last executing test programs: 8.323276876s ago: executing program 3 (id=2655): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 8.020809911s ago: executing program 0 (id=2656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r9 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r8, 0x4, r3, r0) r11 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r11, 0x0) shmat(r11, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 7.740265075s ago: executing program 0 (id=2659): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) capset(&(0x7f0000000080)={0x20080522}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x818404, &(0x7f00000000c0)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRESDEC=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX], 0x0, 0x300, &(0x7f0000000540)="$eJzs3c9rE1sUwPEzSdMk7etLF4/H4/EeXCqIIh2agHuLtCAGlLYRrChM7VRDpklJQiFFbBaC/4OLLlyKIII7NyJu68K/wF87N93ZRfHKZGbSNInTqMS29vtZtKe558y9nXvTprfJxKhHlwtLCfHomB/IqEQk6sd1Of1q493/sy//8L5WanpyLp1RKiIi1+48HntRHb7y7M/ncdkcvfFpK/Nx8785kS9ztyWi8hVV1FpZaqFUqhpu8WK+UjCVuuzYVsVW+WLFLlf9dmvBsdWSU1pZqSmruDgylBSRirKKNVWwa6paUtVyTVm3rHxRmaapRoYEjckKRDrajLDC3KNtrWVLa63jddFad8muB0GwNuI/N1gcJm3zH5rbsTii/RwZfoVtPSBR6W3+8fvx7v/vHzD/x9Ps1fmLk9ns1Mx1lRBZvr+aW815n732t8OSF0ds2Zg5M78j7hrxieF+nL6QnZpQDaNycnndr19fzXm/HCaX/Pq0pNzHKS31EtSnvXq1tz4mQ631GUnJX93rM0G9RFrqB+XUiZZ6U1Ly5qaUxJFF95FuS/3dtFLnL2Xb+k828gAAAAAAAAAAOIpM1bS7f280/9WbNM144xkfzfake7Ob5yU099cnJCU73ffnJ7ru7w/IvwMH+I0DAAAAAHCMVGprBctx7HJ/gujDZEgXMRFxA5F7Y+5gQg/4tz/i3nofFJHOpmizC73vcZJnvf6ezPgDk36eqCBIhJ+E/YLgxRoFy3kaNCWlW7L3SpHXPS6A8cGuZz5RNqSv62dPIL0kSyJ8Yce/UR7veWm1B8ZOcMs/XXO0sf9xtOXE7HIltlaQ3RkMrTr3XXeHtqAQb85g+4ka/+Ad1wn5ofG5ucUHAAAA4Ahp+cMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAckB+6Eltw3f69TeK/RXznJdna3yee6/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOIS+BgAA//9+jKoF") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 7.570208178s ago: executing program 0 (id=2662): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 5.954998482s ago: executing program 2 (id=2667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 5.667752796s ago: executing program 0 (id=2670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.504343128s ago: executing program 4 (id=2672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c000280050001"], 0x138}}, 0x4) 5.40222208s ago: executing program 4 (id=2673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x17, 0x1, 0x7ffc1ffb}]}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xb71d) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000005c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") (async) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x29, &(0x7f00000003c0)={0x28, 0x0, 0x3}) (async) setitimer(0x1, &(0x7f0000001840), 0x0) (async) mlockall(0x7) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r8, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) (async) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700082c00fe800000000000000000000000000000ff02000000000000000000000000000181008078"], 0x0) 5.354087221s ago: executing program 4 (id=2674): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 4.801919718s ago: executing program 3 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 4.217721347s ago: executing program 2 (id=2677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="04000000000000006608000000000000180000000000000000020000000000000000000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100001100000007010000f8ffffffb702000008000000b5ffffffffffffff840000000695"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x66}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 4.173189228s ago: executing program 3 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a0000400000001800000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 3.581657327s ago: executing program 0 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 3.432351449s ago: executing program 2 (id=2680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.431634829s ago: executing program 2 (id=2681): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 3.114154884s ago: executing program 3 (id=2682): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") 2.327556795s ago: executing program 1 (id=2684): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), &(0x7f0000000280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r5 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x67076776a3ced4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES32=r5], &(0x7f0000000380)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0xe1ea39ef38f1c56b, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000340)={0x80000000, 0xffffffbc, 0x0, 0x800}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='bcache_alloc\x00', r7}, 0x18) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x2) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) 2.126870248s ago: executing program 3 (id=2685): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$inet(r7, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 2.02969335s ago: executing program 0 (id=2686): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 1.98826285s ago: executing program 4 (id=2687): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x5, 0xffffffff, 0x4, 0x3, 0x2, 0x9, 0x7b, 0x0, 0x6}) 1.588292616s ago: executing program 1 (id=2688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 1.187478702s ago: executing program 2 (id=2689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 1.149941333s ago: executing program 3 (id=2690): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) pivot_root(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x64000600) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ef915fc0f6f0f952646c2100000000002020207b1af8ff00000000bfa10000ffb702000008000000b703d4f000000d00850000001000000300000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40) 1.028335905s ago: executing program 4 (id=2691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f0000000180)="3f82090ccda4f8ce11f43ea8b51b08afd200c6075794cd", 0x17}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d9a26", 0xd5}, {&(0x7f0000000cc0)="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", 0x117}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65c0a44b21b4c8724f61f6ca10d9", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x3b1}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (fail_nth: 1) 646.40217ms ago: executing program 1 (id=2692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xc2d00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='sys_enter\x00', r0}, 0x18) fallocate(0xffffffffffffffff, 0x0, 0x803, 0x2000404) 424.243874ms ago: executing program 1 (id=2693): futex(&(0x7f0000000000)=0x1, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r2], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="829c", 0x2}], 0x1}}], 0x1, 0x4400c800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a01040000000000001e000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007f00000000c0a01020000000000000000010000000900020073797a3200000000c4000380c0000080040001800800034000000001b0000b80100001800b00010064796e73657400000c0001800800010066696200100001800a000100696e6e6572000000200001800c000100636f756e74657200100002800c000240800000000000000024000180090001006d6574610000000014000280080001400000000008000340000000153c0001800b00010074756e6e656c00002c000280080001400000000108000340000000000800014000000001080002400000001d08000240000000160900010073797a30"], 0x17c}}, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") 420.202344ms ago: executing program 1 (id=2694): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) getpid() r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_pidfd_open(r0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') process_madvise(r3, 0x0, 0x0, 0x19, 0x0) 347.352875ms ago: executing program 1 (id=2695): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x198}, &(0x7f0000000000), &(0x7f0000000280)) r6 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r6, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x918f, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e0002", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000010000000000"], 0x44, 0x3) syz_open_dev$sg(&(0x7f0000000440), 0xce3, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a320000000014"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 79.220479ms ago: executing program 2 (id=2696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) getegid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 4 (id=2697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) kernel console output (not intermixed with test programs): it: type=1326 audit(1751525008.166:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 653.747073][ T29] audit: type=1326 audit(1751525008.166:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 653.770804][ T29] audit: type=1326 audit(1751525008.166:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 653.794425][ T29] audit: type=1326 audit(1751525008.166:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 653.817949][ T29] audit: type=1326 audit(1751525008.166:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 654.737601][T18767] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2342'. [ 654.990044][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.085074][T18784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2343'. [ 655.421220][T18806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.433183][T18808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2346'. [ 655.468356][T18806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.507630][T18806] loop4: detected capacity change from 0 to 512 [ 655.559637][T18806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 655.597597][T18806] EXT4-fs (loop4): orphan cleanup on readonly fs [ 655.610695][T18806] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2345: bg 0: block 248: padding at end of block bitmap is not set [ 655.645576][T18806] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2345: Failed to acquire dquot type 1 [ 655.667664][T18806] EXT4-fs (loop4): 1 truncate cleaned up [ 655.680004][T18806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.693838][T18821] loop1: detected capacity change from 0 to 256 [ 655.761220][T18821] msdos: Unknown parameter 'dLts' [ 655.993164][T18831] loop1: detected capacity change from 0 to 128 [ 655.999958][T18831] EXT4-fs: test_dummy_encryption option not supported [ 656.044122][T18832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18832 comm=syz.2.2348 [ 657.731632][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 657.731647][ T29] audit: type=1326 audit(1751525012.236:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 657.847357][T18862] loop1: detected capacity change from 0 to 1024 [ 657.901643][ T29] audit: type=1326 audit(1751525012.286:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 657.925279][ T29] audit: type=1326 audit(1751525012.286:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 657.948815][ T29] audit: type=1326 audit(1751525012.286:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 657.972337][ T29] audit: type=1326 audit(1751525012.286:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 657.996247][ T29] audit: type=1326 audit(1751525012.286:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 658.372605][ T29] audit: type=1326 audit(1751525012.536:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 658.396204][ T29] audit: type=1326 audit(1751525012.536:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 658.419770][ T29] audit: type=1326 audit(1751525012.536:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 658.443299][ T29] audit: type=1326 audit(1751525012.536:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 658.680523][T18868] loop2: detected capacity change from 0 to 1024 [ 658.888725][T18874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2353'. [ 658.983348][T18876] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2354'. [ 659.068917][T18883] loop0: detected capacity change from 0 to 512 [ 659.092125][T18883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 659.114419][T18883] EXT4-fs (loop0): orphan cleanup on readonly fs [ 659.174934][T18883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2355: bg 0: block 248: padding at end of block bitmap is not set [ 659.234772][T18888] hub 6-0:1.0: USB hub found [ 659.251871][T18883] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2355: Failed to acquire dquot type 1 [ 659.270431][T18888] hub 6-0:1.0: 8 ports detected [ 659.389102][T18883] EXT4-fs (loop0): 1 truncate cleaned up [ 659.409340][T18883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 659.451666][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.566170][T18903] loop0: detected capacity change from 0 to 128 [ 659.589055][T18903] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 659.597006][T18903] FAT-fs (loop0): Filesystem has been set read-only [ 659.624137][T18903] syz.0.2360: attempt to access beyond end of device [ 659.624137][T18903] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 659.639985][T18903] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 659.647888][T18903] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 659.656767][T18903] syz.0.2360: attempt to access beyond end of device [ 659.656767][T18903] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.689087][T18903] syz.0.2360: attempt to access beyond end of device [ 659.689087][T18903] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.728885][T18911] syz.0.2360: attempt to access beyond