T30776] RIP: 0033:0x7fa3e801ec29 [ 615.760559][T30776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.760584][T30776] RSP: 002b:00007fa3e6a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 615.760667][T30776] RAX: ffffffffffffffda RBX: 00007fa3e8265fa0 RCX: 00007fa3e801ec29 [ 615.760685][T30776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 615.760702][T30776] RBP: 00007fa3e6a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 615.760718][T30776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.760800][T30776] R13: 00007fa3e8266038 R14: 00007fa3e8265fa0 R15: 00007ffe3df9a5b8 [ 615.760826][T30776] [ 615.791266][T30774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 615.971181][T30774] EXT4-fs (loop1): 1 orphan inode deleted [ 615.977078][ T29] kauditd_printk_skb: 2786 callbacks suppressed [ 615.977144][ T29] audit: type=1326 audit(1758500443.976:101027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 615.985476][T30786] loop4: detected capacity change from 0 to 512 [ 616.007145][ T29] audit: type=1326 audit(1758500443.976:101028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.010668][ T29] audit: type=1326 audit(1758500443.976:101029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.061409][ T29] audit: type=1326 audit(1758500443.976:101030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.062951][T30786] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 616.085176][ T29] audit: type=1326 audit(1758500443.976:101031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.119954][ T29] audit: type=1326 audit(1758500444.026:101032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.126964][T30786] EXT4-fs (loop4): invalid journal inode [ 616.143701][ T29] audit: type=1326 audit(1758500444.026:101033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.152150][T30786] EXT4-fs (loop4): can't get journal size [ 616.173137][ T29] audit: type=1326 audit(1758500444.026:101034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.202537][ T29] audit: type=1326 audit(1758500444.026:101035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.205101][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7519'. [ 616.226465][ T29] audit: type=1326 audit(1758500444.026:101036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30787 comm="syz.0.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 616.260509][T30786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 616.269683][T30786] System zones: 1-12, 13-13 [ 616.274737][T30786] EXT4-fs (loop4): 1 truncate cleaned up [ 616.293662][T30786] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 616.319191][T30796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7521'. [ 616.346158][T30800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7523'. [ 616.356548][T30798] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 616.357351][T30802] netlink: 'syz.0.7524': attribute type 13 has an invalid length. [ 616.364083][T30800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7523'. [ 616.541382][T30817] netlink: 'syz.0.7531': attribute type 1 has an invalid length. [ 616.568800][T30817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.608752][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7532'. [ 616.746020][T30824] lo speed is unknown, defaulting to 1000 [ 616.771217][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7535'. [ 616.847893][T30834] FAULT_INJECTION: forcing a failure. [ 616.847893][T30834] name failslab, interval 1, probability 0, space 0, times 0 [ 616.860632][T30834] CPU: 0 UID: 0 PID: 30834 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 616.860686][T30834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.860698][T30834] Call Trace: [ 616.860704][T30834] [ 616.860711][T30834] __dump_stack+0x1d/0x30 [ 616.860798][T30834] dump_stack_lvl+0xe8/0x140 [ 616.860814][T30834] dump_stack+0x15/0x1b [ 616.860846][T30834] should_fail_ex+0x265/0x280 [ 616.860866][T30834] ? __pfx_loop_control_ioctl+0x10/0x10 [ 616.860915][T30834] ? loop_add+0x64/0x590 [ 616.860944][T30834] should_failslab+0x8c/0xb0 [ 616.860973][T30834] __kmalloc_cache_noprof+0x4c/0x320 [ 616.861085][T30834] ? __pfx_loop_control_ioctl+0x10/0x10 [ 616.861110][T30834] loop_add+0x64/0x590 [ 616.861211][T30834] ? __pfx_loop_control_ioctl+0x10/0x10 [ 616.861228][T30834] loop_control_ioctl+0xd0/0x3f0 [ 616.861244][T30834] ? __pfx_loop_control_ioctl+0x10/0x10 [ 616.861261][T30834] __se_sys_ioctl+0xce/0x140 [ 616.861277][T30834] __x64_sys_ioctl+0x43/0x50 [ 616.861311][T30834] x64_sys_call+0x1816/0x2ff0 [ 616.861329][T30834] do_syscall_64+0xd2/0x200 [ 616.861357][T30834] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 616.861378][T30834] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 616.861445][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.861473][T30834] RIP: 0033:0x7f54758bec29 [ 616.861506][T30834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.861577][T30834] RSP: 002b:00007f5474327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.861594][T30834] RAX: ffffffffffffffda RBX: 00007f5475b05fa0 RCX: 00007f54758bec29 [ 616.861606][T30834] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 616.861618][T30834] RBP: 00007f5474327090 R08: 0000000000000000 R09: 0000000000000000 [ 616.861710][T30834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.861721][T30834] R13: 00007f5475b06038 R14: 00007f5475b05fa0 R15: 00007fff2d41bc08 [ 616.861738][T30834] [ 617.119071][T30836] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 617.136953][T30836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30836 comm=syz.6.7537 [ 617.196764][T30840] loop6: detected capacity change from 0 to 512 [ 617.206750][T30838] netlink: 'syz.4.7538': attribute type 13 has an invalid length. [ 617.222779][T30840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 617.263511][T30840] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.313257][T30840] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 617.345103][T30840] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 617.357539][T30840] EXT4-fs (loop6): This should not happen!! Data will be lost [ 617.357539][T30840] [ 617.367215][T30840] EXT4-fs (loop6): Total free blocks count 0 [ 617.373989][T30840] EXT4-fs (loop6): Free/Dirty block details [ 617.379932][T30840] EXT4-fs (loop6): free_blocks=39626 [ 617.385495][T30840] EXT4-fs (loop6): dirty_blocks=15 [ 617.390645][T30840] EXT4-fs (loop6): Block reservation details [ 617.396691][T30840] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 617.409225][T30845] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 617.421587][T30845] EXT4-fs (loop6): This should not happen!! Data will be lost [ 617.421587][T30845] [ 617.469321][T30849] netlink: 'syz.1.7543': attribute type 1 has an invalid length. [ 617.524280][T30858] loop4: detected capacity change from 0 to 512 [ 617.531795][T30858] EXT4-fs: Ignoring removed orlov option [ 617.545163][T30858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 617.563167][T30858] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 617.581950][T30858] EXT4-fs (loop4): 1 orphan inode deleted [ 617.715502][T30874] loop7: detected capacity change from 0 to 512 [ 617.722844][T30874] EXT4-fs: Ignoring removed orlov option [ 617.729288][T30874] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 617.741708][T30874] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 617.757704][T30874] EXT4-fs (loop7): 1 orphan inode deleted [ 617.850861][T30876] lo speed is unknown, defaulting to 1000 [ 618.382190][T30882] loop6: detected capacity change from 0 to 512 [ 618.411218][T30882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 618.446915][T30882] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.613690][T30882] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 618.658104][T30882] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 618.670606][T30882] EXT4-fs (loop6): This should not happen!! Data will be lost [ 618.670606][T30882] [ 618.680497][T30882] EXT4-fs (loop6): Total free blocks count 0 [ 618.686502][T30882] EXT4-fs (loop6): Free/Dirty block details [ 618.692422][T30882] EXT4-fs (loop6): free_blocks=39626 [ 618.697765][T30882] EXT4-fs (loop6): dirty_blocks=15 [ 618.703085][T30882] EXT4-fs (loop6): Block reservation details [ 618.709100][T30882] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 618.768964][T30890] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 618.781356][T30890] EXT4-fs (loop6): This should not happen!! Data will be lost [ 618.781356][T30890] [ 618.847510][T30888] loop7: detected capacity change from 0 to 8192 [ 618.979219][T30891] lo speed is unknown, defaulting to 1000 [ 619.711260][T30912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.723374][T30912] bond4 (unregistering): Released all slaves [ 619.733047][T30914] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 619.889539][T30928] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 619.919876][T30930] loop7: detected capacity change from 0 to 512 [ 619.927226][T30930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 619.947310][T30930] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.972293][T30930] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 619.987466][T30930] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 619.999777][T30930] EXT4-fs (loop7): This should not happen!! Data will be lost [ 619.999777][T30930] [ 620.009555][T30930] EXT4-fs (loop7): Total free blocks count 0 [ 620.015549][T30930] EXT4-fs (loop7): Free/Dirty block details [ 620.021551][T30930] EXT4-fs (loop7): free_blocks=39626 [ 620.026882][T30930] EXT4-fs (loop7): dirty_blocks=15 [ 620.032139][T30930] EXT4-fs (loop7): Block reservation details [ 620.038130][T30930] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 620.051012][T30935] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 620.063344][T30935] EXT4-fs (loop7): This should not happen!! Data will be lost [ 620.063344][T30935] [ 620.179544][T30944] sd 0:0:1:0: device reset [ 620.232457][T30942] lo speed is unknown, defaulting to 1000 [ 620.248478][T30948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 620.264097][T30948] bond8 (unregistering): Released all slaves [ 620.382904][T30955] sd 0:0:1:0: device reset [ 620.422325][T30945] lo speed is unknown, defaulting to 1000 [ 620.444334][T30959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.471129][T30959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.492929][T30959] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 620.552463][T30962] loop6: detected capacity change from 0 to 512 [ 620.592746][T30962] EXT4-fs: Ignoring removed orlov option [ 620.613921][T30962] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 620.644569][T30962] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 620.689709][T30962] EXT4-fs (loop6): 1 orphan inode deleted [ 620.708858][T30962] EXT4-fs mount: 18 callbacks suppressed [ 620.708878][T30962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.819503][T30969] loop4: detected capacity change from 0 to 512 [ 620.829908][T30969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 620.870745][T30969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.893474][T30969] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.932766][T30969] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 620.964249][T30969] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 620.976657][T30969] EXT4-fs (loop4): This should not happen!! Data will be lost [ 620.976657][T30969] [ 620.986433][T30969] EXT4-fs (loop4): Total free blocks count 0 [ 620.992523][T30969] EXT4-fs (loop4): Free/Dirty block details [ 620.998482][T30969] EXT4-fs (loop4): free_blocks=39626 [ 621.003769][T30969] EXT4-fs (loop4): dirty_blocks=15 [ 621.008912][T30969] EXT4-fs (loop4): Block reservation details [ 621.014981][T30969] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 621.050913][ T29] kauditd_printk_skb: 1479 callbacks suppressed [ 621.050928][ T29] audit: type=1326 audit(1758500449.056:102516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649adbec29 code=0x7ffc0000 [ 621.051011][T30972] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 621.057234][ T29] audit: type=1326 audit(1758500449.056:102517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649adbec29 code=0x7ffc0000 [ 621.149287][ T29] audit: type=1326 audit(1758500449.096:102518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f649adbec29 code=0x7ffc0000 [ 621.173127][ T29] audit: type=1326 audit(1758500449.096:102519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649adbec29 code=0x7ffc0000 [ 621.196900][ T29] audit: type=1326 audit(1758500449.096:102520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649adbec29 code=0x7ffc0000 [ 621.220694][ T29] audit: type=1326 audit(1758500449.096:102521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30968 comm="syz.4.