end of device [ 659.728885][T18911] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.746851][T18903] syz.0.2360: attempt to access beyond end of device [ 659.746851][T18903] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.760684][T18903] syz.0.2360: attempt to access beyond end of device [ 659.760684][T18903] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.774029][T18911] syz.0.2360: attempt to access beyond end of device [ 659.774029][T18911] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.787426][T18903] syz.0.2360: attempt to access beyond end of device [ 659.787426][T18903] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.813565][T18903] syz.0.2360: attempt to access beyond end of device [ 659.813565][T18903] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 659.826971][T18911] syz.0.2360: attempt to access beyond end of device [ 659.826971][T18911] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 660.301682][T18932] loop1: detected capacity change from 0 to 512 [ 660.309263][T18932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 660.318747][T18932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 660.326360][T18932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2361: bg 0: block 248: padding at end of block bitmap is not set [ 660.341193][T18932] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2361: Failed to acquire dquot type 1 [ 660.354661][T18932] EXT4-fs (loop1): 1 truncate cleaned up [ 660.361398][T18932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.541009][T18942] loop2: detected capacity change from 0 to 1024 [ 660.777762][T18967] loop0: detected capacity change from 0 to 512 [ 660.810516][T18967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 660.862970][T18967] EXT4-fs (loop0): orphan cleanup on readonly fs [ 660.981238][T18967] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2363: bg 0: block 248: padding at end of block bitmap is not set [ 661.012409][T18967] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2363: Failed to acquire dquot type 1 [ 661.120225][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.502020][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.017454][T18967] EXT4-fs (loop0): 1 truncate cleaned up [ 662.817359][T18999] loop1: detected capacity change from 0 to 512 [ 662.834395][T18999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 662.846956][T18999] EXT4-fs (loop1): orphan cleanup on readonly fs [ 663.028602][T18999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2365: bg 0: block 248: padding at end of block bitmap is not set [ 663.043297][T18999] __quota_error: 161 callbacks suppressed [ 663.043312][T18999] Quota error (device loop1): write_blk: dquota write failed [ 663.056580][T18999] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 663.066563][T18999] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2365: Failed to acquire dquot type 1 [ 663.079690][T18999] EXT4-fs (loop1): 1 truncate cleaned up [ 663.086442][T18999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 663.088784][T18967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 663.172144][T19008] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2368'. [ 663.223409][T18999] syz.1.2365 (18999) used greatest stack depth: 9096 bytes left [ 663.746016][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.783426][T19042] loop3: detected capacity change from 0 to 512 [ 663.790244][T19042] EXT4-fs: Ignoring removed oldalloc option [ 663.805408][T19042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 663.828846][T19042] EXT4-fs (loop3): orphan cleanup on readonly fs [ 663.838912][T19042] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 663.848497][T19042] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 663.857937][T19042] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2371: Failed to acquire dquot type 1 [ 663.909037][T19042] EXT4-fs (loop3): 1 truncate cleaned up [ 663.919051][T19042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 664.518601][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.259891][T19061] loop1: detected capacity change from 0 to 512 [ 665.289449][T19061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 665.410303][T19061] EXT4-fs (loop1): orphan cleanup on readonly fs [ 665.465959][T19061] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2376: bg 0: block 248: padding at end of block bitmap is not set [ 665.483271][T19061] Quota error (device loop1): write_blk: dquota write failed [ 665.490783][T19061] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 665.500912][T19061] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2376: Failed to acquire dquot type 1 [ 665.518795][T19061] EXT4-fs (loop1): 1 truncate cleaned up [ 665.525046][T19061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.543310][T19064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2377'. [ 665.600546][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.716737][T19069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2378'. [ 665.947996][ T29] audit: type=1326 audit(1751525020.446:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19076 comm="syz.4.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 665.976721][T19082] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2381'. [ 665.976865][ T29] audit: type=1326 audit(1751525020.446:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19076 comm="syz.4.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 666.009225][ T29] audit: type=1326 audit(1751525020.446:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19076 comm="syz.4.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 666.032865][ T29] audit: type=1326 audit(1751525020.446:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19076 comm="syz.4.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 666.115876][T19079] loop4: detected capacity change from 0 to 1024 [ 666.184698][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.249434][T19089] loop3: detected capacity change from 0 to 512 [ 666.272547][T19089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.298934][T19089] EXT4-fs (loop3): orphan cleanup on readonly fs [ 666.306025][T19089] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2383: bg 0: block 248: padding at end of block bitmap is not set [ 666.320683][T19089] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2383: Failed to acquire dquot type 1 [ 666.333020][T19089] EXT4-fs (loop3): 1 truncate cleaned up [ 666.647365][T19092] loop2: detected capacity change from 0 to 1024 [ 666.829787][T19089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 666.905656][T19100] loop4: detected capacity change from 0 to 512 [ 666.917044][T19102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2384'. [ 666.926922][T19100] EXT4-fs: Ignoring removed oldalloc option [ 666.936731][T19100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.973058][T19100] EXT4-fs (loop4): orphan cleanup on readonly fs [ 667.017502][T19100] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2386: Failed to acquire dquot type 1 [ 667.039098][T19100] EXT4-fs (loop4): 1 truncate cleaned up [ 667.048895][T19100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.094558][T19105] loop1: detected capacity change from 0 to 512 [ 667.137891][T19105] EXT4-fs: Ignoring removed oldalloc option [ 667.176936][T19105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 667.192532][T19108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2389'. [ 667.219300][T19105] EXT4-fs (loop1): orphan cleanup on readonly fs [ 667.243257][T19105] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2388: Failed to acquire dquot type 1 [ 667.264919][T19111] loop0: detected capacity change from 0 to 128 [ 667.286484][T19105] EXT4-fs (loop1): 1 truncate cleaned up [ 667.307291][T19105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.431970][T19119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2391'. [ 667.568376][T19124] loop0: detected capacity change from 0 to 512 [ 667.575736][T19124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 667.586201][T19124] EXT4-fs (loop0): orphan cleanup on readonly fs [ 667.593086][T19124] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2393: bg 0: block 248: padding at end of block bitmap is not set [ 667.609059][T19124] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2393: Failed to acquire dquot type 1 [ 667.629992][T19124] EXT4-fs (loop0): 1 truncate cleaned up [ 667.636447][T19124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.654476][T19124] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.2393: deleted inode referenced: 12 [ 667.669948][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.713198][T19127] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2394'. [ 667.724061][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.817676][T19133] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2395'. [ 667.896104][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.916358][T19138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2396'. [ 668.127847][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 668.127862][ T29] audit: type=1326 audit(1751525022.626:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.209216][ T29] audit: type=1326 audit(1751525022.676:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.232985][ T29] audit: type=1326 audit(1751525022.676:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.256629][ T29] audit: type=1326 audit(1751525022.676:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.280259][ T29] audit: type=1326 audit(1751525022.676:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.303776][ T29] audit: type=1326 audit(1751525022.676:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.327325][ T29] audit: type=1326 audit(1751525022.676:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.350921][ T29] audit: type=1326 audit(1751525022.676:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.374538][ T29] audit: type=1326 audit(1751525022.676:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.398069][ T29] audit: type=1326 audit(1751525022.676:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.3.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 668.433068][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.551082][T19159] wg2: left promiscuous mode [ 668.556614][T19159] wg2: left allmulticast mode [ 668.658491][T19163] wg2: entered promiscuous mode [ 668.663432][T19163] wg2: entered allmulticast mode [ 669.130985][T19167] loop0: detected capacity change from 0 to 128 [ 669.170925][T19168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2403'. [ 669.484997][T19178] loop1: detected capacity change from 0 to 512 [ 669.541300][T19177] hub 6-0:1.0: USB hub found [ 669.558782][T19177] hub 6-0:1.0: 8 ports detected [ 669.564486][T19178] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 669.574951][T19178] EXT4-fs (loop1): orphan cleanup on readonly fs [ 669.582707][T19178] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2405: bg 0: block 248: padding at end of block bitmap is not set [ 669.600248][T19178] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2405: Failed to acquire dquot type 1 [ 669.612924][T19178] EXT4-fs (loop1): 1 truncate cleaned up [ 669.619816][T19178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.731244][T19184] loop2: detected capacity change from 0 to 512 [ 669.772002][T19184] EXT4-fs: Ignoring removed oldalloc option [ 669.813222][T19187] hub 6-0:1.0: USB hub found [ 669.823877][T19184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 669.838028][T19187] hub 6-0:1.0: 8 ports detected [ 669.850483][T19184] EXT4-fs (loop2): orphan cleanup on readonly fs [ 669.870489][T19184] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2406: Failed to acquire dquot type 1 [ 669.889846][T19184] EXT4-fs (loop2): 1 truncate cleaned up [ 669.905181][T19184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 670.407678][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.816918][T19275] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2410'. [ 670.874965][T19273] loop2: detected capacity change from 0 to 1024 [ 671.063897][T19288] loop3: detected capacity change from 0 to 512 [ 671.071894][T19288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 671.100607][T19288] EXT4-fs (loop3): orphan cleanup on readonly fs [ 671.110073][T19288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2412: bg 0: block 248: padding at end of block bitmap is not set [ 671.126779][T19288] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2412: Failed to acquire dquot type 1 [ 671.139863][T19288] EXT4-fs (loop3): 1 truncate cleaned up [ 671.147267][T19288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.160788][T19288] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2412: deleted inode referenced: 12 [ 671.273479][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.307912][T19301] loop1: detected capacity change from 0 to 1024 [ 671.440937][T19316] wg2: left promiscuous mode [ 671.447854][T19316] wg2: left allmulticast mode [ 671.495976][T19323] wg2: entered promiscuous mode [ 671.501027][T19323] wg2: entered allmulticast mode [ 671.535969][T19324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.554275][T19324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.590509][T19324] loop2: detected capacity change from 0 to 512 [ 671.601518][T19324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 671.617453][T19324] EXT4-fs (loop2): orphan cleanup on readonly fs [ 671.651421][T19324] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2415: bg 0: block 248: padding at end