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 621.244470][ T29] audit: type=1326 audit(1758500449.096:102522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30968 comm="syz.4.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 621.268375][ T29] audit: type=1326 audit(1758500449.126:102523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30968 comm="syz.4.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 621.268408][ T29] audit: type=1326 audit(1758500449.126:102524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30968 comm="syz.4.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 621.268436][ T29] audit: type=1326 audit(1758500449.126:102525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30968 comm="syz.4.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 621.382580][T30980] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 621.467317][T30984] __nla_validate_parse: 10 callbacks suppressed [ 621.467332][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7586'. [ 621.513082][T27551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.579574][T30995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7589'. [ 621.653927][T30997] siw: device registration error -23 [ 621.669251][T30997] netlink: 'syz.0.7590': attribute type 46 has an invalid length. [ 621.700065][T31004] loop6: detected capacity change from 0 to 512 [ 621.707799][T31004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 621.717504][T31006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.729461][T31006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.739959][T31006] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 621.741041][T31004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.762515][T31004] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.790324][T27551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.819461][T31017] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 622.286273][T31020] loop7: detected capacity change from 0 to 512 [ 622.294675][T31020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.310145][T31020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.322885][T31022] loop4: detected capacity change from 0 to 512 [ 622.323343][T31020] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.331795][T31022] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 622.349329][T31022] EXT4-fs (loop4): invalid journal inode [ 622.355074][T31022] EXT4-fs (loop4): can't get journal size [ 622.361218][T31022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 622.369716][T31022] System zones: 1-12, 13-13 [ 622.374705][T31022] EXT4-fs (loop4): 1 truncate cleaned up [ 622.377292][T31020] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 622.381345][T31022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.396651][T31020] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 622.419705][T31020] EXT4-fs (loop7): This should not happen!! Data will be lost [ 622.419705][T31020] [ 622.429397][T31020] EXT4-fs (loop7): Total free blocks count 0 [ 622.435445][T31020] EXT4-fs (loop7): Free/Dirty block details [ 622.441362][T31020] EXT4-fs (loop7): free_blocks=39626 [ 622.446984][T31020] EXT4-fs (loop7): dirty_blocks=15 [ 622.452143][T31020] EXT4-fs (loop7): Block reservation details [ 622.458191][T31020] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 622.467321][T31026] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 622.486439][T31022] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 622.520053][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.563434][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7602'. [ 622.621542][T31043] loop4: detected capacity change from 0 to 512 [ 622.624140][T31046] netlink: 'syz.0.7607': attribute type 13 has an invalid length. [ 622.629009][T31043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 622.645623][T31043] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 622.684158][T31052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.696997][T31052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.707816][T31052] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.716201][T31051] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7605'. [ 622.847012][T31058] siw: device registration error -23 [ 622.853990][T31058] netlink: 'syz.6.7610': attribute type 46 has an invalid length. [ 623.470714][T31085] netlink: 'syz.7.7622': attribute type 1 has an invalid length. [ 623.629257][T31092] loop6: detected capacity change from 0 to 512 [ 623.636885][T31092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 623.649773][T31093] loop7: detected capacity change from 0 to 512 [ 623.650584][T31092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.657042][T31093] EXT4-fs: Ignoring removed orlov option [ 623.669904][T31092] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.675516][T31093] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 623.698741][T31093] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 623.713401][T31093] EXT4-fs (loop7): 1 orphan inode deleted [ 623.722802][T31093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.738162][T31092] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 623.754737][T31092] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 623.767048][T31092] EXT4-fs (loop6): This should not happen!! Data will be lost [ 623.767048][T31092] [ 623.776730][T31092] EXT4-fs (loop6): Total free blocks count 0 [ 623.782822][T31092] EXT4-fs (loop6): Free/Dirty block details [ 623.788798][T31092] EXT4-fs (loop6): free_blocks=39626 [ 623.794179][T31092] EXT4-fs (loop6): dirty_blocks=15 [ 623.799349][T31092] EXT4-fs (loop6): Block reservation details [ 623.805454][T31092] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 623.811842][T31097] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 623.861192][T31101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.869808][T31101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.880045][T31101] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 624.276856][T31107] loop4: detected capacity change from 0 to 512 [ 624.298693][T31107] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 624.324123][T31107] EXT4-fs (loop4): 1 truncate cleaned up [ 624.334993][T31107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.403822][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.434227][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.453365][T31113] loop1: detected capacity change from 0 to 512 [ 624.498486][T31113] EXT4-fs: Ignoring removed orlov option [ 624.508923][T31113] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 624.541408][T31113] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 624.550658][T31120] netlink: 'syz.6.7633': attribute type 1 has an invalid length. [ 624.668299][T31127] FAULT_INJECTION: forcing a failure. [ 624.668299][T31127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.681496][T31127] CPU: 0 UID: 0 PID: 31127 Comm: syz.6.7636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 624.681534][T31127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 624.681550][T31127] Call Trace: [ 624.681558][T31127] [ 624.681566][T31127] __dump_stack+0x1d/0x30 [ 624.681588][T31127] dump_stack_lvl+0xe8/0x140 [ 624.681605][T31127] dump_stack+0x15/0x1b [ 624.681620][T31127] should_fail_ex+0x265/0x280 [ 624.681720][T31127] should_fail+0xb/0x20 [ 624.681738][T31127] should_fail_usercopy+0x1a/0x20 [ 624.681786][T31127] strncpy_from_user+0x25/0x230 [ 624.681864][T31127] ? kmem_cache_alloc_noprof+0x186/0x310 [ 624.681890][T31127] ? getname_flags+0x80/0x3b0 [ 624.681923][T31127] getname_flags+0xae/0x3b0 [ 624.682042][T31127] do_sys_openat2+0x60/0x110 [ 624.682085][T31127] __x64_sys_open+0xe6/0x110 [ 624.682163][T31127] x64_sys_call+0x1457/0x2ff0 [ 624.682233][T31127] do_syscall_64+0xd2/0x200 [ 624.682269][T31127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 624.682297][T31127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 624.682407][T31127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.682432][T31127] RIP: 0033:0x7f54758bec29 [ 624.682510][T31127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.682531][T31127] RSP: 002b:00007f5474327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 624.682549][T31127] RAX: ffffffffffffffda RBX: 00007f5475b05fa0 RCX: 00007f54758bec29 [ 624.682561][T31127] RDX: 0000000000000020 RSI: 0000000000080000 RDI: 0000200000000080 [ 624.682573][T31127] RBP: 00007f5474327090 R08: 0000000000000000 R09: 0000000000000000 [ 624.682638][T31127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.682654][T31127] R13: 00007f5475b06038 R14: 00007f5475b05fa0 R15: 00007fff2d41bc08 [ 624.682676][T31127] [ 624.708244][T31113] EXT4-fs (loop1): 1 orphan inode deleted [ 624.822257][T31133] netlink: 'syz.7.7635': attribute type 46 has an invalid length. [ 624.912472][T31130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7637'. [ 624.948414][T31130] loop4: detected capacity change from 0 to 2048 [ 624.959164][T31113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.150219][T31138] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 625.162615][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.290141][T31142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.298788][T31142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.308974][T31142] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 625.501329][T31153] netlink: 200 bytes leftover after parsing attributes in process `syz.7.7645'. [ 625.654064][T31155] netlink: 'syz.7.7646': attribute type 1 has an invalid length. [ 625.897137][T31159] loop7: detected capacity change from 0 to 512 [ 625.929043][T31159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 625.971548][T31159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.014572][T31159] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.064922][ T29] kauditd_printk_skb: 1948 callbacks suppressed [ 626.064939][ T29] audit: type=1326 audit(1758500454.066:104474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31158 comm="syz.7.7648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7854aed590 code=0x7ffc0000 [ 626.116370][T31159] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 626.149022][T31159] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 626.161457][T31159] EXT4-fs (loop7): This should not happen!! Data will be lost [ 626.161457][T31159] [ 626.171293][T31159] EXT4-fs (loop7): Total free blocks count 0 [ 626.177346][T31159] EXT4-fs (loop7): Free/Dirty block details [ 626.183336][T31159] EXT4-fs (loop7): free_blocks=39626 [ 626.188649][T31159] EXT4-fs (loop7): dirty_blocks=15 [ 626.193790][T31159] EXT4-fs (loop7): Block reservation details [ 626.199803][T31159] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 626.244637][ T29] audit: type=1326 audit(1758500454.066:104475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54758b5be7 code=0x7ffc0000 [ 626.263296][T31170] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 626.268321][ T29] audit: type=1326 audit(1758500454.066:104476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f547585ae09 code=0x7ffc0000 [ 626.304184][ T29] audit: type=1326 audit(1758500454.066:104477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 626.328153][ T29] audit: type=1326 audit(1758500454.076:104478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54758b5be7 code=0x7ffc0000 [ 626.351844][ T29] audit: type=1326 audit(1758500454.076:104479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f547585ae09 code=0x7ffc0000 [ 626.375503][ T29] audit: type=1326 audit(1758500454.076:104480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 626.399381][ T29] audit: type=1326 audit(1758500454.086:104481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54758b5be7 code=0x7ffc0000 [ 626.422957][ T29] audit: type=1326 audit(1758500454.086:104482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f547585ae09 code=0x7ffc0000 [ 626.446542][ T29] audit: type=1326 audit(1758500454.086:104483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.6.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 626.594036][T31176] netlink: 'syz.4.7655': attribute type 1 has an invalid length. [ 626.622096][T31178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.637105][T31178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7654'. [ 626.638701][T31176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 626.656729][T31178] bond4 (unregistering): Released all slaves [ 626.674483][T31181] sd 0:0:1:0: device reset [ 626.741955][T31189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.759618][T31189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.771974][T31198] vhci_hcd: invalid port number 236 [ 626.772306][T31189] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.830279][T31193] lo speed is unknown, defaulting to 1000 [ 626.970172][T31215] netlink: 'syz.6.7670': attribute type 1 has an invalid length. [ 627.044438][T31215] 8021q: adding VLAN 0 to HW filter on device bond8 [ 627.162021][T31220] lo speed is unknown, defaulting to 1000 [ 627.294704][T31223] loop6: detected capacity change from 0 to 512 [ 627.330181][T31223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 627.375159][T31223] EXT4-fs: Mount option(s) incompatible with ext3 [ 627.443419][T31224] tmpfs: Bad value for 'mpol' [ 627.636860][T31233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.660940][T31233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7674'. [ 627.710065][T31233] bond4 (unregistering): Released all slaves [ 627.805465][T31240] vhci_hcd: invalid port number 236 [ 627.954512][T31251] 8021q: adding VLAN 0 to HW filter on device bond9 [ 627.963385][T31245] lo speed is unknown, defaulting to 1000 [ 627.976238][T31252] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 627.985051][T31251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7682'. [ 628.026369][T31251] bond9 (unregistering): Released all slaves [ 628.216662][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7689'. [ 628.355395][T31287] netlink: 'syz.1.7695': attribute type 1 has an invalid length. [ 628.507315][T31283] lo speed is unknown, defaulting to 1000 [ 628.603866][T31296] netlink: 'syz.6.7697': attribute type 1 has an invalid length. [ 628.611672][T31296] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7697'. [ 628.637395][T31295] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7698'. [ 628.794998][T31303] loop1: detected capacity change from 0 to 512 [ 628.822886][T31303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 628.861495][T31303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.913279][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7687'. [ 628.926833][T31303] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.024542][T31303] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 629.039349][T31303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 629.051695][T31303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 629.051695][T31303] [ 629.061378][T31303] EXT4-fs (loop1): Total free blocks count 0 [ 629.067459][T31303] EXT4-fs (loop1): Free/Dirty block details [ 629.073383][T31303] EXT4-fs (loop1): free_blocks=39626 [ 629.078726][T31303] EXT4-fs (loop1): dirty_blocks=15 [ 629.083869][T31303] EXT4-fs (loop1): Block reservation details [ 629.089899][T31303] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 629.142372][T31309] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 629.310750][T31313] lo speed is unknown, defaulting to 1000 [ 629.402146][T31322] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7703'. [ 629.590140][T31333] loop7: detected capacity change from 0 to 128 [ 629.725117][T31334] lo speed is unknown, defaulting to 1000 [ 630.019388][T31333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7707'. [ 630.089702][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7707'. [ 630.397647][T31346] 8021q: adding VLAN 0 to HW filter on device bond9 [ 630.418378][T31346] bond9 (unregistering): Released all slaves [ 630.432353][T31349] loop7: detected capacity change from 0 to 512 [ 630.488073][T31349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 630.526438][T31349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.601948][T31349] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.689792][T31349] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 630.710919][T31349] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 630.723407][T31349] EXT4-fs (loop7): This should not happen!! Data will be lost [ 630.723407][T31349] [ 630.733103][T31349] EXT4-fs (loop7): Total free blocks count 0 [ 630.739120][T31349] EXT4-fs (loop7): Free/Dirty block details [ 630.745070][T31349] EXT4-fs (loop7): free_blocks=39626 [ 630.750402][T31349] EXT4-fs (loop7): dirty_blocks=15 [ 630.755530][T31349] EXT4-fs (loop7): Block reservation details [ 630.761609][T31349] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 630.789288][T31358] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 630.915266][T31365] loop4: detected capacity change from 0 to 512 [ 630.939121][T31365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 630.961330][T31365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.975081][T31366] sd 0:0:1:0: device reset [ 631.021725][T31365] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.105808][ T29] kauditd_printk_skb: 1163 callbacks suppressed [ 631.105822][ T29] audit: type=1326 audit(1758500459.106:105647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b3284d590 code=0x7ffc0000 [ 631.136114][ T29] audit: type=1326 audit(1758500459.106:105648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4b3284d977 code=0x7ffc0000 [ 631.159735][ T29] audit: type=1326 audit(1758500459.106:105649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b3284d590 code=0x7ffc0000 [ 631.183522][ T29] audit: type=1326 audit(1758500459.106:105650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 631.207184][ T29] audit: type=1326 audit(1758500459.106:105651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 631.341433][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.470438][ T29] audit: type=1326 audit(1758500459.236:105652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b3284d590 code=0x7ffc0000 [ 631.494171][ T29] audit: type=1326 audit(1758500459.236:105653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4b32850457 code=0x7ffc0000 [ 631.517917][ T29] audit: type=1326 audit(1758500459.236:105654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 631.541577][ T29] audit: type=1326 audit(1758500459.236:105655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4b32850457 code=0x7ffc0000 [ 631.565349][ T29] audit: type=1326 audit(1758500459.236:105656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31363 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4b3284d88a code=0x7ffc0000 [ 632.242615][T31391] lo speed is unknown, defaulting to 1000 [ 632.799260][T31407] __nla_validate_parse: 4 callbacks suppressed [ 632.799282][T31407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7729'. [ 633.025015][T31411] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 633.347883][T31424] lo speed is unknown, defaulting to 1000 [ 633.795322][T31435] loop4: detected capacity change from 0 to 512 [ 633.825309][T31435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 633.873420][T31435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.936866][T31435] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.029185][T31435] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 634.093444][T31435] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 634.105918][T31435] EXT4-fs (loop4): This should not happen!! Data will be lost [ 634.105918][T31435] [ 634.115685][T31435] EXT4-fs (loop4): Total free blocks count 0 [ 634.121776][T31435] EXT4-fs (loop4): Free/Dirty block details [ 634.127685][T31435] EXT4-fs (loop4): free_blocks=39626 [ 634.133005][T31435] EXT4-fs (loop4): dirty_blocks=15 [ 634.138154][T31435] EXT4-fs (loop4): Block reservation details [ 634.144141][T31435] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 634.349063][T31441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 634.437504][T31446] lo speed is unknown, defaulting to 1000 [ 634.538871][T31450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7743'. [ 634.652611][T31466] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 634.674131][T31463] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 634.752531][T31472] sd 0:0:1:0: device reset [ 634.769755][T31474] netlink: 'syz.0.7754': attribute type 1 has an invalid length. [ 634.828768][T31474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.032110][T31482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7757'. [ 635.139166][T31488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 635.156324][T31488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7758'. [ 635.170669][T31488] bond9 (unregistering): Released all slaves [ 635.191859][T31493] netlink: 'syz.0.7760': attribute type 13 has an invalid length. [ 635.263216][T31497] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 635.311578][T31500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7763'. [ 635.320552][T31495] lo speed is unknown, defaulting to 1000 [ 635.468315][T31514] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 635.654225][T31522] sd 0:0:1:0: device reset [ 635.797378][T31523] lo speed is unknown, defaulting to 1000 [ 636.122333][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 636.122352][ T29] audit: type=1326 audit(1758500464.126:106358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.7.7765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 636.152563][ T29] audit: type=1326 audit(1758500464.126:106359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.7.7765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 636.178152][ T29] audit: type=1326 audit(1758500464.126:106360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.7.7765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 636.213831][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7778'. [ 636.268081][ T29] audit: type=1326 audit(1758500464.266:106361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31539 comm="syz.6.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 636.291927][ T29] audit: type=1326 audit(1758500464.266:106362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31539 comm="syz.6.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 636.315883][ T29] audit: type=1326 audit(1758500464.266:106363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31539 comm="syz.6.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 636.367961][ T29] audit: type=1326 audit(1758500464.346:106364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31516 comm="syz.0.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 636.381511][T31547] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.7783'. [ 636.391797][ T29] audit: type=1326 audit(1758500464.346:106365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31516 comm="syz.0.