of block bitmap is not set [ 671.699719][T19324] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2415: Failed to acquire dquot type 1 [ 671.899085][T19324] EXT4-fs (loop2): 1 truncate cleaned up [ 671.909099][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.945757][T19338] loop3: detected capacity change from 0 to 512 [ 671.970257][T19324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 672.000978][T19338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.024066][T19338] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 672.895135][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.652738][T19367] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2422'. [ 673.912032][T19377] loop0: detected capacity change from 0 to 512 [ 673.920408][T19377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 673.934066][T19377] EXT4-fs (loop0): orphan cleanup on readonly fs [ 673.941817][T19375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19375 comm=syz.3.2426 [ 673.956082][T19377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2424: bg 0: block 248: padding at end of block bitmap is not set [ 673.975029][T19377] __quota_error: 94 callbacks suppressed [ 673.975045][T19377] Quota error (device loop0): write_blk: dquota write failed [ 673.988328][T19377] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 673.998454][T19377] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2424: Failed to acquire dquot type 1 [ 674.037602][T19377] EXT4-fs (loop0): 1 truncate cleaned up [ 674.111136][T19377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 674.131969][ T29] audit: type=1326 audit(1751525028.636:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.076802][T19373] loop4: detected capacity change from 0 to 1024 [ 675.086503][ T29] audit: type=1326 audit(1751525028.666:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.110201][ T29] audit: type=1326 audit(1751525028.666:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.133741][ T29] audit: type=1326 audit(1751525028.666:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.157344][ T29] audit: type=1326 audit(1751525028.666:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.180992][ T29] audit: type=1326 audit(1751525028.666:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.204542][ T29] audit: type=1326 audit(1751525028.666:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.228117][ T29] audit: type=1326 audit(1751525028.666:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19372 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 675.500814][T19387] loop1: detected capacity change from 0 to 512 [ 675.517611][T19387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 675.547026][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.557412][T19387] EXT4-fs (loop1): orphan cleanup on readonly fs [ 675.565094][T19387] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2427: bg 0: block 248: padding at end of block bitmap is not set [ 675.582645][T19387] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2427: Failed to acquire dquot type 1 [ 675.594894][T19387] EXT4-fs (loop1): 1 truncate cleaned up [ 675.605132][T19387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.266552][T19396] loop3: detected capacity change from 0 to 512 [ 676.277009][T19396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.289603][T19396] EXT4-fs (loop3): orphan cleanup on readonly fs [ 676.296565][T19396] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2429: bg 0: block 248: padding at end of block bitmap is not set [ 676.312745][T19396] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2429: Failed to acquire dquot type 1 [ 676.330245][T19396] EXT4-fs (loop3): 1 truncate cleaned up [ 676.336389][T19396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.350472][T19396] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2429: deleted inode referenced: 12 [ 676.450907][T19402] loop4: detected capacity change from 0 to 512 [ 676.481558][T19402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.516309][T19402] EXT4-fs (loop4): orphan cleanup on readonly fs [ 676.536826][T19402] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2430: bg 0: block 248: padding at end of block bitmap is not set [ 676.567096][T19402] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2430: Failed to acquire dquot type 1 [ 676.591952][T19402] EXT4-fs (loop4): 1 truncate cleaned up [ 676.607735][T19402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.659486][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.866808][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.054114][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.080661][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.551356][T19452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2434'. [ 677.857494][T19467] loop2: detected capacity change from 0 to 512 [ 677.896438][T19467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.013412][T19476] loop3: detected capacity change from 0 to 256 [ 678.044357][T19476] msdos: Unknown parameter 'dLts' [ 678.049848][T19467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 678.061015][T19467] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2435: bg 0: block 248: padding at end of block bitmap is not set [ 678.080833][T19467] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2435: Failed to acquire dquot type 1 [ 678.096710][T19467] EXT4-fs (loop2): 1 truncate cleaned up [ 678.106404][T19467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 678.164501][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.223732][T19492] loop2: detected capacity change from 0 to 512 [ 678.237762][T19492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.262047][T19492] EXT4-fs (loop2): orphan cleanup on readonly fs [ 678.298112][T19492] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2439: bg 0: block 248: padding at end of block bitmap is not set [ 678.315009][T19495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2440'. [ 678.353222][T19492] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2439: Failed to acquire dquot type 1 [ 678.377495][T19492] EXT4-fs (loop2): 1 truncate cleaned up [ 678.384279][T19492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 678.413452][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.437355][T19508] loop1: detected capacity change from 0 to 512 [ 678.464409][T19508] EXT4-fs: Ignoring removed oldalloc option [ 678.489826][T19508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.515982][T19508] EXT4-fs (loop1): orphan cleanup on readonly fs [ 678.536269][T19508] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2441: Failed to acquire dquot type 1 [ 678.595021][T19508] EXT4-fs (loop1): 1 truncate cleaned up [ 678.606060][T19508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 678.628264][T19523] loop2: detected capacity change from 0 to 512 [ 678.642392][T19523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.661367][T19523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 678.670609][T19523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2442: bg 0: block 248: padding at end of block bitmap is not set [ 678.686101][T19523] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2442: Failed to acquire dquot type 1 [ 678.700766][T19523] EXT4-fs (loop2): 1 truncate cleaned up [ 678.707820][T19523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 679.307146][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.424897][T19539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2443'. [ 679.792943][T19554] loop1: detected capacity change from 0 to 512 [ 679.824361][T19556] loop3: detected capacity change from 0 to 512 [ 680.159561][T19556] EXT4-fs: Ignoring removed oldalloc option [ 680.166009][T19556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 680.176538][T19556] EXT4-fs (loop3): orphan cleanup on readonly fs [ 680.183930][T19554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 680.194396][T19554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 680.202167][T19554] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2444: bg 0: block 248: padding at end of block bitmap is not set [ 680.222742][T19554] __quota_error: 75 callbacks suppressed [ 680.222763][T19554] Quota error (device loop1): write_blk: dquota write failed [ 680.235913][T19554] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 680.245874][T19554] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2444: Failed to acquire dquot type 1 [ 680.269042][T19554] EXT4-fs (loop1): 1 truncate cleaned up [ 680.275529][T19554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.289192][T19554] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2444: deleted inode referenced: 12 [ 680.303912][T19556] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 680.313406][T19556] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 680.322845][T19556] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2445: Failed to acquire dquot type 1 [ 680.343952][T19558] hub 6-0:1.0: USB hub found [ 680.360082][T19558] hub 6-0:1.0: 8 ports detected [ 680.380129][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.393923][T19556] EXT4-fs (loop3): 1 truncate cleaned up [ 680.416650][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.428317][T19556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.614352][T19580] hub 6-0:1.0: USB hub found [ 680.620618][T19580] hub 6-0:1.0: 8 ports detected [ 680.806127][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.151479][T19603] loop3: detected capacity change from 0 to 512 [ 681.164257][T19603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 681.189928][T19603] EXT4-fs (loop3): orphan cleanup on readonly fs [ 681.197518][T19603] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2451: bg 0: block 248: padding at end of block bitmap is not set [ 681.212812][T19603] Quota error (device loop3): write_blk: dquota write failed [ 681.220296][T19603] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 681.230320][T19603] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2451: Failed to acquire dquot type 1 [ 681.256172][T19603] EXT4-fs (loop3): 1 truncate cleaned up [ 681.263148][T19603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 681.340672][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.791296][T19718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 682.838810][T19719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2457'. [ 683.065354][T19729] loop2: detected capacity change from 0 to 512 [ 683.073508][T19729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 683.240218][T19729] EXT4-fs (loop2): orphan cleanup on readonly fs [ 683.247593][T19729] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2458: bg 0: block 248: padding at end of block bitmap is not set [ 683.568291][T19729] Quota error (device loop2): write_blk: dquota write failed [ 683.575744][T19729] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 683.585770][T19729] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2458: Failed to acquire dquot type 1 [ 683.598516][T19729] EXT4-fs (loop2): 1 truncate cleaned up [ 683.606028][T19729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 683.870662][T19739] loop1: detected capacity change from 0 to 512 [ 683.998504][T19739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 684.022423][T19739] EXT4-fs (loop1): orphan cleanup on readonly fs [ 684.030191][T19739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2460: bg 0: block 248: padding at end of block bitmap is not set [ 684.046507][T19739] Quota error (device loop1): write_blk: dquota write failed [ 684.054070][T19739] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 684.064086][T19739] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2460: Failed to acquire dquot type 1 [ 684.077819][T19739] EXT4-fs (loop1): 1 truncate cleaned up [ 684.133428][T19742] hub 6-0:1.0: USB hub found [ 684.163460][T19742] hub 6-0:1.0: 8 ports detected [ 684.275930][T19739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 684.289572][T19737] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2460: deleted inode referenced: 12 [ 684.944574][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.953146][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.965656][T19754] loop3: detected capacity change from 0 to 512 [ 684.976936][T19754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 685.002908][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.013691][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.032936][T19754] EXT4-fs (loop3): orphan cleanup on readonly fs [ 685.041093][T19754] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2463: bg 0: block 248: padding at end of block bitmap is not set [ 685.056464][T19754] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2463: Failed to acquire dquot type 1 [ 685.086276][T19754] EXT4-fs (loop3): 1 truncate cleaned up [ 685.104498][T19754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 685.240764][T19757] loop0: detected capacity change from 0 to 512 [ 685.327104][T19757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 686.269828][T19757] EXT4-fs (loop0): orphan cleanup on readonly fs [ 686.305508][T19772] loop1: detected capacity change from 0 to 512 [ 686.473790][T19757] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2464: bg 0: block 248: padding at end of block bitmap is not set [ 686.976226][T19772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 686.988736][T19772] EXT4-fs (loop1): orphan cleanup on readonly fs [ 686.995712][T19772] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2465: bg 0: block 248: padding