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 636.559799][T31559] netlink: 'syz.0.7788': attribute type 29 has an invalid length. [ 636.568300][T31559] netlink: 'syz.0.7788': attribute type 29 has an invalid length. [ 636.725988][ T29] audit: type=1400 audit(1758500464.726:106366): avc: denied { write } for pid=31581 comm="syz.1.7801" path="socket:[92021]" dev="sockfs" ino=92021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 636.749684][ T29] audit: type=1400 audit(1758500464.726:106367): avc: denied { ioctl } for pid=31582 comm="syz.4.7799" path="socket:[92884]" dev="sockfs" ino=92884 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 636.854578][T31599] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.7809'. [ 636.949469][T31596] syzkaller0: entered promiscuous mode [ 636.954978][T31596] syzkaller0: entered allmulticast mode [ 637.081577][T31630] netlink: 'syz.4.7823': attribute type 21 has an invalid length. [ 637.090995][T31630] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7823'. [ 637.175011][T31644] netlink: 'syz.0.7826': attribute type 29 has an invalid length. [ 637.196565][T31645] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 637.213868][T31644] netlink: 'syz.0.7826': attribute type 29 has an invalid length. [ 637.281985][T31652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.298233][T31652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.314103][T31652] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 637.332264][T31647] siw: device registration error -23 [ 637.339131][T31647] netlink: 'syz.7.7830': attribute type 46 has an invalid length. [ 637.483370][T31651] lo speed is unknown, defaulting to 1000 [ 637.559736][T31660] netlink: 'syz.0.7833': attribute type 13 has an invalid length. [ 637.788546][T31661] lo speed is unknown, defaulting to 1000 [ 637.804522][T31666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7834'. [ 637.893661][T31668] netlink: 'syz.1.7835': attribute type 1 has an invalid length. [ 637.901612][T31668] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.7835'. [ 638.102569][T31677] loop1: detected capacity change from 0 to 512 [ 638.142100][T31677] EXT4-fs: Ignoring removed orlov option [ 638.171912][T31677] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 638.221348][T31683] sd 0:0:1:0: device reset [ 638.229305][T31677] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 638.281454][T31677] EXT4-fs (loop1): 1 orphan inode deleted [ 638.287539][T31677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.817260][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.844686][T31697] pim6reg1: entered promiscuous mode [ 638.850076][T31697] pim6reg1: entered allmulticast mode [ 639.012868][T31700] sd 0:0:1:0: device reset [ 639.240358][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7849'. [ 639.341995][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7850'. [ 639.531781][T31725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.540926][T31725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.551596][T31725] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 639.676187][T31732] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 639.982099][T31743] loop1: detected capacity change from 0 to 128 [ 639.994355][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7864'. [ 640.012343][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7864'. [ 640.021324][T31743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7864'. [ 640.083831][T31747] sd 0:0:1:0: device reset [ 640.131347][T31755] FAULT_INJECTION: forcing a failure. [ 640.131347][T31755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.134307][T31745] lo speed is unknown, defaulting to 1000 [ 640.144615][T31755] CPU: 0 UID: 0 PID: 31755 Comm: syz.4.7870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 640.144717][T31755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 640.144734][T31755] Call Trace: [ 640.144742][T31755] [ 640.144752][T31755] __dump_stack+0x1d/0x30 [ 640.144859][T31755] dump_stack_lvl+0xe8/0x140 [ 640.144886][T31755] dump_stack+0x15/0x1b [ 640.144910][T31755] should_fail_ex+0x265/0x280 [ 640.144941][T31755] should_fail+0xb/0x20 [ 640.144975][T31755] should_fail_usercopy+0x1a/0x20 [ 640.145080][T31755] _copy_from_iter+0xd2/0xe80 [ 640.145118][T31755] ? __build_skb_around+0x1a0/0x200 [ 640.145151][T31755] ? __alloc_skb+0x223/0x320 [ 640.145184][T31755] netlink_sendmsg+0x471/0x6b0 [ 640.145236][T31755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.145272][T31755] __sock_sendmsg+0x142/0x180 [ 640.145317][T31755] ____sys_sendmsg+0x31e/0x4e0 [ 640.145359][T31755] ___sys_sendmsg+0x17b/0x1d0 [ 640.145416][T31755] __x64_sys_sendmsg+0xd4/0x160 [ 640.145489][T31755] x64_sys_call+0x191e/0x2ff0 [ 640.145520][T31755] do_syscall_64+0xd2/0x200 [ 640.145563][T31755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 640.145596][T31755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 640.145681][T31755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.145717][T31755] RIP: 0033:0x7f4b3284ec29 [ 640.145737][T31755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.145887][T31755] RSP: 002b:00007f4b312af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.145913][T31755] RAX: ffffffffffffffda RBX: 00007f4b32a95fa0 RCX: 00007f4b3284ec29 [ 640.145946][T31755] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 640.145963][T31755] RBP: 00007f4b312af090 R08: 0000000000000000 R09: 0000000000000000 [ 640.145980][T31755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.145997][T31755] R13: 00007f4b32a96038 R14: 00007f4b32a95fa0 R15: 00007fffbfb15148 [ 640.146026][T31755] [ 640.151820][T31756] validate_nla: 1 callbacks suppressed [ 640.151838][T31756] netlink: 'syz.0.7869': attribute type 1 has an invalid length. [ 640.390531][T31767] loop7: detected capacity change from 0 to 512 [ 640.397063][T31771] loop1: detected capacity change from 0 to 128 [ 640.403644][T31767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 640.416512][T31771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7876'. [ 640.427016][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7872'. [ 640.429370][T31767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.459016][T31775] netlink: 'syz.6.7877': attribute type 13 has an invalid length. [ 640.467008][T31767] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.481503][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7876'. [ 640.490493][T31771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7876'. [ 640.532947][T31767] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 640.563503][T31781] sd 0:0:1:0: device reset [ 640.566513][T31767] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 640.580368][T31767] EXT4-fs (loop7): This should not happen!! Data will be lost [ 640.580368][T31767] [ 640.590512][T31767] EXT4-fs (loop7): Total free blocks count 0 [ 640.596504][T31767] EXT4-fs (loop7): Free/Dirty block details [ 640.602606][T31767] EXT4-fs (loop7): free_blocks=39626 [ 640.607940][T31767] EXT4-fs (loop7): dirty_blocks=15 [ 640.613345][T31767] EXT4-fs (loop7): Block reservation details [ 640.619389][T31767] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 640.664232][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.676930][T31788] loop1: detected capacity change from 0 to 512 [ 640.694091][T31788] EXT4-fs: Ignoring removed orlov option [ 640.702070][T31788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 640.704082][T31783] lo speed is unknown, defaulting to 1000 [ 640.727753][T31788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 640.743696][T31788] EXT4-fs (loop1): 1 orphan inode deleted [ 640.750261][T31788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.782858][T31795] loop7: detected capacity change from 0 to 512 [ 640.790075][T31795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 640.806681][T31798] netlink: 'syz.6.7885': attribute type 1 has an invalid length. [ 640.818375][T31795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.835666][T31795] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.842648][T31798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 640.859447][T31795] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 640.874860][T31795] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 640.887189][T31795] EXT4-fs (loop7): This should not happen!! Data will be lost [ 640.887189][T31795] [ 640.896955][T31795] EXT4-fs (loop7): Total free blocks count 0 [ 640.903086][T31795] EXT4-fs (loop7): Free/Dirty block details [ 640.908993][T31795] EXT4-fs (loop7): free_blocks=39626 [ 640.914300][T31795] EXT4-fs (loop7): dirty_blocks=15 [ 640.919427][T31795] EXT4-fs (loop7): Block reservation details [ 640.925451][T31795] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 640.931976][T31806] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 641.135099][T31820] 8021q: adding VLAN 0 to HW filter on device bond8 [ 641.161702][T31820] bond8 (unregistering): Released all slaves [ 641.273812][ T29] kauditd_printk_skb: 813 callbacks suppressed [ 641.273831][ T29] audit: type=1326 audit(1758500469.276:107181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.308395][ T29] audit: type=1326 audit(1758500469.276:107182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.333142][ T29] audit: type=1326 audit(1758500469.316:107183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.356990][ T29] audit: type=1326 audit(1758500469.316:107184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.380706][ T29] audit: type=1326 audit(1758500469.316:107185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.395636][T31826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.404425][ T29] audit: type=1326 audit(1758500469.336:107186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.404460][ T29] audit: type=1326 audit(1758500469.336:107187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.460414][ T29] audit: type=1326 audit(1758500469.336:107188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.461885][T31825] sd 0:0:1:0: device reset [ 641.491342][T31826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.511874][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.527312][T31823] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 641.580135][T31832] netlink: 'syz.6.7898': attribute type 1 has an invalid length. [ 641.585086][ T29] audit: type=1326 audit(1758500469.336:107189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.611698][ T29] audit: type=1326 audit(1758500469.336:107190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31824 comm="syz.6.7895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 641.620253][T31832] 8021q: adding VLAN 0 to HW filter on device bond10 [ 641.648723][T31828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.662541][T31828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.691224][T31828] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 641.882805][T31849] netlink: 'syz.1.7904': attribute type 46 has an invalid length. [ 641.990930][T31853] 8021q: adding VLAN 0 to HW filter on device bond11 [ 642.002235][T31853] bond11 (unregistering): Released all slaves [ 642.187872][T31863] loop7: detected capacity change from 0 to 512 [ 642.194693][T31863] EXT4-fs: Ignoring removed orlov option [ 642.201600][T31863] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 642.213467][T31863] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 642.228712][T31863] EXT4-fs (loop7): 1 orphan inode deleted [ 642.235847][T31863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.351485][T31866] lo speed is unknown, defaulting to 1000 [ 642.517687][T31870] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 642.713261][T31874] sd 0:0:1:0: device reset [ 642.760283][T31872] lo speed is unknown, defaulting to 1000 [ 642.824518][T31889] netlink: 'syz.1.7918': attribute type 13 has an invalid length. [ 642.832836][T31890] sd 0:0:1:0: device reset [ 643.002837][T31896] siw: device registration error -23 [ 643.009302][T31896] netlink: 'syz.4.7921': attribute type 46 has an invalid length. [ 643.057529][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.117357][T31903] __nla_validate_parse: 3 callbacks suppressed [ 643.117370][T31903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7924'. [ 643.147259][T31910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 643.178924][T31910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7926'. [ 643.229380][T31910] bond6 (unregistering): Released all slaves [ 643.270524][T31913] lo speed is unknown, defaulting to 1000 [ 643.406879][T31919] lo speed is unknown, defaulting to 1000 [ 643.505967][T31931] loop1: detected capacity change from 0 to 128 [ 643.507115][T31930] netlink: 'syz.7.7934': attribute type 13 has an invalid length. [ 643.537856][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7933'. [ 643.588461][T31931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7933'. [ 643.597472][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7933'. [ 643.683379][T31936] netlink: 'syz.1.7936': attribute type 1 has an invalid length. [ 643.720577][T31938] loop7: detected capacity change from 0 to 512 [ 643.727365][T31938] EXT4-fs: Ignoring removed orlov option [ 643.748505][T31938] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 643.792172][T31938] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 643.838370][T31938] EXT4-fs (loop7): 1 orphan inode deleted [ 643.853988][T31938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.901384][T31950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 643.914962][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7941'. [ 643.935571][T31950] bond7 (unregistering): Released all slaves [ 643.991484][T31952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7940'. [ 644.030997][T31958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7943'. [ 644.072783][T31964] loop6: detected capacity change from 0 to 512 [ 644.097927][T31964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.125544][T31964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.145116][T31964] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.168133][T31964] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 644.187595][T31970] loop1: detected capacity change from 0 to 512 [ 644.194794][T31964] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 644.207232][T31964] EXT4-fs (loop6): This should not happen!! Data will be lost [ 644.207232][T31964] [ 644.217002][T31964] EXT4-fs (loop6): Total free blocks count 0 [ 644.223133][T31964] EXT4-fs (loop6): Free/Dirty block details [ 644.229150][T31964] EXT4-fs (loop6): free_blocks=39626 [ 644.234443][T31964] EXT4-fs (loop6): dirty_blocks=15 [ 644.239931][T31964] EXT4-fs (loop6): Block reservation details [ 644.246064][T31964] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 644.248200][T31970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 644.267147][T31970] EXT4-fs (loop1): 1 truncate cleaned up [ 644.273726][T31970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.412365][T27551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.464391][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.470132][T31976] netlink: 'syz.6.7948': attribute type 1 has an invalid length. [ 644.589970][T31979] siw: device registration error -23 [ 644.852068][T31993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7953'. [ 645.260212][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.315597][T31996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.334919][T31996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7954'. [ 645.366723][T31996] bond7 (unregistering): Released all slaves [ 645.408520][T31999] loop7: detected capacity change from 0 to 512 [ 645.429017][T31999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 645.478336][T31999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.498361][T31999] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.552045][T31999] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 645.606841][T31999] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 645.619279][T31999] EXT4-fs (loop7): This should not happen!! Data will be lost [ 645.619279][T31999] [ 645.629071][T31999] EXT4-fs (loop7): Total free blocks count 0 [ 645.635078][T31999] EXT4-fs (loop7): Free/Dirty block details [ 645.641020][T31999] EXT4-fs (loop7): free_blocks=39626 [ 645.646507][T31999] EXT4-fs (loop7): dirty_blocks=15 [ 645.651814][T31999] EXT4-fs (loop7): Block reservation details [ 645.657825][T31999] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 645.799833][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.889335][T32017] validate_nla: 1 callbacks suppressed [ 645.889356][T32017] netlink: 'syz.7.7960': attribute type 1 has an invalid length. [ 646.015977][T32019] lo speed is unknown, defaulting to 1000 [ 646.327756][ T29] kauditd_printk_skb: 902 callbacks suppressed [ 646.327775][ T29] audit: type=1326 audit(1758500474.326:108093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.357862][ T29] audit: type=1326 audit(1758500474.326:108094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.512495][T32034] sd 0:0:1:0: device reset [ 646.527740][T32033] siw: device registration error -23 [ 646.534481][T32033] netlink: 'syz.0.7966': attribute type 46 has an invalid length. [ 646.625290][ T29] audit: type=1326 audit(1758500474.406:108095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.649053][ T29] audit: type=1326 audit(1758500474.406:108096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.672725][ T29] audit: type=1326 audit(1758500474.406:108097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.696492][ T29] audit: type=1326 audit(1758500474.416:108098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.720365][ T29] audit: type=1326 audit(1758500474.416:108099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.744174][ T29] audit: type=1326 audit(1758500474.416:108100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.767884][ T29] audit: type=1326 audit(1758500474.426:108101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.791669][ T29] audit: type=1326 audit(1758500474.426:108102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32030 comm="syz.7.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7854aeec29 code=0x7ffc0000 [ 646.841419][T32037] loop7: detected capacity change from 0 to 512 [ 646.850908][T32037] EXT4-fs: Ignoring removed orlov option [ 646.897795][T32037] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 646.963361][T32037] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 647.020995][T32037] EXT4-fs (loop7): 1 orphan inode deleted [ 647.053509][T32037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.496608][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.654458][T32059] lo speed is unknown, defaulting to 1000 [ 647.961274][T32062] netlink: 'syz.7.7974': attribute type 13 has an invalid length. [ 648.034998][T32064] sd 0:0:1:0: device reset [ 648.173422][T32068] __nla_validate_parse: 4 callbacks suppressed [ 648.173441][T32068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7977'. [ 648.344451][T32084] lo speed is unknown, defaulting to 1000 [ 648.377513][T32081] siw: device registration error -23 [ 648.384325][T32081] netlink: 'syz.0.7982': attribute type 46 has an invalid length. [ 648.469537][T32095] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 649.034096][T32115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7994'. [ 649.097619][T32121] sd 0:0:1:0: device reset [ 649.337755][T32140] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 649.576549][T32149] lo speed is unknown, defaulting to 1000 [ 649.717068][T32160] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 649.752190][T32162] sd 0:0:1:0: device reset [ 649.930741][T32169] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 650.084981][T32170] lo speed is unknown, defaulting to 1000 [ 650.374525][T32173] loop6: detected capacity change from 0 to 512 [ 650.406029][T32175] loop1: detected capacity change from 0 to 512 [ 650.413151][T32173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 650.421868][T32175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 650.441785][T32175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.455446][T32175] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.456434][T32173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.472879][T32175] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 650.498886][T32173] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.522331][T32175] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 650.534882][T32175] EXT4-fs (loop1): This should not happen!! Data will be lost [ 650.534882][T32175] [ 650.544838][T32175] EXT4-fs (loop1): Total free blocks count 0 [ 650.550884][T32175] EXT4-fs (loop1): Free/Dirty block details [ 650.556792][T32175] EXT4-fs (loop1): free_blocks=39626 [ 650.562367][T32175] EXT4-fs (loop1): dirty_blocks=15 [ 650.567567][T32175] EXT4-fs (loop1): Block reservation details [ 650.573642][T32175] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 650.606555][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.624741][T27551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.709333][T32199] loop6: detected capacity change from 0 to 128 [ 650.732745][T32197] pim6reg: entered allmulticast mode [ 650.744058][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8026'. [ 650.771604][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8029'. [ 650.792372][T32197] veth1_macvtap: left promiscuous mode [ 650.805936][T32204] loop1: detected capacity change from 0 to 512 [ 650.838586][T32204] EXT4-fs: Ignoring removed orlov option [ 650.860860][T32204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 650.886176][T32204] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 650.901704][T32204] EXT4-fs (loop1): 1 orphan inode deleted [ 650.910019][T32204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.924322][T32214] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 651.010521][T32220] loop7: detected capacity change from 0 to 512 [ 651.035843][T32220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 651.069323][T32220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.097726][T32220] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.135283][T32220] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 651.168158][T32220] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 651.180553][T32220] EXT4-fs (loop7): This should not happen!! Data will be lost [ 651.180553][T32220] [ 651.190221][T32220] EXT4-fs (loop7): Total free blocks count 0 [ 651.196292][T32220] EXT4-fs (loop7): Free/Dirty block details [ 651.202242][T32220] EXT4-fs (loop7): free_blocks=39626 [ 651.207536][T32220] EXT4-fs (loop7): dirty_blocks=15 [ 651.212697][T32220] EXT4-fs (loop7): Block reservation details [ 651.218793][T32220] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 651.253149][T32232] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 651.416993][ T29] kauditd_printk_skb: 1812 callbacks suppressed [ 651.417009][ T29] audit: type=1326 audit(1758500479.416:109915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.497438][ T29] audit: type=1326 audit(1758500479.416:109916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.521205][ T29] audit: type=1326 audit(1758500479.456:109917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.545344][ T29] audit: type=1326 audit(1758500479.456:109918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.569030][ T29] audit: type=1326 audit(1758500479.456:109919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.592862][ T29] audit: type=1326 audit(1758500479.466:109920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.616543][ T29] audit: type=1326 audit(1758500479.466:109921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.640586][ T29] audit: type=1326 audit(1758500479.466:109922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.640622][ T29] audit: type=1326 audit(1758500479.466:109923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.688134][ T29] audit: type=1326 audit(1758500479.466:109924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.6.