at end of block bitmap is not set [ 687.011186][T19772] __quota_error: 2 callbacks suppressed [ 687.011200][T19772] Quota error (device loop1): write_blk: dquota write failed [ 687.024212][T19772] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 687.034308][T19772] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2465: Failed to acquire dquot type 1 [ 687.047300][T19772] EXT4-fs (loop1): 1 truncate cleaned up [ 687.307433][T19757] Quota error (device loop0): write_blk: dquota write failed [ 687.314964][T19757] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 687.324917][T19757] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2464: Failed to acquire dquot type 1 [ 687.371084][T19807] loop4: detected capacity change from 0 to 512 [ 687.431197][T19807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 687.445301][T19772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.491153][T19807] EXT4-fs (loop4): orphan cleanup on readonly fs [ 687.498202][T19807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2467: bg 0: block 248: padding at end of block bitmap is not set [ 687.545670][T19807] Quota error (device loop4): write_blk: dquota write failed [ 687.553232][T19807] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 687.563263][T19807] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2467: Failed to acquire dquot type 1 [ 687.613519][T19757] EXT4-fs (loop0): 1 truncate cleaned up [ 687.629464][T19807] EXT4-fs (loop4): 1 truncate cleaned up [ 687.636352][T19757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.650757][T19807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.715243][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.836371][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.926396][T19814] loop4: detected capacity change from 0 to 128 [ 687.959550][T19814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 687.967525][T19814] FAT-fs (loop4): Filesystem has been set read-only [ 687.988324][T19814] bio_check_eod: 4914 callbacks suppressed [ 687.988340][T19814] syz.4.2468: attempt to access beyond end of device [ 687.988340][T19814] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 687.992937][T19817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2469'. [ 687.994380][T19814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 688.024981][T19814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 688.064340][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.073628][T19814] syz.4.2468: attempt to access beyond end of device [ 688.073628][T19814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.101470][T19818] syz.4.2468: attempt to access beyond end of device [ 688.101470][T19818] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.134640][T19818] syz.4.2468: attempt to access beyond end of device [ 688.134640][T19818] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.148405][T19814] syz.4.2468: attempt to access beyond end of device [ 688.148405][T19814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.184806][T19818] syz.4.2468: attempt to access beyond end of device [ 688.184806][T19818] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.224125][T19814] syz.4.2468: attempt to access beyond end of device [ 688.224125][T19814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.237516][T19818] syz.4.2468: attempt to access beyond end of device [ 688.237516][T19818] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.291663][T19826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.300269][T19826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.312403][T19826] loop3: detected capacity change from 0 to 512 [ 688.322319][T19824] hub 6-0:1.0: USB hub found [ 688.327098][T19824] hub 6-0:1.0: 8 ports detected [ 688.341318][T19814] syz.4.2468: attempt to access beyond end of device [ 688.341318][T19814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.377544][T19826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 688.396984][T19826] EXT4-fs (loop3): orphan cleanup on readonly fs [ 688.404002][T19826] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2470: bg 0: block 248: padding at end of block bitmap is not set [ 688.422713][T19826] Quota error (device loop3): write_blk: dquota write failed [ 688.430205][T19826] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 688.440167][T19826] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2470: Failed to acquire dquot type 1 [ 688.454140][T19826] EXT4-fs (loop3): 1 truncate cleaned up [ 688.503218][T19814] syz.4.2468: attempt to access beyond end of device [ 688.503218][T19814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 688.962436][T19849] loop2: detected capacity change from 0 to 512 [ 689.057320][T19849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 689.088673][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 689.169022][T19849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 689.180212][T19858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2473'. [ 689.202675][T19826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 689.240860][T19849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2472: bg 0: block 248: padding at end of block bitmap is not set [ 689.400307][T19849] Quota error (device loop2): write_blk: dquota write failed [ 689.407786][T19849] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 689.417848][T19849] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2472: Failed to acquire dquot type 1 [ 689.557147][T19868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2474'. [ 689.756212][T19849] EXT4-fs (loop2): 1 truncate cleaned up [ 689.806512][T19849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 689.846408][T19849] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2472: deleted inode referenced: 12 [ 689.936713][T19884] loop4: detected capacity change from 0 to 512 [ 689.944558][T19884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 689.955934][T19884] EXT4-fs (loop4): orphan cleanup on readonly fs [ 689.963181][T19884] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2475: bg 0: block 248: padding at end of block bitmap is not set [ 689.978896][T19884] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2475: Failed to acquire dquot type 1 [ 689.990869][T19884] EXT4-fs (loop4): 1 truncate cleaned up [ 689.997953][T19884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 690.011772][T19884] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2475: deleted inode referenced: 12 [ 690.721043][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.167560][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.226018][T19961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19961 comm=syz.3.2477 [ 691.394644][T19973] loop1: detected capacity change from 0 to 512 [ 691.406991][T19973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 691.427247][T19973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 691.435719][T19973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2478: bg 0: block 248: padding at end of block bitmap is not set [ 691.451292][T19973] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2478: Failed to acquire dquot type 1 [ 691.464282][T19973] EXT4-fs (loop1): 1 truncate cleaned up [ 691.473969][T19973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.419685][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.484321][T19981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19981 comm=syz.3.2481 [ 692.633755][T19984] loop0: detected capacity change from 0 to 512 [ 692.698769][T19984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 692.754265][T19984] EXT4-fs (loop0): orphan cleanup on readonly fs [ 692.793863][T19984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2480: bg 0: block 248: padding at end of block bitmap is not set [ 692.862846][T19984] __quota_error: 26 callbacks suppressed [ 692.862863][T19984] Quota error (device loop0): write_blk: dquota write failed [ 692.876085][T19984] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 692.886170][T19984] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2480: Failed to acquire dquot type 1 [ 693.030122][T19984] EXT4-fs (loop0): 1 truncate cleaned up [ 693.069945][T19984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 693.091762][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.144240][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.343464][T19996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19996 comm=syz.0.2485 [ 693.451985][T19998] hub 6-0:1.0: USB hub found [ 693.467018][T19998] hub 6-0:1.0: 8 ports detected [ 693.665919][ T29] audit: type=1326 audit(1751525048.166:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.727578][T20015] loop1: detected capacity change from 0 to 1024 [ 693.736992][ T29] audit: type=1326 audit(1751525048.196:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.760535][ T29] audit: type=1326 audit(1751525048.196:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.784069][ T29] audit: type=1326 audit(1751525048.196:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.807758][ T29] audit: type=1326 audit(1751525048.196:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.831349][ T29] audit: type=1326 audit(1751525048.196:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.854889][ T29] audit: type=1326 audit(1751525048.196:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.878534][ T29] audit: type=1326 audit(1751525048.206:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20014 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 693.908375][T20024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2488'. [ 694.134913][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.157059][T20038] hub 6-0:1.0: USB hub found [ 694.164834][T20038] hub 6-0:1.0: 8 ports detected [ 694.765463][T20061] loop1: detected capacity change from 0 to 512 [ 694.865451][T20061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 695.072195][T20061] EXT4-fs (loop1): orphan cleanup on readonly fs [ 695.102705][T20061] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2491: bg 0: block 248: padding at end of block bitmap is not set [ 695.161875][T20061] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2491: Failed to acquire dquot type 1 [ 695.186952][T20061] EXT4-fs (loop1): 1 truncate cleaned up [ 695.199427][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.207970][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.220821][T20065] loop3: detected capacity change from 0 to 512 [ 695.230707][T20065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 695.241068][T20065] EXT4-fs (loop3): orphan cleanup on readonly fs [ 695.248071][T20065] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2492: bg 0: block 248: padding at end of block bitmap is not set [ 695.264555][T20065] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2492: Failed to acquire dquot type 1 [ 695.276523][T20065] EXT4-fs (loop3): 1 truncate cleaned up [ 695.283577][T20065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 695.331056][T20061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 696.595475][T20143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20143 comm=syz.2.2495 [ 696.856836][T20149] loop2: detected capacity change from 0 to 1024 [ 697.357187][T20166] loop0: detected capacity change from 0 to 512 [ 697.365997][T20166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 697.377863][T20166] EXT4-fs (loop0): orphan cleanup on readonly fs [ 697.386669][T20166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2499: bg 0: block 248: padding at end of block bitmap is not set [ 697.408907][T20166] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2499: Failed to acquire dquot type 1 [ 697.421375][T20166] EXT4-fs (loop0): 1 truncate cleaned up [ 697.428270][T20166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 697.891042][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 697.891056][ T29] audit: type=1326 audit(1751525052.396:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe2fe3de9b7 code=0x7ffc0000 [ 697.927521][T20171] loop4: detected capacity change from 0 to 1024 [ 698.155339][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.170960][ T29] audit: type=1326 audit(1751525052.426:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2fe3dd290 code=0x7ffc0000 [ 698.194540][ T29] audit: type=1326 audit(1751525052.426:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2fe3de52b code=0x7ffc0000 [ 698.218052][ T29] audit: type=1326 audit(1751525052.476:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2fe3dd58a code=0x7ffc0000 [ 698.241625][ T29] audit: type=1326 audit(1751525052.476:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2fe3dd58a code=0x7ffc0000 [ 698.264972][ T29] audit: type=1326 audit(1751525052.476:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe2fe3dd197 code=0x7ffc0000 [ 698.288586][ T29] audit: type=1326 audit(1751525052.476:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe2fe3e00ca code=0x7ffc0000 [ 698.312107][ T29] audit: type=1326 audit(1751525052.476:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2fe3dd290 code=0x7ffc0000 [ 698.335711][ T29] audit: type=1326 audit(1751525052.476:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2fe3de52b code=0x7ffc0000 [ 698.359227][ T29] audit: type=1326 audit(1751525052.476:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2fe3dd58a code=0x7ffc0000 [ 699.375600][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.483708][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 699.569701][T20186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2504'. [ 699.731787][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.219057][T20199] loop0: detected capacity change from 0 to 512 [ 700.229811][T20197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2507'. [ 700.251401][T20199] EXT4-fs: Ignoring removed oldalloc option [ 700.270710][T20199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 700.314254][T20199] EXT4-fs (loop0): orphan cleanup on readonly fs [ 700.335096][T20207] loop1: detected capacity change from 0 to 128 [ 700.342983][T20199] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2509: Failed to acquire dquot type 1 [ 700.410045][T20199] EXT4-fs (loop0): 1 truncate cleaned up [ 700.431948][T20199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 700.491971][T20212] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2513'. [ 700.563122][T20217] loop1: detected capacity change from 0 to 512 [ 700.620825][T20217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.634918][T20217] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.700720][T20223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2515'. [ 700.814042][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.950438][T20229] loop4: detected capacity change from 0 to 1024 [ 701.039013][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.128318][T20236] loop1: detected capacity change from 0 to 512 [ 701.992191][T20244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2520'. [ 702.028064][T20236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 702.038828][T20236] EXT4-fs (loop1): orphan cleanup on readonly fs [ 702.046215][T20236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2516: bg 0: block 248: padding at end of block bitmap is not set [ 702.063194][T20236] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2516: Failed to acquire dquot type 1 [ 702.075465][T20236] EXT4-fs (loop1): 1 truncate cleaned up [ 702.109674][T20236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 702.962595][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.111579][T20253] loop0: detected capacity change from 0 to 512 [ 703.113671][T20265] loop1: detected capacity change from 0 to 256 [ 703.124614][T20262] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2524'. [ 703.205745][T20253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 703.292248][T20265] msdos: Unknown parameter 'dLts' [ 704.121469][T20253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 704.149174][T20272] loop1: detected capacity change from 0 to 128 [ 704.155825][T20272] EXT4-fs: test_dummy_encryption option not supported [ 705.148369][T20253] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2518: bg 0: block 248: padding at end of block bitmap is not set [ 705.585363][T20253] __quota_error: 115 callbacks suppressed [ 705.585383][T20253] Quota error (device loop0): write_blk: dquota write failed [ 705.598877][T20253] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 705.608828][T20253] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2518: Failed to acquire dquot type 1 [ 705.630169][T20280] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2526'. [ 705.662092][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 705.706696][T20281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2527'. [ 705.707492][T20253] EXT4-fs (loop0): 1 truncate cleaned up [ 705.723096][T20253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.841085][T20289] loop4: detected capacity change from 0 to 256 [ 705.909760][T20289] msdos: Unknown parameter 'dLts' [ 706.162958][T20296] loop4: detected capacity change from 0 to 128 [ 706.169973][T20296] EXT4-fs: test_dummy_encryption option not supported [ 706.191768][T20295] loop3: detected capacity change from 0 to 1024 [ 707.916099][T20312] wg2: left promiscuous mode [ 707.920845][T20312] wg2: left allmulticast mode [ 707.968657][T20313] wg2: entered promiscuous mode [ 707.973685][T20313] wg2: entered allmulticast mode [ 708.505163][T20316] loop1: detected capacity change from 0 to 128 [ 708.534887][T20316] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 708.542947][T20316] FAT-fs (loop1): Filesystem has been set read-only [ 708.571272][T20316] bio_check_eod: 1572 callbacks suppressed [ 708.571293][T20316] syz.1.2536: attempt to access beyond end of device [ 708.571293][T20316] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 708.655128][T20316] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 708.663124][T20316] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 708.689627][T20317] syz.1.2536: attempt to access beyond end of device [ 708.689627][T20317] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 708.742735][T20319] hub 6-0:1.0: USB hub found [ 708.759436][T20319] hub 6-0:1.0: 8 ports detected [ 708.764528][T20317] syz.1.2536: attempt to access beyond end of device [ 708.764528][T20317] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 708.790283][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.799805][T20317] syz.1.2536: attempt to access beyond end of device [ 708.799805][T20317] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 708.814790][T20317] syz.1.2536: attempt to access beyond end of device [ 708.814790][T20317] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 708.855551][T20316] syz.1.2536: attempt to access beyond end of device [ 708.855551][T20316] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 708.889101][T20324] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2539'. [ 708.906478][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 708.952447][T20316] syz.1.2536: attempt to access beyond end of device [ 708.952447][T20316] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 708.992487][T20316] syz.1.2536: attempt to access beyond end of device [ 708.992487][T20316] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 709.014103][T20316] syz.1.2536: attempt to access beyond end of device [ 709.014103][T20316] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 709.027693][T20316] syz.1.2536: attempt to access beyond end of device [ 709.027693][T20316] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 709.178778][T20338] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2540'. [ 709.988524][T20358] loop2: detected capacity change from 0 to 512 [ 710.006118][T20358] EXT4-fs: Ignoring removed oldalloc option [ 710.051669][T20358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 710.149464][T20358] EXT4-fs (loop2): orphan cleanup on readonly fs [ 710.793446][T20366] loop1: detected capacity change from 0 to 512 [ 710.855247][T20366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 710.866386][T20366] EXT4-fs (loop1): orphan cleanup on readonly fs [ 710.875181][T20366] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2542: bg 0: block 248: padding at end of block bitmap is not set [ 710.891987][T20366] Quota error (device loop1): write_blk: dquota write failed [ 710.899585][T20366] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 710.909581][T20366] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2542: Failed to acquire dquot type 1 [ 710.928737][T20366] EXT4-fs (loop1): 1 truncate cleaned up [ 710.936187][T20358] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 710.945767][T20358] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 710.955199][T20358] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2541: Failed to acquire dquot type 1 [ 710.972096][T20366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 711.089333][T20358] EXT4-fs (loop2): 1 truncate cleaned up [ 711.739702][T20401] loop0: detected capacity change from 0 to 512 [ 711.891209][T20401] EXT4-fs: Ignoring removed oldalloc option [ 711.933444][T20401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 711.959376][T20414] hub 6-0:1.0: USB hub found [ 711.970132][T20401] EXT4-fs (loop0): orphan cleanup on readonly fs [ 711.979751][T20414] hub 6-0:1.0: 8 ports detected [ 712.001939][T20401] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 712.011655][T20401] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 712.021122][T20401] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2546: Failed to acquire dquot type 1 [ 712.033306][T20401] EXT4-fs (loop0): 1 truncate cleaned up [ 712.054795][T20358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 712.120246][T20401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 712.296973][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.358479][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 712.436016][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.449872][T20439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2548'. [ 712.517735][T20445] loop1: detected capacity change from 0 to 1024 [ 712.533358][T20445] EXT4-fs: Ignoring removed bh option [ 712.539016][T20445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.569264][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.611283][T20445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.666606][T20445] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2549: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 712.706563][T20469] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2550'. [ 712.739295][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2550'. [ 712.944257][T20478] loop0: detected capacity change from 0 to 4096 [ 713.758978][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.882912][T20478] syzkaller0: entered promiscuous mode [ 713.888550][T20478] syzkaller0: entered allmulticast mode [ 714.304860][T20532] loop1: detected capacity change from 0 to 128 [ 714.356055][T20532] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 714.364002][T20532] FAT-fs (loop1): Filesystem has been set read-only [ 714.407697][T20532] bio_check_eod: 3390 callbacks suppressed [ 714.407721][T20532] syz.1.2558: attempt to access beyond end of device [ 714.407721][T20532] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 714.463520][T20532] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 714.471472][T20532] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 714.559895][T20532] syz.1.2558: attempt to access beyond end of device [ 714.559895][T20532] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.574303][T20532] syz.1.2558: attempt to access beyond end of device [ 714.574303][T20532] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.603535][T20540] syz.1.2558: attempt to access beyond end of device [ 714.603535][T20540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.618606][T20540] syz.1.2558: attempt to access beyond end of device [ 714.618606][T20540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.639763][T20544] loop3: detected capacity change from 0 to 1024 [ 714.643390][T20540] syz.1.2558: attempt to access beyond end of device [ 714.643390][T20540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.659815][T20540] syz.1.2558: attempt to access beyond end of device [ 714.659815][T20540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.671168][T20544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 714.683412][T20532] syz.1.2558: attempt to access beyond end of device [ 714.683412][T20532] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.712985][T20532] syz.1.2558: attempt to access beyond end of device [ 714.712985][T20532] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.726855][T20532] syz.1.2558: attempt to access beyond end of device [ 714.726855][T20532] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 714.757545][ T29] audit: type=1326 audit(1751525069.256:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.0.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 714.810259][ T29] audit: type=1326 audit(1751525069.286:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.0.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 714.833841][ T29] audit: type=1326 audit(1751525069.286:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.0.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 714.857515][ T29] audit: type=1326 audit(1751525069.286:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.0.