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54758bec29 code=0x7ffc0000 [ 651.764459][T32251] sd 0:0:1:0: device reset [ 651.774063][T32247] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 651.803954][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.864838][T32256] netlink: 'syz.7.8049': attribute type 13 has an invalid length. [ 651.938640][T32263] loop6: detected capacity change from 0 to 512 [ 651.956637][T32263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 652.005063][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8051'. [ 652.019797][T32263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.061039][T32263] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.130112][T32269] sd 0:0:1:0: device reset [ 652.135879][T32263] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 652.198494][T32263] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 652.210838][T32263] EXT4-fs (loop6): This should not happen!! Data will be lost [ 652.210838][T32263] [ 652.220564][T32263] EXT4-fs (loop6): Total free blocks count 0 [ 652.226561][T32263] EXT4-fs (loop6): Free/Dirty block details [ 652.232544][T32263] EXT4-fs (loop6): free_blocks=39626 [ 652.237846][T32263] EXT4-fs (loop6): dirty_blocks=15 [ 652.242988][T32263] EXT4-fs (loop6): Block reservation details [ 652.249040][T32263] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 652.321648][T32270] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 652.515138][T32285] sd 0:0:1:0: device reset [ 652.569875][T32288] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 652.615442][T32283] lo speed is unknown, defaulting to 1000 [ 652.721012][T32299] sd 0:0:1:0: device reset [ 652.751423][T32303] loop6: detected capacity change from 0 to 512 [ 652.759870][T32303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 652.781310][T32303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.803638][T32303] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.939854][T32313] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 652.951567][T27551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.084600][T32316] lo speed is unknown, defaulting to 1000 [ 653.258833][T32323] loop1: detected capacity change from 0 to 128 [ 653.274439][T32323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8076'. [ 653.472501][T32332] sd 0:0:1:0: device reset [ 653.564798][T32342] loop7: detected capacity change from 0 to 512 [ 653.580001][T32342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.621840][T32342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.623327][T32346] loop6: detected capacity change from 0 to 512 [ 653.654710][T32342] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.731539][T32346] EXT4-fs: Ignoring removed orlov option [ 653.742325][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.748140][T32346] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 653.774340][T32346] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 653.799173][T32352] lo speed is unknown, defaulting to 1000 [ 653.812874][T32346] EXT4-fs (loop6): 1 orphan inode deleted [ 653.825752][T32346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.847771][T32359] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 653.956785][T32372] sd 0:0:1:0: device reset [ 653.970657][T32367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8089'. [ 653.995394][T32375] netlink: 'syz.7.8093': attribute type 13 has an invalid length. [ 654.003343][T32375] netlink: 'syz.7.8093': attribute type 17 has an invalid length. [ 654.225006][T32382] sd 0:0:1:0: device reset [ 654.307759][T32383] lo speed is unknown, defaulting to 1000 [ 654.359569][T27551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.563263][T32391] lo speed is unknown, defaulting to 1000 [ 654.887959][T32400] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 654.900103][T32399] loop4: detected capacity change from 0 to 512 [ 654.914875][T32399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 654.931634][T32399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.945942][T32399] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.993371][T32406] sd 0:0:1:0: device reset [ 655.021667][T32399] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 655.072130][T32399] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 655.084454][T32399] EXT4-fs (loop4): This should not happen!! Data will be lost [ 655.084454][T32399] [ 655.094112][T32399] EXT4-fs (loop4): Total free blocks count 0 [ 655.100139][T32399] EXT4-fs (loop4): Free/Dirty block details [ 655.106101][T32399] EXT4-fs (loop4): free_blocks=39626 [ 655.111522][T32399] EXT4-fs (loop4): dirty_blocks=15 [ 655.116680][T32399] EXT4-fs (loop4): Block reservation details [ 655.122719][T32399] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 655.193167][T32411] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 655.737662][T32450] sd 0:0:1:0: device reset [ 655.788036][T32452] sd 0:0:1:0: device reset [ 655.851022][T32456] netlink: 'syz.0.8122': attribute type 13 has an invalid length. [ 656.028414][T32464] sd 0:0:1:0: device reset [ 656.216471][T32473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8130'. [ 656.310705][T32478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.333006][T32481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8131'. [ 656.500429][T32487] loop1: detected capacity change from 0 to 512 [ 656.506798][ T29] kauditd_printk_skb: 1152 callbacks suppressed [ 656.506815][ T29] audit: type=1326 audit(1758500484.506:111077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 656.536951][ T29] audit: type=1326 audit(1758500484.506:111078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 656.560643][ T29] audit: type=1326 audit(1758500484.506:111079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 656.584639][ T29] audit: type=1326 audit(1758500484.506:111080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3e801ec63 code=0x7ffc0000 [ 656.608190][ T29] audit: type=1326 audit(1758500484.506:111081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3e801d6df code=0x7ffc0000 [ 656.631783][ T29] audit: type=1326 audit(1758500484.506:111082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa3e801ecb7 code=0x7ffc0000 [ 656.638170][T32487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.655805][ T29] audit: type=1326 audit(1758500484.506:111083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3e801d590 code=0x7ffc0000 [ 656.687535][ T29] audit: type=1326 audit(1758500484.506:111084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3e801e82b code=0x7ffc0000 [ 656.711348][ T29] audit: type=1326 audit(1758500484.506:111085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa3e801d88a code=0x7ffc0000 [ 656.735276][ T29] audit: type=1326 audit(1758500484.506:111086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32488 comm="syz.0.8134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa3e801d88a code=0x7ffc0000 [ 656.818668][T32487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.838154][T32487] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.951510][T32487] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 656.987799][T32487] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 657.000297][T32487] EXT4-fs (loop1): This should not happen!! Data will be lost [ 657.000297][T32487] [ 657.009998][T32487] EXT4-fs (loop1): Total free blocks count 0 [ 657.016045][T32487] EXT4-fs (loop1): Free/Dirty block details [ 657.022123][T32487] EXT4-fs (loop1): free_blocks=39626 [ 657.027525][T32487] EXT4-fs (loop1): dirty_blocks=15 [ 657.032672][T32487] EXT4-fs (loop1): Block reservation details [ 657.038715][T32487] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 657.068877][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.249542][T32517] loop4: detected capacity change from 0 to 128 [ 657.350197][T32523] sd 0:0:1:0: device reset [ 657.517585][T32544] sd 0:0:1:0: device reset [ 657.559352][T32547] loop4: detected capacity change from 0 to 128 [ 657.944329][T32558] siw: device registration error -23 [ 657.951105][T32558] netlink: 'syz.6.8163': attribute type 46 has an invalid length. [ 658.081380][T32562] lo speed is unknown, defaulting to 1000 [ 658.257683][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8167'. [ 658.336782][T32581] sd 0:0:1:0: device reset [ 658.395056][T32587] sd 0:0:1:0: device reset [ 658.438649][T32589] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 658.438726][T32590] sd 0:0:1:0: device reset [ 658.479880][T32592] loop1: detected capacity change from 0 to 512 [ 658.493631][T32592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 658.512506][T32592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.525333][T32592] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.544054][T32592] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 658.558843][T32592] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 658.571214][T32592] EXT4-fs (loop1): This should not happen!! Data will be lost [ 658.571214][T32592] [ 658.581061][T32592] EXT4-fs (loop1): Total free blocks count 0 [ 658.587078][T32592] EXT4-fs (loop1): Free/Dirty block details [ 658.593036][T32592] EXT4-fs (loop1): free_blocks=39626 [ 658.598359][T32592] EXT4-fs (loop1): dirty_blocks=15 [ 658.603500][T32592] EXT4-fs (loop1): Block reservation details [ 658.609508][T32592] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 658.623435][T32599] loop7: detected capacity change from 0 to 512 [ 658.648809][T25094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.654321][T32599] EXT4-fs: Ignoring removed orlov option [ 658.669767][T32599] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 658.680845][T32599] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 658.728812][T32599] EXT4-fs (loop7): 1 orphan inode deleted [ 658.743674][T32599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.751109][T32602] sd 0:0:1:0: device reset [ 658.769443][T32605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8180'. [ 658.927502][T32618] sd 0:0:1:0: device reset [ 659.008276][T32622] loop6: detected capacity change from 0 to 128 [ 659.125080][T32629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.134515][T32629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.134581][T32627] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 659.205443][T32633] sd 0:0:1:0: device reset [ 659.264884][T32637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8194'. [ 659.338533][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.359901][T32643] netlink: 200 bytes leftover after parsing attributes in process `syz.7.8196'. [ 659.382749][T32645] sd 0:0:1:0: device reset [ 659.405352][T32647] sd 0:0:1:0: device reset [ 659.631360][T32657] netlink: 'syz.1.8202': attribute type 13 has an invalid length. [ 659.785100][T32665] loop6: detected capacity change from 0 to 512 [ 659.809485][T32665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 659.822074][T32670] loop7: detected capacity change from 0 to 512 [ 659.841702][T32670] EXT4-fs: Ignoring removed orlov option [ 659.858489][T32670] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 659.869877][T32665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.888896][T32670] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 659.894967][T32672] lo speed is unknown, defaulting to 1000 [ 659.918165][T32665] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.934229][T32670] EXT4-fs (loop7): 1 orphan inode deleted [ 659.948436][T32670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.967863][T32665] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 660.010485][T32680] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8210'. [ 660.021343][T32665] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 660.034356][T32665] EXT4-fs (loop6): This should not happen!! Data will be lost [ 660.034356][T32665] [ 660.044065][T32665] EXT4-fs (loop6): Total free blocks count 0 [ 660.050231][T32665] EXT4-fs (loop6): Free/Dirty block details [ 660.056220][T32665] EXT4-fs (loop6): free_blocks=39626 [ 