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 714.861544][T20544] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.2559: lblock 1 mapped to illegal pblock 1 (length 1) [ 714.903272][T20550] loop0: detected capacity change from 0 to 1024 [ 714.969886][T20544] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2559: Failed to acquire dquot type 0 [ 714.994172][T20572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20572 comm=syz.4.2562 [ 715.012781][T20544] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.2559: Freeing blocks not in datazone - block = 0, count = 4096 [ 715.044123][T20544] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2559: Invalid inode bitmap blk 0 in block_group 0 [ 715.069573][ T4405] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 715.109555][T20544] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 715.120139][ T4405] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 715.148439][T20544] EXT4-fs (loop3): 1 orphan inode deleted [ 715.157726][T20544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.254786][T20544] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2559: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 715.288786][T20588] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2563'. [ 715.305035][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 715.328851][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.456267][T20598] loop1: detected capacity change from 0 to 256 [ 715.465152][T20594] loop4: detected capacity change from 0 to 128 [ 715.542836][T20594] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 715.550859][T20594] FAT-fs (loop4): Filesystem has been set read-only [ 715.552189][T20602] loop3: detected capacity change from 0 to 512 [ 715.571578][T20601] hub 6-0:1.0: USB hub found [ 715.577074][T20601] hub 6-0:1.0: 8 ports detected [ 715.586767][T20602] EXT4-fs: Ignoring removed oldalloc option [ 715.638321][T20594] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 715.646282][T20594] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 715.667583][T20598] FAT-fs (loop1): codepage cp1255 not found [ 715.758847][T20602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 715.768176][T20602] EXT4-fs (loop3): orphan cleanup on readonly fs [ 715.777151][T20602] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2564: Failed to acquire dquot type 1 [ 715.804246][T20602] EXT4-fs (loop3): 1 truncate cleaned up [ 715.976274][T20602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.334741][T20632] loop2: detected capacity change from 0 to 512 [ 716.342556][T20632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 716.352234][T20632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 716.360869][T20632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2570: bg 0: block 248: padding at end of block bitmap is not set [ 716.389245][T20632] __quota_error: 101 callbacks suppressed [ 716.389266][T20632] Quota error (device loop2): write_blk: dquota write failed [ 716.402662][T20632] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 716.412606][T20632] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2570: Failed to acquire dquot type 1 [ 716.426486][T20632] EXT4-fs (loop2): 1 truncate cleaned up [ 716.433827][T20632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.447860][T20632] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2570: deleted inode referenced: 12 [ 716.448016][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.597318][T20647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2571'. [ 716.652067][T20652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2572'. [ 716.711136][T20659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20659 comm=syz.3.2573 [ 716.967742][T20683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2574'. [ 717.117360][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.142790][T20696] loop3: detected capacity change from 0 to 512 [ 717.160681][T20696] EXT4-fs: Ignoring removed oldalloc option [ 717.172255][T20696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 717.211609][T20696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 717.219572][T20696] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 717.229173][T20696] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 717.238631][T20696] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2575: Failed to acquire dquot type 1 [ 717.250575][ T29] audit: type=1326 audit(1751525071.756:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 717.278086][T20696] EXT4-fs (loop3): 1 truncate cleaned up [ 717.298341][ T29] audit: type=1326 audit(1751525071.756:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 717.305330][T20696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 717.321931][ T29] audit: type=1326 audit(1751525071.756:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 717.321972][ T29] audit: type=1326 audit(1751525071.756:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 717.382386][ T29] audit: type=1326 audit(1751525071.756:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 717.406041][ T29] audit: type=1326 audit(1751525071.756:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 717.416637][T20697] loop4: detected capacity change from 0 to 1024 [ 717.936954][T20761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2578'. [ 717.960319][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.011975][T20768] loop3: detected capacity change from 0 to 512 [ 718.035716][T20768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 718.059915][T20768] EXT4-fs (loop3): orphan cleanup on readonly fs [ 718.069900][T20768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2579: bg 0: block 248: padding at end of block bitmap is not set [ 718.119773][T20768] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2579: Failed to acquire dquot type 1 [ 718.140568][T20768] EXT4-fs (loop3): 1 truncate cleaned up [ 718.161964][T20768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.227209][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.236457][T20778] loop4: detected capacity change from 0 to 512 [ 718.249229][T20778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 718.259571][T20778] EXT4-fs (loop4): orphan cleanup on readonly fs [ 718.288749][T20778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2580: bg 0: block 248: padding at end of block bitmap is not set [ 718.364605][T20778] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2580: Failed to acquire dquot type 1 [ 718.384637][T20782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2581'. [ 718.431067][T20778] EXT4-fs (loop4): 1 truncate cleaned up [ 718.468136][T20778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.675623][T20787] loop3: detected capacity change from 0 to 512 [ 718.688678][T20787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 718.700842][T20787] EXT4-fs (loop3): orphan cleanup on readonly fs [ 718.748639][T20787] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2582: bg 0: block 248: padding at end of block bitmap is not set [ 718.825354][T20787] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2582: Failed to acquire dquot type 1 [ 718.834353][T20792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2584'. [ 718.885475][T20787] EXT4-fs (loop3): 1 truncate cleaned up [ 718.910179][T20796] loop2: detected capacity change from 0 to 256 [ 718.922045][T20787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.924202][T20796] msdos: Unknown parameter 'dLts' [ 718.944612][T20790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2583'. [ 719.241188][T20800] loop2: detected capacity change from 0 to 128 [ 719.248176][T20800] EXT4-fs: test_dummy_encryption option not supported [ 719.296039][T20801] loop0: detected capacity change from 0 to 512 [ 719.321092][T20801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 719.360342][T20801] EXT4-fs (loop0): orphan cleanup on readonly fs [ 719.368374][T20801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2586: bg 0: block 248: padding at end of block bitmap is not set [ 719.386589][T20801] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2586: Failed to acquire dquot type 1 [ 719.401361][T20801] EXT4-fs (loop0): 1 truncate cleaned up [ 719.447767][T20801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 719.464720][T20801] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.2586: deleted inode referenced: 12 [ 719.724164][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.029031][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.852280][T20809] hub 6-0:1.0: USB hub found [ 720.916048][T20816] loop2: detected capacity change from 0 to 512 [ 721.818129][T20809] hub 6-0:1.0: 8 ports detected [ 722.561334][T20816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 722.571982][T20816] EXT4-fs (loop2): orphan cleanup on readonly fs [ 722.579166][T20816] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2590: bg 0: block 248: padding at end of block bitmap is not set [ 722.598677][T20816] __quota_error: 73 callbacks suppressed [ 722.598694][T20816] Quota error (device loop2): write_blk: dquota write failed [ 722.611917][T20816] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 722.622114][T20816] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2590: Failed to acquire dquot type 1 [ 722.635558][T20816] EXT4-fs (loop2): 1 truncate cleaned up [ 722.644442][T20816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 722.674778][T20825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2591'. [ 722.799668][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.833516][T20833] loop0: detected capacity change from 0 to 512 [ 722.894166][T20833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 722.925797][T20836] loop2: detected capacity change from 0 to 4096 [ 722.943236][T20833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 722.963155][T20833] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2592: bg 0: block 248: padding at end of block bitmap is not set [ 723.019318][T20833] Quota error (device loop0): write_blk: dquota write failed [ 723.026806][T20833] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 723.036793][T20833] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2592: Failed to acquire dquot type 1 [ 723.089543][T20833] EXT4-fs (loop0): 1 truncate cleaned up [ 723.095749][T20833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.160299][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.294503][T20836] syzkaller0: entered promiscuous mode [ 723.300156][T20836] syzkaller0: entered allmulticast mode [ 723.565577][T20874] hub 6-0:1.0: USB hub found [ 723.581247][T20874] hub 6-0:1.0: 8 ports detected [ 723.756559][T20894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.765354][T20894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.784432][T20894] loop1: detected capacity change from 0 to 512 [ 723.865583][T20894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 723.892659][T20894] EXT4-fs (loop1): orphan cleanup on readonly fs [ 723.900811][T20894] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2596: bg 0: block 248: padding at end of block bitmap is not set [ 723.915964][T20894] Quota error (device loop1): write_blk: dquota write failed [ 723.923515][T20894] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 723.933510][T20894] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2596: Failed to acquire dquot type 1 [ 723.949296][T20894] EXT4-fs (loop1): 1 truncate cleaned up [ 723.956430][T20894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.716279][T20923] loop2: detected capacity change from 0 to 256 [ 724.727806][ T29] audit: type=1326 audit(1751525079.226:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 724.751448][ T29] audit: type=1326 audit(1751525079.226:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 724.884185][T20923] msdos: Unknown parameter 'dLts' [ 724.912112][T20926] wg2: left promiscuous mode [ 724.917623][T20926] wg2: left allmulticast mode [ 724.927769][ T29] audit: type=1326 audit(1751525079.276:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 724.951379][ T29] audit: type=1326 audit(1751525079.276:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec6c4e929 code=0x7ffc0000 [ 725.225958][T20931] loop2: detected capacity change from 0 to 128 [ 725.233055][T20931] EXT4-fs: test_dummy_encryption option not supported [ 726.910617][T20940] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2600'. [ 726.946947][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 726.958441][T20941] loop3: detected capacity change from 0 to 512 [ 726.986783][T20941] EXT4-fs: Ignoring removed oldalloc option [ 727.031903][T20941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 727.041908][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.070789][T20941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 727.110192][T20941] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2601: Failed to acquire dquot type 1 [ 727.149160][T20941] EXT4-fs (loop3): 1 truncate cleaned up [ 727.161518][T20941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 727.186701][T20948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2603'. [ 727.220952][T20949] loop1: detected capacity change from 0 to 512 [ 727.236295][T20949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 727.463989][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.756250][T20949] EXT4-fs (loop1): orphan cleanup on readonly fs [ 727.775507][T20949] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2602: bg 0: block 248: padding at end of block bitmap is not set [ 727.790788][T20949] __quota_error: 31 callbacks suppressed [ 727.790821][T20949] Quota error (device loop1): write_blk: dquota write failed [ 727.803987][T20949] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 727.814072][T20949] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2602: Failed to acquire dquot type 1 [ 727.828254][T20949] EXT4-fs (loop1): 1 truncate cleaned up [ 727.837838][T20949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 727.922919][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.199279][T20960] loop3: detected capacity change from 0 to 128 [ 728.292298][T20962] hub 6-0:1.0: USB hub found [ 728.312830][T20964] loop3: detected capacity change from 0 to 512 [ 728.319869][T20962] hub 6-0:1.0: 8 ports detected [ 728.343966][T20958] hub 6-0:1.0: USB hub found [ 728.365618][T20964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.391836][T20958] hub 6-0:1.0: 8 ports detected [ 728.443069][T20964] ext4 filesystem being mounted at /514/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 729.058147][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.117716][T21030] loop1: detected capacity change from 0 to 512 [ 729.126607][T21030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.137259][T21030] EXT4-fs (loop1): orphan cleanup on readonly fs [ 729.152803][T21030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2609: bg 0: block 248: padding at end of block bitmap is not set [ 729.196003][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.205731][T21030] Quota error (device loop1): write_blk: dquota write failed [ 729.213254][T21030] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 729.223364][T21030] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2609: Failed to acquire dquot type 1 [ 729.228913][T21038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2610'. [ 729.255235][T21030] EXT4-fs (loop1): 1 truncate cleaned up [ 729.270259][T21030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 729.312614][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.345739][T21051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.354345][T21051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.367286][T21051] loop3: detected capacity change from 0 to 512 [ 729.376512][T21051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.386961][T21051] EXT4-fs (loop3): orphan cleanup on readonly fs [ 729.394234][T21051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2611: bg 0: block 248: padding at end of block bitmap is not set [ 729.410254][T21051] Quota error (device loop3): write_blk: dquota write failed [ 729.417816][T21051] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 729.427798][T21051] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2611: Failed to acquire dquot type 1 [ 729.449771][T21051] EXT4-fs (loop3): 1 truncate cleaned up [ 729.467299][T21056] loop1: detected capacity change from 0 to 512 [ 729.474456][T21056] EXT4-fs: Ignoring removed oldalloc option [ 729.506701][T21056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.516785][T21051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 729.532365][T21056] EXT4-fs (loop1): orphan cleanup on readonly fs [ 729.541449][T21056] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 729.551007][T21056] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 729.560494][T21056] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2612: Failed to acquire dquot type 1 [ 729.573820][T21056] EXT4-fs (loop1): 1 truncate cleaned up [ 729.583989][T21056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.239613][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.493395][T21117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2616'. [ 730.581069][T21124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2617'. [ 730.691378][T21129] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2618'. [ 730.823209][T21132] hub 6-0:1.0: USB hub found [ 730.828493][T21132] hub 6-0:1.0: 8 ports detected [ 731.394517][T21186] loop1: detected capacity change from 0 to 4096 [ 731.453511][T21195] hub 6-0:1.0: USB hub found [ 731.471170][T21195] hub 6-0:1.0: 8 ports detected [ 732.049050][T21186] syzkaller0: entered promiscuous mode [ 732.054671][T21186] syzkaller0: entered allmulticast mode [ 732.281919][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.534374][T21280] loop3: detected capacity change from 0 to 1024 [ 732.656073][ T29] audit: type=1326 audit(1751525086.996:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.3.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 732.679720][ T29] audit: type=1326 audit(1751525086.996:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.3.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 732.878556][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 732.878575][ T29] audit: type=1326 audit(1751525087.386:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.3.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963b77e929 code=0x7ffc0000 [ 732.914948][T21290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2628'. [ 733.050442][T21293] loop2: detected capacity change from 0 to 512 [ 733.126236][T21293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 733.137586][T21293] EXT4-fs (loop2): orphan cleanup on readonly fs [ 733.146749][T21293] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2630: bg 0: block 248: padding at end of block bitmap is not set [ 733.180118][T21296] hub 6-0:1.0: USB hub found [ 733.189090][T21293] Quota error (device loop2): write_blk: dquota write failed [ 733.196539][T21293] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 733.203289][T21299] loop3: detected capacity change from 0 to 128 [ 733.206513][T21293] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2630: Failed to acquire dquot type 1 [ 733.224877][T21296] hub 6-0:1.0: 8 ports detected [ 733.231673][T21293] EXT4-fs (loop2): 1 truncate cleaned up [ 733.240567][T21293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 733.274938][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.327605][T21304] loop0: detected capacity change from 0 to 512 [ 733.366753][T21304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 733.385175][T21304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 733.392396][T21304] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2634: bg 0: block 248: padding at end of block bitmap is not set [ 733.438747][T21304] Quota error (device loop0): write_blk: dquota write failed [ 733.446302][T21304] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 733.456352][T21304] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2634: Failed to acquire dquot type 1 [ 733.515683][T21304] EXT4-fs (loop0): 1 truncate cleaned up [ 733.526913][T21304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 733.608873][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.848680][T21341] loop0: detected capacity change from 0 to 512 [ 733.856256][T21341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 733.867425][T21341] EXT4-fs (loop0): orphan cleanup on readonly fs [ 733.874308][T21341] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2638: bg 0: block 248: padding at end of block bitmap is not set [ 733.890517][T21341] Quota error (device loop0): write_blk: dquota write failed [ 733.897977][T21341] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 733.908025][T21341] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2638: Failed to acquire dquot type 1 [ 733.932139][T21341] EXT4-fs (loop0): 1 truncate cleaned up [ 733.954021][T21341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 733.988705][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.361728][ T29] audit: type=1326 audit(1751525088.866:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff579aae929 code=0x7ffc0000 [ 734.501763][ T29] audit: type=1326 audit(1751525088.886:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff579aae929 code=0x7ffc0000 [ 734.525457][ T29] audit: type=1326 audit(1751525088.886:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff579aae929 code=0x7ffc0000 [ 734.561311][T21353] loop2: detected capacity change from 0 to 1024 [ 735.565929][T21393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2642'. [ 735.644709][T21399] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2643'. [ 735.861925][T21409] loop1: detected capacity change from 0 to 512 [ 735.949328][T21409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 735.964357][T21420] loop0: detected capacity change from 0 to 512 [ 735.990817][T21420] EXT4-fs: Ignoring removed oldalloc option [ 736.031501][T21420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 736.381281][T21443] loop3: detected capacity change from 0 to 256 [ 736.401820][T21443] msdos: Unknown parameter 'dLts' [ 736.417553][T21409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 736.488644][T21420] EXT4-fs (loop0): orphan cleanup on readonly fs [ 736.511722][T21420] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2645: Failed to acquire dquot type 1 [ 736.527377][T21409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2644: bg 0: block 248: padding at end of block bitmap is not set [ 736.586258][T21420] EXT4-fs (loop0): 1 truncate cleaned up [ 736.605968][T21420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 736.678256][T21448] loop3: detected capacity change from 0 to 128 [ 736.685150][T21448] EXT4-fs: test_dummy_encryption option not supported [ 737.005700][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.058875][T21409] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2644: Failed to acquire dquot type 1 [ 737.665424][T21409] EXT4-fs (loop1): 1 truncate cleaned up [ 737.698140][T21409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.191222][T21457] loop0: detected capacity change from 0 to 512 [ 738.229405][T21457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 738.245460][T21457] EXT4-fs (loop0): orphan cleanup on readonly fs [ 738.253753][T21457] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2649: bg 0: block 248: padding at end of block bitmap is not set [ 738.273105][T21457] __quota_error: 78 callbacks suppressed [ 738.273121][T21457] Quota error (device loop0): write_blk: dquota write failed [ 738.286302][T21457] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 738.296248][T21457] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2649: Failed to acquire dquot type 1 [ 738.309830][T21457] EXT4-fs (loop0): 1 truncate cleaned up [ 738.367695][T21457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.483886][T21462] loop3: detected capacity change from 0 to 256 [ 738.658699][T21462] msdos: Unknown parameter 'dLts' [ 738.852342][T21464] loop4: detected capacity change from 0 to 512 [ 738.939341][T21465] loop3: detected capacity change from 0 to 128 [ 738.946174][T21465] EXT4-fs: test_dummy_encryption option not supported [ 739.483756][T21464] EXT4-fs: Ignoring removed oldalloc option [ 739.530002][T21464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 739.849633][T21467] loop2: detected capacity change from 0 to 512 [ 739.859817][T21464] EXT4-fs (loop4): orphan cleanup on readonly fs [ 740.231217][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.340030][T21467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.354900][T21464] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 740.364445][T21464] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 740.373908][T21464] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2652: Failed to acquire dquot type 1 [ 740.388338][T21467] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.418853][T21464] EXT4-fs (loop4): 1 truncate cleaned up [ 740.524484][T21474] loop0: detected capacity change from 0 to 512 [ 740.558292][T21474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 740.569772][T21464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 740.605147][T21474] EXT4-fs (loop0): orphan cleanup on readonly fs [ 740.620967][T21474] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2654: bg 0: block 248: padding at end of block bitmap is not set [ 740.631312][T21476] hub 6-0:1.0: USB hub found [ 740.642425][T21474] Quota error (device loop0): write_blk: dquota write failed [ 740.649949][T21474] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 740.659979][T21474] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2654: Failed to acquire dquot type 1 [ 740.674528][T21476] hub 6-0:1.0: 8 ports detected [ 740.691758][T21474] EXT4-fs (loop0): 1 truncate cleaned up [ 740.698462][T21474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 740.736778][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.830323][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.846858][T21488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2656'. [ 740.891700][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.934636][T21496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2657'. [ 740.982770][T21498] loop2: detected capacity change from 0 to 128 [ 741.050748][T21504] loop0: detected capacity change from 0 to 128 [ 741.129256][T21511] loop2: detected capacity change from 0 to 512 [ 741.164623][T21511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.204490][T21511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 741.232197][T21511] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2660: bg 0: block 248: padding at end of block bitmap is not set [ 741.259513][T21522] loop4: detected capacity change from 0 to 512 [ 741.269672][T21522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.281982][T21511] Quota error (device loop2): write_blk: dquota write failed [ 741.289456][T21511] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 741.299458][T21511] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2660: Failed to acquire dquot type 1 [ 741.312895][T21511] EXT4-fs (loop2): 1 truncate cleaned up [ 741.334901][T21527] loop0: detected capacity change from 0 to 512 [ 741.349172][T21527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.826402][T21527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 741.833114][T21522] EXT4-fs (loop4): orphan cleanup on readonly fs [ 741.841031][T21527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2662: bg 0: block 248: padding at end of block bitmap is not set [ 741.857351][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.870089][T21527] Quota error (device loop0): write_blk: dquota write failed [ 741.877651][T21527] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 741.887619][T21527] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2662: Failed to acquire dquot type 1 [ 741.905072][T21527] EXT4-fs (loop0): 1 truncate cleaned up [ 741.911706][T21522] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2661: bg 0: block 248: padding at end of block bitmap is not set [ 741.928397][T21522] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2661: Failed to acquire dquot type 1 [ 741.941283][T21522] EXT4-fs (loop4): 1 truncate cleaned up [ 742.237629][T21511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.257756][T21527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.274003][T21522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.296719][T21564] syz_tun: entered allmulticast mode [ 742.316404][T21564] FAULT_INJECTION: forcing a failure. [ 742.316404][T21564] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 