660.061631][T32665] EXT4-fs (loop6): dirty_blocks=15 [ 660.066752][T32665] EXT4-fs (loop6): Block reservation details [ 660.072925][T32665] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 660.081288][T32681] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 660.171724][T32691] FAULT_INJECTION: forcing a failure. [ 660.171724][T32691] name failslab, interval 1, probability 0, space 0, times 0 [ 660.184507][T32691] CPU: 0 UID: 0 PID: 32691 Comm: syz.6.8214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 660.184540][T32691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.184610][T32691] Call Trace: [ 660.184618][T32691] [ 660.184627][T32691] __dump_stack+0x1d/0x30 [ 660.184648][T32691] dump_stack_lvl+0xe8/0x140 [ 660.184667][T32691] dump_stack+0x15/0x1b [ 660.184683][T32691] should_fail_ex+0x265/0x280 [ 660.184707][T32691] should_failslab+0x8c/0xb0 [ 660.184789][T32691] kmem_cache_alloc_noprof+0x50/0x310 [ 660.184819][T32691] ? getname_flags+0x80/0x3b0 [ 660.184902][T32691] getname_flags+0x80/0x3b0 [ 660.184938][T32691] __se_sys_quotactl+0x16a/0x670 [ 660.184975][T32691] ? fput+0x8f/0xc0 [ 660.185005][T32691] __x64_sys_quotactl+0x55/0x70 [ 660.185024][T32691] x64_sys_call+0x15d6/0x2ff0 [ 660.185050][T32691] do_syscall_64+0xd2/0x200 [ 660.185145][T32691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 660.185184][T32691] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 660.185221][T32691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.185244][T32691] RIP: 0033:0x7f54758bec29 [ 660.185273][T32691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.185302][T32691] RSP: 002b:00007f5474327038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 660.185327][T32691] RAX: ffffffffffffffda RBX: 00007f5475b05fa0 RCX: 00007f54758bec29 [ 660.185339][T32691] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffff80000800 [ 660.185351][T32691] RBP: 00007f5474327090 R08: 0000000000000000 R09: 0000000000000000 [ 660.185370][T32691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.185382][T32691] R13: 00007f5475b06038 R14: 00007f5475b05fa0 R15: 00007fff2d41bc08 [ 660.185403][T32691] [ 660.391668][T32696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.405335][T32696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.413744][T32694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8216'. [ 660.415032][T32696] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 660.438168][T32700] netlink: 'syz.6.8218': attribute type 13 has an invalid length. [ 660.536313][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.575151][T32712] sd 0:0:1:0: device reset [ 660.597310][T32716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32716 comm=syz.4.8226 [ 660.610436][T32716] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8226'. [ 660.694354][T32724] loop7: detected capacity change from 0 to 512 [ 660.707265][T32724] EXT4-fs: Ignoring removed orlov option [ 660.716246][T32724] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 660.729832][T32724] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 660.744876][T32724] EXT4-fs (loop7): 1 orphan inode deleted [ 660.751427][T32724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.836291][T32732] loop4: detected capacity change from 0 to 512 [ 660.847656][T32732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 660.910364][T32732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.941604][T32733] lo speed is unknown, defaulting to 1000 [ 660.947621][T32732] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.046698][T32732] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 661.093551][T32732] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 661.105922][T32732] EXT4-fs (loop4): This should not happen!! Data will be lost [ 661.105922][T32732] [ 661.115729][T32732] EXT4-fs (loop4): Total free blocks count 0 [ 661.122004][T32732] EXT4-fs (loop4): Free/Dirty block details [ 661.128023][T32732] EXT4-fs (loop4): free_blocks=39626 [ 661.133558][T32732] EXT4-fs (loop4): dirty_blocks=15 [ 661.138845][T32732] EXT4-fs (loop4): Block reservation details [ 661.144959][T32732] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 661.234408][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.271694][T32750] sd 0:0:1:0: device reset [ 661.324245][T32752] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 661.348949][T32754] loop4: detected capacity change from 0 to 512 [ 661.356517][T32754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 661.394606][T32754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.450609][T32754] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.465235][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.511005][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 661.511023][ T29] audit: type=1326 audit(1758500489.506:111607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.4.8240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 661.542733][T32754] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 661.560684][T32758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8241'. [ 661.598615][T32754] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 661.611082][T32754] EXT4-fs (loop4): This should not happen!! Data will be lost [ 661.611082][T32754] [ 661.620782][T32754] EXT4-fs (loop4): Total free blocks count 0 [ 661.626781][T32754] EXT4-fs (loop4): Free/Dirty block details [ 661.632713][T32754] EXT4-fs (loop4): free_blocks=39626 [ 661.638076][T32754] EXT4-fs (loop4): dirty_blocks=15 [ 661.643211][T32754] EXT4-fs (loop4): Block reservation details [ 661.649244][T32754] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 661.770855][ T29] audit: type=1326 audit(1758500489.776:111608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.4.8240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 661.770875][T32760] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 661.806911][ T29] audit: type=1326 audit(1758500489.776:111609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.4.8240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 661.867333][T32763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.875903][T32763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.917006][T32763] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 661.957316][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.017118][ T29] audit: type=1326 audit(1758500490.016:111610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=311 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.111399][ T314] netlink: 'syz.4.8247': attribute type 13 has an invalid length. [ 662.128668][ T29] audit: type=1326 audit(1758500490.066:111611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=311 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.128840][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.152325][ T29] audit: type=1326 audit(1758500490.066:111612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=311 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.186308][ T29] audit: type=1326 audit(1758500490.066:111613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=311 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.382595][T32764] lo speed is unknown, defaulting to 1000 [ 662.394077][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.458221][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.486247][ T29] audit: type=1326 audit(1758500490.486:111614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=320 comm="syz.4.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.518591][ T323] sd 0:0:1:0: device reset [ 662.558712][ T29] audit: type=1326 audit(1758500490.486:111615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=320 comm="syz.4.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.582258][ T29] audit: type=1326 audit(1758500490.486:111616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=320 comm="syz.4.8249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 662.697442][ T335] loop7: detected capacity change from 0 to 512 [ 662.724462][ T31] bridge_slave_1: left allmulticast mode [ 662.730211][ T31] bridge_slave_1: left promiscuous mode [ 662.735906][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.766472][ T335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.788707][ T338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8254'. [ 662.798452][ T335] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.809875][ T31] bridge_slave_0: left promiscuous mode [ 662.815755][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.833521][ T335] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.373359][ T348] loop6: detected capacity change from 0 to 512 [ 663.382447][ T348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 663.400349][ T348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.413049][ T348] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.433795][ T348] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 663.449019][ T348] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 663.461573][ T348] EXT4-fs (loop6): This should not happen!! Data will be lost [ 663.461573][ T348] [ 663.471478][ T348] EXT4-fs (loop6): Total free blocks count 0 [ 663.477475][ T348] EXT4-fs (loop6): Free/Dirty block details [ 663.483410][ T348] EXT4-fs (loop6): free_blocks=39626 [ 663.488765][ T348] EXT4-fs (loop6): dirty_blocks=15 [ 663.493900][ T348] EXT4-fs (loop6): Block reservation details [ 663.499958][ T348] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 663.508408][ T352] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 663.522524][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.534689][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.544654][ T31] bond0 (unregistering): Released all slaves [ 663.554129][ T31] bond1 (unregistering): Released all slaves [ 663.563028][ T31] bond2 (unregistering): Released all slaves [ 663.572120][ T31] bond3 (unregistering): Released all slaves [ 663.581725][ T31] bond4 (unregistering): Released all slaves [ 663.600371][ T31] bond5 (unregistering): Released all slaves [ 663.611391][ T31] bond6 (unregistering): Released all slaves [ 663.629173][T32764] chnl_net:caif_netlink_parms(): no params data found [ 663.644279][ T346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8256'. [ 663.690396][ T359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8260'. [ 663.693205][ T357] sd 0:0:1:0: device reset [ 663.743244][ T31] hsr_slave_0: left promiscuous mode [ 663.755932][ T31] hsr_slave_1: left promiscuous mode [ 663.773675][ T31] veth1_macvtap: left promiscuous mode [ 663.779384][ T31] veth0_macvtap: left promiscuous mode [ 663.784948][ T31] veth1_vlan: left promiscuous mode [ 663.790251][ T31] veth0_vlan: left promiscuous mode [ 663.884100][ T31] team0 (unregistering): Port device team_slave_1 removed [ 663.899361][ T31] team0 (unregistering): Port device team_slave_0 removed [ 663.917642][ T373] netlink: 'syz.7.8258': attribute type 13 has an invalid length. [ 663.947214][ T10] lo speed is unknown, defaulting to 1000 [ 663.953216][ T10] infiniband syz2: ib_query_port failed (-19) [ 664.094231][ T377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8265'. [ 664.442326][T32764] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.449448][T32764] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.457790][T32764] bridge_slave_0: entered allmulticast mode [ 664.470487][T32764] bridge_slave_0: entered promiscuous mode [ 664.481450][T32764] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.488601][T32764] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.495806][T32764] bridge_slave_1: entered allmulticast mode [ 664.505215][T32764] bridge_slave_1: entered promiscuous mode [ 664.539297][ T384] sd 0:0:1:0: device reset [ 664.543510][T32764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.558586][ T386] loop4: detected capacity change from 0 to 128 [ 664.566454][T32764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.620336][ T389] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8270'. [ 664.632532][T32764] team0: Port