742.329619][T21564] CPU: 1 UID: 0 PID: 21564 Comm: syz.1.2663 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 742.329708][T21564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 742.329750][T21564] Call Trace: [ 742.329758][T21564] [ 742.329769][T21564] __dump_stack+0x1d/0x30 [ 742.329826][T21564] dump_stack_lvl+0xe8/0x140 [ 742.329910][T21564] dump_stack+0x15/0x1b [ 742.329933][T21564] should_fail_ex+0x265/0x280 [ 742.330045][T21564] should_fail+0xb/0x20 [ 742.330135][T21564] should_fail_usercopy+0x1a/0x20 [ 742.330168][T21564] _copy_from_iter+0xcf/0xe40 [ 742.330213][T21564] ? alloc_pages_mpol+0x201/0x250 [ 742.330247][T21564] copy_page_from_iter+0x178/0x2a0 [ 742.330316][T21564] tun_get_user+0x5f0/0x2500 [ 742.330395][T21564] ? ref_tracker_alloc+0x1f2/0x2f0 [ 742.330435][T21564] tun_chr_write_iter+0x15e/0x210 [ 742.330472][T21564] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 742.330533][T21564] vfs_write+0x4a0/0x8e0 [ 742.330573][T21564] ksys_write+0xda/0x1a0 [ 742.330650][T21564] __x64_sys_write+0x40/0x50 [ 742.330683][T21564] x64_sys_call+0x2cdd/0x2fb0 [ 742.330732][T21564] do_syscall_64+0xd2/0x200 [ 742.330805][T21564] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 742.330838][T21564] ? clear_bhb_loop+0x40/0x90 [ 742.330860][T21564] ? clear_bhb_loop+0x40/0x90 [ 742.330885][T21564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.330994][T21564] RIP: 0033:0x7f878d54d3df [ 742.331020][T21564] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 742.331039][T21564] RSP: 002b:00007f878bbb7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 742.331063][T21564] RAX: ffffffffffffffda RBX: 00007f878d775fa0 RCX: 00007f878d54d3df [ 742.331080][T21564] RDX: 000000000000002a RSI: 00002000000001c0 RDI: 00000000000000c8 [ 742.331123][T21564] RBP: 00007f878bbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 742.331135][T21564] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 742.331191][T21564] R13: 0000000000000000 R14: 00007f878d775fa0 R15: 00007fff7f183308 [ 742.331217][T21564] [ 742.579456][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.590551][T21564] syz_tun: left allmulticast mode [ 742.620573][T21567] syz_tun: entered allmulticast mode [ 742.681028][T21567] syz_tun: left allmulticast mode [ 742.771891][T21577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2666'. [ 742.801666][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.907819][T21582] loop1: detected capacity change from 0 to 512 [ 742.961696][T21582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.984533][T21582] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.090577][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.219571][T21605] loop2: detected capacity change from 0 to 512 [ 743.222982][T21607] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2672'. [ 743.226559][T21605] EXT4-fs: Ignoring removed oldalloc option [ 743.235482][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'. [ 743.274849][T21605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 743.295548][T21611] loop0: detected capacity change from 0 to 512 [ 743.314268][T21611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 743.423220][T21605] EXT4-fs (loop2): orphan cleanup on readonly fs [ 743.445447][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 743.445462][ T29] audit: type=1326 audit(1751525097.886:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21613 comm="syz.4.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 743.475241][ T29] audit: type=1326 audit(1751525097.886:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21613 comm="syz.4.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 743.498896][ T29] audit: type=1326 audit(1751525097.886:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21613 comm="syz.4.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe3de929 code=0x7ffc0000 [ 743.525197][T21611] EXT4-fs (loop0): orphan cleanup on readonly fs [ 743.535863][T21611] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2670: bg 0: block 248: padding at end of block bitmap is not set [ 743.711471][T21627] hub 6-0:1.0: USB hub found [ 743.735170][T21627] hub 6-0:1.0: 8 ports detected [ 743.821811][T21611] Quota error (device loop0): write_blk: dquota write failed [ 743.829342][T21611] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 743.839292][T21611] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2670: Failed to acquire dquot type 1 [ 743.873009][T21605] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 743.882552][T21605] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 743.892011][T21605] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2667: Failed to acquire dquot type 1 [ 743.991460][T21611] EXT4-fs (loop0): 1 truncate cleaned up [ 743.998660][T21611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 744.107077][T21641] loop3: detected capacity change from 0 to 512 [ 744.309880][T21605] EXT4-fs (loop2): 1 truncate cleaned up [ 744.319292][T21605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 744.351403][T21641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 744.452913][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.464725][T21641] EXT4-fs (loop3): orphan cleanup on readonly fs [ 744.477252][T21641] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2675: bg 0: block 248: padding at end of block bitmap is not set [ 744.504389][T21641] Quota error (device loop3): write_blk: dquota write failed [ 744.511927][T21641] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 744.521938][T21641] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2675: Failed to acquire dquot type 1 [ 744.537997][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.550052][T21641] EXT4-fs (loop3): 1 truncate cleaned up [ 744.556375][T21641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 744.582743][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.207526][T21727] bridge1: entered promiscuous mode [ 745.212978][T21727] bridge1: entered allmulticast mode [ 745.215967][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.238100][T21732] futex_wake_op: syz.1.2676 tries to shift op by -1; fix this program [ 745.307988][T21736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2678'. [ 745.647807][ T29] audit: type=1400 audit(1751525100.076:7515): avc: denied { ioctl } for pid=21730 comm="syz.1.2676" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 746.380838][T21747] loop3: detected capacity change from 0 to 4096 [ 746.479693][T21761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2679'. [ 746.514459][T21747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.630008][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.795249][T21783] loop4: detected capacity change from 0 to 512 [ 746.841061][T21783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.864530][T21784] hub 6-0:1.0: USB hub found [ 746.874633][T21784] hub 6-0:1.0: 8 ports detected [ 746.881718][T21783] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 747.212128][T21805] loop1: detected capacity change from 0 to 512 [ 747.227563][T21805] EXT4-fs: Ignoring removed oldalloc option [ 747.249474][T21805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 747.271106][T21805] EXT4-fs (loop1): orphan cleanup on readonly fs [ 747.285577][T21805] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2688: Failed to acquire dquot type 1 [ 747.310981][T21805] EXT4-fs (loop1): 1 truncate cleaned up [ 747.327487][T21805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.466475][T21823] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2685'. [ 747.652374][T21841] loop2: detected capacity change from 0 to 512 [ 747.670298][T21841] EXT4-fs: Ignoring removed oldalloc option [ 747.694857][T21841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 747.715935][T21841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 747.733898][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.739198][T21841] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2689: Failed to acquire dquot type 1 [ 747.759809][T21841] EXT4-fs (loop2): 1 truncate cleaned up [ 747.791361][T21841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.812849][T21853] FAULT_INJECTION: forcing a failure. [ 747.812849][T21853] name failslab, interval 1, probability 0, space 0, times 1 [ 747.825631][T21853] CPU: 1 UID: 0 PID: 21853 Comm: syz.4.2691 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 747.825672][T21853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 747.825689][T21853] Call Trace: [ 747.825698][T21853] [ 747.825709][T21853] __dump_stack+0x1d/0x30 [ 747.825737][T21853] dump_stack_lvl+0xe8/0x140 [ 747.825785][T21853] dump_stack+0x15/0x1b [ 747.825807][T21853] should_fail_ex+0x265/0x280 [ 747.825895][T21853] should_failslab+0x8c/0xb0 [ 747.825932][T21853] kmem_cache_alloc_node_noprof+0x57/0x320 [ 747.825970][T21853] ? __alloc_skb+0x101/0x320 [ 747.826010][T21853] __alloc_skb+0x101/0x320 [ 747.826050][T21853] tcp_stream_alloc_skb+0x2d/0x1d0 [ 747.826097][T21853] tcp_sendmsg_locked+0x12f0/0x2cc0 [ 747.826152][T21853] ? __pfx_tcp_sendmsg+0x10/0x10 [ 747.826189][T21853] tcp_sendmsg+0x2f/0x50 [ 747.826305][T21853] inet_sendmsg+0x76/0xd0 [ 747.826385][T21853] __sock_sendmsg+0x102/0x180 [ 747.826481][T21853] __sys_sendto+0x268/0x330 [ 747.826530][T21853] __x64_sys_sendto+0x76/0x90 [ 747.826572][T21853] x64_sys_call+0x2eb6/0x2fb0 [ 747.826603][T21853] do_syscall_64+0xd2/0x200 [ 747.826626][T21853] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 747.826662][T21853] ? clear_bhb_loop+0x40/0x90 [ 747.826688][T21853] ? clear_bhb_loop+0x40/0x90 [ 747.826717][T21853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.826738][T21853] RIP: 0033:0x7fe2fe3de929 [ 747.826753][T21853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.826776][T21853] RSP: 002b:00007fe2fca47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 747.826801][T21853] RAX: ffffffffffffffda RBX: 00007fe2fe605fa0 RCX: 00007fe2fe3de929 [ 747.826817][T21853] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 747.826833][T21853] RBP: 00007fe2fca47090 R08: 0000000000000000 R09: 0000000000000000 [ 747.826860][T21853] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 747.826876][T21853] R13: 0000000000000000 R14: 00007fe2fe605fa0 R15: 00007fff1aedda28 [ 747.826900][T21853] [ 748.110145][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.468294][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 748.468314][ T29] audit: type=1326 audit(1751525102.946:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.498040][ T29] audit: type=1326 audit(1751525102.946:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.521578][ T29] audit: type=1326 audit(1751525102.946:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.528467][T21885] loop1: detected capacity change from 0 to 1024 [ 748.545150][ T29] audit: type=1326 audit(1751525102.946:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.545191][ T29] audit: type=1326 audit(1751525102.946:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.598693][ T29] audit: type=1326 audit(1751525102.946:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.622230][ T29] audit: type=1326 audit(1751525102.956:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.645830][ T29] audit: type=1326 audit(1751525102.956:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.669355][ T29] audit: type=1326 audit(1751525102.956:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.692975][ T29] audit: type=1326 audit(1751525102.956:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21880 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d54e929 code=0x7ffc0000 [ 748.728650][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.763645][ T3306] ================================================================== [ 748.771814][ T3306] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 748.779425][ T3306] [ 748.781779][ T3306] read-write to 0xffff888237d25e68 of 1 bytes by task 21890 on cpu 1: [ 748.789955][ T3306] folio_add_lru+0xa5/0x1f0 [ 748.794499][ T3306] folio_add_lru_vma+0x49/0x70 [ 748.799298][ T3306] do_wp_page+0x132b/0x2400 [ 748.803816][ T3306] handle_mm_fault+0x77d/0x2be0 [ 748.808701][ T3306] do_user_addr_fault+0x636/0x1090 [ 748.813847][ T3306] exc_page_fault+0x62/0xa0 [ 748.818376][ T3306] asm_exc_page_fault+0x26/0x30 [ 748.823250][ T3306] [ 748.825581][ T3306] read to 0xffff888237d25e68 of 1 bytes by task 3306 on cpu 0: [ 748.833143][ T3306] __lru_add_drain_all+0x12b/0x3f0 [ 748.838293][ T3306] lru_add_drain_all+0x10/0x20 [ 748.843085][ T3306] invalidate_bdev+0x47/0x70 [ 748.847696][ T3306] ext4_put_super+0x624/0x7d0 [ 748.852398][ T3306] generic_shutdown_super+0xe3/0x210 [ 748.857713][ T3306] kill_block_super+0x2a/0x70 [ 748.862464][ T3306] ext4_kill_sb+0x42/0x80 [ 748.866814][ T3306] deactivate_locked_super+0x72/0x1c0 [ 748.872219][ T3306] deactivate_super+0x97/0xa0 [ 748.876920][ T3306] cleanup_mnt+0x269/0x2e0 [ 748.881355][ T3306] __cleanup_mnt+0x19/0x20 [ 748.885789][ T3306] task_work_run+0x131/0x1a0 [ 748.890399][ T3306] exit_to_user_mode_loop+0xe4/0x100 [ 748.895707][ T3306] do_syscall_64+0x1d6/0x200 [ 748.900317][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.906228][ T3306] [ 748.908559][ T3306] value changed: 0x05 -> 0x06 [ 748.913253][ T3306] [ 748.915585][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 748.921750][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 748.934355][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.944440][ T3306] ================================================================== [ 749.034776][T21902] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2697'.