device team_slave_0 added [ 664.641782][ T393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8271'. [ 664.642278][T32764] team0: Port device team_slave_1 added [ 664.688947][T32764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.696014][T32764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.722120][T32764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.734475][ T399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8272'. [ 664.747901][ T400] loop7: detected capacity change from 0 to 512 [ 664.754879][ T400] EXT4-fs: Ignoring removed orlov option [ 664.761204][ T400] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 664.761659][T32764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.772885][ T400] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 664.778130][T32764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.793367][ T400] EXT4-fs (loop7): 1 orphan inode deleted [ 664.818390][T32764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.837400][ T400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.864127][ T405] loop4: detected capacity change from 0 to 512 [ 664.884793][ T405] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 664.901425][T32764] hsr_slave_0: entered promiscuous mode [ 664.907525][T32764] hsr_slave_1: entered promiscuous mode [ 664.924560][ T405] EXT4-fs (loop4): mount failed [ 664.931122][ T31] IPVS: stop unused estimator thread 0... [ 664.964833][ T417] netlink: 'syz.6.8278': attribute type 13 has an invalid length. [ 664.993473][ T414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.002165][ T414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.011740][ T414] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 665.086147][ T420] sd 0:0:1:0: device reset [ 665.121005][ T424] sd 0:0:1:0: device reset [ 665.359508][ T438] loop4: detected capacity change from 0 to 512 [ 665.367195][ T438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 665.382817][T32764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 665.393999][T32764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 665.401619][ T438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.403515][T32764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.419508][ T438] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.469357][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.494587][ T438] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 665.511337][ T438] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 665.523750][ T438] EXT4-fs (loop4): This should not happen!! Data will be lost [ 665.523750][ T438] [ 665.533444][ T438] EXT4-fs (loop4): Total free blocks count 0 [ 665.539466][ T438] EXT4-fs (loop4): Free/Dirty block details [ 665.545437][ T438] EXT4-fs (loop4): free_blocks=39626 [ 665.550784][ T438] EXT4-fs (loop4): dirty_blocks=15 [ 665.555945][ T438] EXT4-fs (loop4): Block reservation details [ 665.562019][ T438] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 665.578632][ T443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 665.762084][T32764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.839482][ T453] netlink: 'syz.0.8289': attribute type 13 has an invalid length. [ 665.850247][T32764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.863015][ T455] loop4: detected capacity change from 0 to 1024 [ 665.902634][ T455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.933343][T32764] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.940887][ T459] loop7: detected capacity change from 0 to 512 [ 665.948206][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.955298][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.965324][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.976306][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.983445][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.001661][ T459] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 666.028132][ T459] EXT4-fs (loop7): mount failed [ 666.095380][ T479] loop4: detected capacity change from 0 to 512 [ 666.124019][T32764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.169137][ T479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.186901][ T484] sd 0:0:1:0: device reset [ 666.220393][ T479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.273724][ T479] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.308964][T32764] veth0_vlan: entered promiscuous mode [ 666.316741][T32764] veth1_vlan: entered promiscuous mode [ 666.318844][ T479] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 666.362203][ T479] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 666.374565][ T479] EXT4-fs (loop4): This should not happen!! Data will be lost [ 666.374565][ T479] [ 666.384357][ T479] EXT4-fs (loop4): Total free blocks count 0 [ 666.387420][T32764] veth0_macvtap: entered promiscuous mode [ 666.390599][ T479] EXT4-fs (loop4): Free/Dirty block details [ 666.402128][ T479] EXT4-fs (loop4): free_blocks=39626 [ 666.407537][ T479] EXT4-fs (loop4): dirty_blocks=15 [ 666.412748][ T479] EXT4-fs (loop4): Block reservation details [ 666.418803][ T479] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 666.426861][T32764] veth1_macvtap: entered promiscuous mode [ 666.468050][T32764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.480763][ T506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8303'. [ 666.510365][T32764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.519184][ T29] kauditd_printk_skb: 728 callbacks suppressed [ 666.519198][ T29] audit: type=1326 audit(1758500494.526:112343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=505 comm="syz.0.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.549138][ T29] audit: type=1326 audit(1758500494.526:112344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=505 comm="syz.0.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.579495][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.590114][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.601226][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.611280][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.639673][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.663215][ T29] audit: type=1326 audit(1758500494.656:112345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.686909][ T29] audit: type=1326 audit(1758500494.656:112346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.710448][ T29] audit: type=1326 audit(1758500494.656:112347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.734186][ T29] audit: type=1326 audit(1758500494.656:112348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.757760][ T29] audit: type=1326 audit(1758500494.656:112349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e801ec29 code=0x7ffc0000 [ 666.868627][ T29] audit: type=1326 audit(1758500494.866:112350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=532 comm="syz.4.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 666.892319][ T29] audit: type=1326 audit(1758500494.866:112351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=532 comm="syz.4.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 666.898899][ T534] sd 0:0:1:0: device reset [ 666.915956][ T29] audit: type=1326 audit(1758500494.866:112352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=532 comm="syz.4.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3284ec29 code=0x7ffc0000 [ 666.970400][ T544] loop7: detected capacity change from 0 to 512 [ 666.976995][ T545] loop4: detected capacity change from 0 to 512 [ 666.983431][ T544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.983535][ T545] ================================================================== [ 666.983578][ T545] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 666.983636][ T545] [ 666.983644][ T545] write to 0xffffffff868b3f68 of 88 bytes by task 544 on cpu 1: [ 666.983664][ T545] prb_reserve+0x696/0xaf0 [ 666.983699][ T545] vprintk_store+0x56d/0x860 [ 666.983716][ T545] vprintk_emit+0x178/0x650 [ 666.983738][ T545] vprintk_default+0x26/0x30 [ 666.983761][ T545] vprintk+0x1d/0x30 [ 666.983791][ T545] _printk+0x79/0xa0 [ 666.983824][ T545] __ext4_msg+0x135/0x1a0 [ 666.983861][ T545] ext4_check_opt_consistency+0xb05/0xb10 [ 666.983901][ T545] ext4_fill_super+0x192c/0x35d0 [ 666.983933][ T545] get_tree_bdev_flags+0x28e/0x300 [ 666.983954][ T545] get_tree_bdev+0x1f/0x30 [ 666.983972][ T545] ext4_get_tree+0x1c/0x30 [ 666.984000][ T545] vfs_get_tree+0x57/0x1d0 [ 666.984019][ T545] do_new_mount+0x207/0x5e0 [ 666.984038][ T545] path_mount+0x4a4/0xb20 [ 666.984055][ T545] __se_sys_mount+0x28f/0x2e0 [ 666.984074][ T545] __x64_sys_mount+0x67/0x80 [ 666.984093][ T545] x64_sys_call+0x2b4d/0x2ff0 [ 666.984112][ T545] do_syscall_64+0xd2/0x200 [ 666.984140][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.984158][ T545] [ 666.984163][ T545] read to 0xffffffff868b3f68 of 8 bytes by task 545 on cpu 0: [ 666.984177][ T545] _prb_read_valid+0x1c4/0x920 [ 666.984204][ T545] prb_read_valid+0x3c/0x60 [ 666.984243][ T545] printk_get_next_message+0xc8/0x510 [ 666.984262][ T545] console_flush_all+0x290/0x730 [ 666.984280][ T545] console_unlock+0xa1/0x330 [ 666.984295][ T545] vprintk_emit+0x388/0x650 [ 666.984309][ T545] vprintk_default+0x26/0x30 [ 666.984325][ T545] vprintk+0x1d/0x30 [ 666.984344][ T545] _printk+0x79/0xa0 [ 666.984366][ T545] set_capacity_and_notify+0x14c/0x1f0 [ 666.984389][ T545] loop_set_size+0x2e/0x70 [ 666.984405][ T545] loop_configure+0x825/0x9c0 [ 666.984421][ T545] lo_ioctl+0x1e1/0x12b0 [ 666.984435][ T545] blkdev_ioctl+0x34f/0x440 [ 666.984456][ T545] __se_sys_ioctl+0xce/0x140 [ 666.984471][ T545] __x64_sys_ioctl+0x43/0x50 [ 666.984485][ T545] x64_sys_call+0x1816/0x2ff0 [ 666.984503][ T545] do_syscall_64+0xd2/0x200 [ 666.984531][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.984548][ T545] [ 666.984552][ T545] value changed: 0x000000000000251d -> 0x000000000000451d [ 666.984561][ T545] [ 666.984564][ T545] Reported by Kernel Concurrency Sanitizer on: [ 666.984573][ T545] CPU: 0 UID: 0 PID: 545 Comm: syz.4.8318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 666.984593][ T545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 666.984604][ T545] ================================================================== [ 667.002614][ T544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.011003][ T545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 667.019213][ T544] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.048556][ T539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8314'. [ 667.076875][ T545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.080115][T27787] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.083215][ T545] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.105988][ T553] loop1: detected capacity change from 0 to 512 [ 667.121471][ T545] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 667.122909][ T553] EXT4-fs: Ignoring removed orlov option [ 667.126399][ T545] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 667.131602][ T553] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 667.144241][ T545] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 667.147887][ T553] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 667.150739][ T545] EXT4-fs (loop4): This should not happen!! Data will be lost [ 667.150739][ T545] [ 667.155218][ T553] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 667.155750][ T553] EXT4-fs (loop1): 1 orphan inode deleted [ 667.159244][ T545] EXT4-fs (loop4): Total free blocks count 0 [ 667.163750][ T553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.168626][ T545] EXT4-fs (loop4): Free/Dirty block details [ 667.168647][ T545] EXT4-fs (loop4): free_blocks=39626 [ 667.168660][ T545] EXT4-fs (loop4): dirty_blocks=15 [ 667.168671][ T545] EXT4-fs (loop4): Block reservation details [ 667.168701][ T545] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 667.471798][T25876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.716753][T32764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.