last executing test programs: 11.139696265s ago: executing program 2 (id=790): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 9.663867057s ago: executing program 2 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 9.662596577s ago: executing program 0 (id=796): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 9.360867691s ago: executing program 3 (id=800): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 9.352216911s ago: executing program 2 (id=801): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x528) 7.852081974s ago: executing program 2 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 7.558778148s ago: executing program 3 (id=805): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r2, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x198}, &(0x7f0000000000), &(0x7f0000000280)) r3 = socket$kcm(0x2, 0xf, 0x2) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r3, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x918f, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000440), 0xce3, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 7.277312332s ago: executing program 2 (id=806): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 7.063856215s ago: executing program 3 (id=808): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 6.603154462s ago: executing program 0 (id=809): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r7}, 0x20) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xfff, 0x9}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1a4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x228}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x289}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x880}, 0x0) wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) 6.202431658s ago: executing program 0 (id=810): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000001100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x81000) move_mount(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, 0x0, 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0x300) 6.013323211s ago: executing program 1 (id=811): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 5.924136172s ago: executing program 3 (id=812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b800800", @ANYBLOB="110008"], 0x8c}}, 0x0) 5.583174398s ago: executing program 3 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @local, @empty}}}}) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012921"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.511428908s ago: executing program 1 (id=814): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r6}, 0x20) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xfff, 0x9}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1a4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x228}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x289}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x880}, 0x0) wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) 4.949655927s ago: executing program 1 (id=815): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.854796482s ago: executing program 1 (id=816): pivot_root(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.901683217s ago: executing program 0 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 2.740772599s ago: executing program 0 (id=818): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x5, 0xffffffff, 0x4, 0x3, 0x2, 0x9, 0x7b, 0x0, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0) 1.797930593s ago: executing program 0 (id=819): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 1.797131823s ago: executing program 3 (id=820): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.537492627s ago: executing program 4 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="f5ff06fdff000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000380)) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 1.454218228s ago: executing program 1 (id=822): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, 0x0, &(0x7f0000000340), &(0x7f0000000200)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES8=r8]) 1.190838972s ago: executing program 4 (id=823): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x284, 0x0, 0x4, 0x70bd2b, 0x25dfdbbd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8fc97ea957758d6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "557f15eb44e90c46"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x13115a88}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cea30718273ce2af2447c25f6c38becd7ceb41a5d83be9b6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="662d8aa286c5f5ff6ea381172134ffc8ed01048969876ea76f5d5ef3a85ba755"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "518c479109bc0dd8"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f2dffb34ba8e17f2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7053dba89b4d4875715346c952de81ae"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc569f2264c7c1af"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fd853fa8963fdde"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f53e3f0ec8eafca"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ba1965e0946fc2a53e87fe3e86674d08db4dd5f9173caec7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42f1ddb943a8c4557d041a62acd0b0bea38e192cbab52e2bf51ba37087293f04"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "71ffdea169c92d07"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69d813e54c4a1fdeca4cf54f8dace4ea058ef253b0cb56cb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d2a3fe063ac33a95b9d77d86382eaf9525d78797627cc53"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b41de390ea4bf1dcb3def39d62629e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b611edf06994dcd02aa8dcef45c7a95da274f4862240740c2ea600bc71398da9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5366d55c6de4f0ce423b7b406d242e27"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "61b1243d312aa455"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ca579a4f42c66a456cc92bec1a3643a2b49cd4c613cd36e7"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3a2540cf620e729f0d20586881a0f9d0e65e2c3386055c441eeec091ba1af278"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a12f08759e197c58c1bfd9b6f10e9f1b4fdf0c8cd9f2e44a935611f473591bf2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="031cfcecc153f796150fc0b22a64339269443f0741512f8d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) 768.106118ms ago: executing program 2 (id=824): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000", @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20f"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r2, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c6a5dbbc9875d3f05003650bab25f58ce8c508cdb", 0x40, 0x8000c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 742.056069ms ago: executing program 4 (id=825): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 516.140222ms ago: executing program 4 (id=826): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 487.927413ms ago: executing program 1 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 199.205516ms ago: executing program 4 (id=828): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r6}, 0x20) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xfff, 0x9}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1a4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x228}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x289}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x880}, 0x0) wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) 0s ago: executing program 4 (id=829): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) kernel console output (not intermixed with test programs): 10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 207.558836][ T29] audit: type=1400 audit(1751524704.422:932): avc: denied { search } for pid=2978 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.580405][ T29] audit: type=1400 audit(1751524704.422:933): avc: denied { append } for pid=2978 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 207.602681][ T29] audit: type=1400 audit(1751524704.422:934): avc: denied { open } for pid=2978 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 207.625473][ T6076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 207.641087][ T6064] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 207.654770][ T6064] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 207.666943][ T6079] program syz.4.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.677161][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.722734][ T6076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.493: bg 0: block 248: padding at end of block bitmap is not set [ 207.751384][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.791525][ T6076] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.493: Failed to acquire dquot type 1 [ 207.831718][ T6076] EXT4-fs (loop3): 1 truncate cleaned up [ 208.203795][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.276076][ T6090] program syz.1.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.313746][ T6092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'. [ 208.541533][ T6093] loop1: detected capacity change from 0 to 1024 [ 208.560845][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.585281][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.621460][ T6090] EXT4-fs (loop1): shut down requested (2) [ 208.637266][ T6090] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 208.656160][ T6090] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 208.761112][ T6088] loop0: detected capacity change from 0 to 512 [ 208.800192][ T6088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.848688][ T6088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 208.855546][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.043398][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.500'. [ 209.777843][ T6088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.495: bg 0: block 248: padding at end of block bitmap is not set [ 210.290796][ T6120] loop3: detected capacity change from 0 to 1024 [ 210.302250][ T6120] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.325837][ T6120] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.505: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.359052][ T6120] __quota_error: 5 callbacks suppressed [ 210.359073][ T6120] Quota error (device loop3): write_blk: dquota write failed [ 210.372296][ T6120] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 210.426796][ T29] audit: type=1400 audit(1751524707.382:938): avc: denied { read } for pid=6123 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 210.475855][ T6120] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.505: Failed to acquire dquot type 0 [ 210.494024][ T6120] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.505: Freeing blocks not in datazone - block = 0, count = 4096 [ 210.537906][ T6088] Quota error (device loop0): write_blk: dquota write failed [ 210.545551][ T6088] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 210.556318][ T6088] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.495: Failed to acquire dquot type 1 [ 210.569747][ T6120] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.505: Invalid inode bitmap blk 0 in block_group 0 [ 210.582629][ T37] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.582877][ T6088] EXT4-fs (loop0): 1 truncate cleaned up [ 210.601537][ T6129] loop4: detected capacity change from 0 to 1024 [ 210.609900][ T6120] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 210.620590][ T37] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 210.629152][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 210.656109][ T6129] EXT4-fs: Ignoring removed nobh option [ 210.669014][ T6132] loop2: detected capacity change from 0 to 4096 [ 210.677899][ T6134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6134 comm=syz.1.509 [ 210.690921][ T6120] EXT4-fs (loop3): 1 orphan inode deleted [ 210.699710][ T6088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.713545][ T6120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.727864][ T6129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.762277][ T6120] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.505: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 210.808541][ T6129] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.507: Allocating blocks 385-513 which overlap fs metadata [ 210.831253][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.880766][ T6129] EXT4-fs (loop4): pa ffff888106aa7770: logic 16, phys. 129, len 24 [ 210.888813][ T6129] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 210.914231][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.951667][ T29] audit: type=1400 audit(1751524707.902:939): avc: denied { create } for pid=6143 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.997387][ T6132] syzkaller0: entered promiscuous mode [ 211.002961][ T6132] syzkaller0: entered allmulticast mode [ 211.032293][ T6142] loop3: detected capacity change from 0 to 1024 [ 211.071287][ T6142] EXT4-fs: Ignoring removed bh option [ 211.076735][ T6142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.099425][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.119444][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.164881][ T6151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.512'. [ 211.261505][ T6142] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.510: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 211.412278][ T6155] loop4: detected capacity change from 0 to 1024 [ 211.425048][ T6159] bridge1: entered promiscuous mode [ 211.430329][ T6159] bridge1: entered allmulticast mode [ 211.459118][ T6160] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.510: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 211.490111][ T6155] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.569471][ T6155] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.513: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.583777][ T6155] Quota error (device loop4): write_blk: dquota write failed [ 211.591315][ T6155] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 211.601797][ T6155] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.513: Failed to acquire dquot type 0 [ 211.624925][ T6155] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.513: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.639733][ T6155] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.513: Invalid inode bitmap blk 0 in block_group 0 [ 211.648700][ T6164] program syz.1.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.662488][ T4153] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.678510][ T6155] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 211.724423][ T4153] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 211.733011][ T4153] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 211.746770][ T6155] EXT4-fs (loop4): 1 orphan inode deleted [ 211.771269][ T6155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.863508][ T6150] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.513: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 211.930963][ T6167] wg2: left promiscuous mode [ 211.935779][ T6167] wg2: left allmulticast mode [ 212.052173][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.052723][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.637364][ T6185] loop2: detected capacity change from 0 to 1024 [ 212.644774][ T6185] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.735858][ T6185] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.522: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.889821][ T6191] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6191 comm=syz.0.523 [ 213.168112][ T6185] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.522: Failed to acquire dquot type 0 [ 213.194238][ T6185] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.522: Freeing blocks not in datazone - block = 0, count = 4096 [ 213.219670][ T6185] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.522: Invalid inode bitmap blk 0 in block_group 0 [ 213.235877][ T4136] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.246141][ T6185] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 213.263934][ T4136] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 213.278007][ T6185] EXT4-fs (loop2): 1 orphan inode deleted [ 213.297952][ T6198] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 213.302645][ T6185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.324273][ T6185] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.522: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 213.434227][ T6198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.464648][ T6198] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 213.556419][ T6201] bond1: (slave veth3): Enslaving as an active interface with an up link [ 213.603704][ T6208] wg2: left promiscuous mode [ 213.609096][ T6208] wg2: left allmulticast mode [ 213.707363][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.016272][ T6216] loop1: detected capacity change from 0 to 1024 [ 214.066248][ T6214] loop3: detected capacity change from 0 to 128 [ 214.093598][ T6208] wg2: entered promiscuous mode [ 214.099679][ T6208] wg2: entered allmulticast mode [ 214.154203][ T6214] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 214.162191][ T6214] FAT-fs (loop3): Filesystem has been set read-only [ 214.180213][ T6214] syz.3.527: attempt to access beyond end of device [ 214.180213][ T6214] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 214.440428][ T6214] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 214.448345][ T6214] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 214.634570][ T6214] syz.3.527: attempt to access beyond end of device [ 214.634570][ T6214] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.647883][ T6214] syz.3.527: attempt to access beyond end of device [ 214.647883][ T6214] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.662526][ T6214] syz.3.527: attempt to access beyond end of device [ 214.662526][ T6214] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.691988][ T6230] syz.3.527: attempt to access beyond end of device [ 214.691988][ T6230] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.730508][ T6230] syz.3.527: attempt to access beyond end of device [ 214.730508][ T6230] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.746771][ T6229] wg2: left promiscuous mode [ 214.755953][ T6229] wg2: left allmulticast mode [ 214.770010][ T6214] syz.3.527: attempt to access beyond end of device [ 214.770010][ T6214] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.783273][ T6230] syz.3.527: attempt to access beyond end of device [ 214.783273][ T6230] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.830803][ T6214] syz.3.527: attempt to access beyond end of device [ 214.830803][ T6214] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.844185][ T6230] syz.3.527: attempt to access beyond end of device [ 214.844185][ T6230] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 214.959445][ T6232] wg2: entered promiscuous mode [ 214.964566][ T6232] wg2: entered allmulticast mode [ 215.011346][ T6236] loop4: detected capacity change from 0 to 512 [ 215.018155][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.530'. [ 215.068372][ T6236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.098541][ T6236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.142938][ T6236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.533: bg 0: block 248: padding at end of block bitmap is not set [ 215.322652][ T6236] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.533: Failed to acquire dquot type 1 [ 215.390318][ T6243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6243 comm=syz.3.535 [ 215.420466][ T6236] EXT4-fs (loop4): 1 truncate cleaned up [ 215.440443][ T6236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.452415][ T6245] loop0: detected capacity change from 0 to 256 [ 215.463248][ T6245] msdos: Unknown parameter 'dLts' [ 215.491794][ T6236] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.533: deleted inode referenced: 12 [ 215.605404][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 215.611596][ T29] audit: type=1326 audit(1751524712.552:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.634871][ T29] audit: type=1326 audit(1751524712.552:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.658190][ T29] audit: type=1326 audit(1751524712.552:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.681456][ T29] audit: type=1326 audit(1751524712.552:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.701301][ T6251] loop2: detected capacity change from 0 to 1024 [ 215.704648][ T29] audit: type=1326 audit(1751524712.552:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.723074][ T6251] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.734286][ T29] audit: type=1326 audit(1751524712.552:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.767867][ T29] audit: type=1326 audit(1751524712.552:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.791236][ T29] audit: type=1326 audit(1751524712.552:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.814573][ T29] audit: type=1326 audit(1751524712.552:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.837837][ T29] audit: type=1326 audit(1751524712.552:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6248 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 215.869011][ T6251] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.538: lblock 1 mapped to illegal pblock 1 (length 1) [ 215.892193][ T6251] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.538: Failed to acquire dquot type 0 [ 215.920130][ T6257] loop0: detected capacity change from 0 to 128 [ 215.926723][ T6257] EXT4-fs: test_dummy_encryption option not supported [ 215.945281][ T6251] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.538: Freeing blocks not in datazone - block = 0, count = 4096 [ 215.988380][ T6251] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.538: Invalid inode bitmap blk 0 in block_group 0 [ 216.003264][ T4150] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.027650][ T6260] loop3: detected capacity change from 0 to 1024 [ 216.045036][ T4150] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 216.057141][ T6260] EXT4-fs: Ignoring removed nobh option [ 216.059901][ T6251] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 216.141320][ T6251] EXT4-fs (loop2): 1 orphan inode deleted [ 216.147498][ T6251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.210914][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.225763][ T6251] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.538: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 216.251619][ T6260] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.539: Allocating blocks 385-513 which overlap fs metadata [ 216.273783][ T6260] EXT4-fs (loop3): pa ffff888106aa7770: logic 16, phys. 129, len 24 [ 216.282025][ T6260] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 216.346052][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.356481][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.372344][ T6265] hub 6-0:1.0: USB hub found [ 216.377716][ T6265] hub 6-0:1.0: 8 ports detected [ 216.433171][ T6270] hub 6-0:1.0: USB hub found [ 216.439216][ T6270] hub 6-0:1.0: 8 ports detected [ 216.483358][ T6275] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 216.520701][ T6275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.562479][ T6289] loop1: detected capacity change from 0 to 1024 [ 216.578931][ T6289] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.607082][ T6287] bond1: (slave veth3): Enslaving as an active interface with an up link [ 216.628108][ T6289] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.544: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.645421][ T6275] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 216.660150][ T6289] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.544: Failed to acquire dquot type 0 [ 216.675254][ T6289] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.544: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.696585][ T6289] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.544: Invalid inode bitmap blk 0 in block_group 0 [ 216.718639][ T6289] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 216.727283][ T4163] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.742066][ T6289] EXT4-fs (loop1): 1 orphan inode deleted [ 216.758361][ T6289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.762169][ T4163] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 216.791361][ T6281] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.544: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 216.832016][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.805535][ T6342] hub 6-0:1.0: USB hub found [ 217.817999][ T6342] hub 6-0:1.0: 8 ports detected [ 219.047462][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.094727][ T6365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6365 comm=syz.4.549 [ 219.827233][ T6427] loop4: detected capacity change from 0 to 512 [ 220.243592][ T6427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.263754][ T6427] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.300760][ T6430] loop3: detected capacity change from 0 to 1024 [ 220.436342][ T6439] loop2: detected capacity change from 0 to 128 [ 220.447655][ T6439] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 220.455567][ T6439] FAT-fs (loop2): Filesystem has been set read-only [ 220.464115][ T6439] bio_check_eod: 288 callbacks suppressed [ 220.464131][ T6439] syz.2.553: attempt to access beyond end of device [ 220.464131][ T6439] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 220.483875][ T6439] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 220.491767][ T6439] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 220.729255][ T6439] syz.2.553: attempt to access beyond end of device [ 220.729255][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.760193][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 220.760212][ T29] audit: type=1326 audit(1751524717.712:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 220.985864][ T6439] syz.2.553: attempt to access beyond end of device [ 220.985864][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.017604][ T6439] syz.2.553: attempt to access beyond end of device [ 221.017604][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.054313][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.062463][ T29] audit: type=1326 audit(1751524717.752:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded37de929 code=0x7ffc0000 [ 221.086739][ T29] audit: type=1326 audit(1751524717.712:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.110175][ T29] audit: type=1326 audit(1751524717.752:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.114038][ T6442] loop0: detected capacity change from 0 to 1024 [ 221.133697][ T29] audit: type=1326 audit(1751524717.752:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.142180][ T6448] loop3: detected capacity change from 0 to 256 [ 221.163279][ T29] audit: type=1326 audit(1751524717.752:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.171132][ T6439] syz.2.553: attempt to access beyond end of device [ 221.171132][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.192878][ T29] audit: type=1326 audit(1751524717.752:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.229810][ T29] audit: type=1326 audit(1751524717.752:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.233629][ T6448] msdos: Unknown parameter 'dLts' [ 221.253601][ T29] audit: type=1326 audit(1751524717.752:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.281972][ T29] audit: type=1326 audit(1751524717.752:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 221.290887][ T6443] syz.2.553: attempt to access beyond end of device [ 221.290887][ T6443] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.318470][ T6439] syz.2.553: attempt to access beyond end of device [ 221.318470][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.333933][ T6439] syz.2.553: attempt to access beyond end of device [ 221.333933][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.372516][ T6452] loop4: detected capacity change from 0 to 128 [ 221.374937][ T6443] syz.2.553: attempt to access beyond end of device [ 221.374937][ T6443] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.396718][ T6449] loop1: detected capacity change from 0 to 512 [ 221.400272][ T6439] syz.2.553: attempt to access beyond end of device [ 221.400272][ T6439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 221.428492][ T6449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.429855][ T6452] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 221.444967][ T6452] FAT-fs (loop4): Filesystem has been set read-only [ 221.472780][ T6449] EXT4-fs (loop1): orphan cleanup on readonly fs [ 221.500555][ T6449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.555: bg 0: block 248: padding at end of block bitmap is not set [ 221.514890][ T6452] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 221.522817][ T6452] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 221.572557][ T6449] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.555: Failed to acquire dquot type 1 [ 221.593899][ T6449] EXT4-fs (loop1): 1 truncate cleaned up [ 221.630491][ T6449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.821285][ T6467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6467 comm=syz.3.561 [ 221.847037][ T6465] loop0: detected capacity change from 0 to 1024 [ 221.902795][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.740912][ T6485] wg2: left promiscuous mode [ 222.746061][ T6485] wg2: left allmulticast mode [ 223.288273][ T6492] wg2: entered promiscuous mode [ 223.293281][ T6492] wg2: entered allmulticast mode [ 223.364321][ T6497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.569'. [ 223.473180][ T6503] loop2: detected capacity change from 0 to 256 [ 223.474322][ T6499] loop1: detected capacity change from 0 to 512 [ 223.479949][ T6503] msdos: Unknown parameter 'dLts' [ 223.527618][ T6499] EXT4-fs: Ignoring removed oldalloc option [ 223.554411][ T6499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.565147][ T6502] loop0: detected capacity change from 0 to 1024 [ 223.575082][ T6499] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.583051][ T6499] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.568: Failed to acquire dquot type 1 [ 223.596062][ T6499] EXT4-fs (loop1): 1 truncate cleaned up [ 223.602360][ T6499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.637495][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.646119][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.658015][ T6510] loop3: detected capacity change from 0 to 512 [ 223.665410][ T6510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.678072][ T6510] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.685566][ T6510] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.573: bg 0: block 248: padding at end of block bitmap is not set [ 223.700161][ T6510] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.573: Failed to acquire dquot type 1 [ 223.712925][ T6510] EXT4-fs (loop3): 1 truncate cleaned up [ 223.719253][ T6510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.836301][ T6516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6516 comm=syz.2.574 [ 224.439654][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.603332][ T6527] wg2: left promiscuous mode [ 224.609750][ T6527] wg2: left allmulticast mode [ 224.656201][ T6527] wg2: entered promiscuous mode [ 224.662877][ T6527] wg2: entered allmulticast mode [ 224.894217][ T6534] loop0: detected capacity change from 0 to 256 [ 224.938267][ T6534] FAT-fs (loop0): codepage cp857 not found [ 224.998625][ T6537] hub 6-0:1.0: USB hub found [ 225.016639][ T6537] hub 6-0:1.0: 8 ports detected [ 225.094401][ T6544] wg2: left promiscuous mode [ 225.099977][ T6544] wg2: left allmulticast mode [ 225.152194][ T6551] wg2: entered promiscuous mode [ 225.157153][ T6551] wg2: entered allmulticast mode [ 225.577525][ T6590] loop2: detected capacity change from 0 to 256 [ 225.591399][ T6590] msdos: Unknown parameter 'dLts' [ 225.656066][ T6592] loop1: detected capacity change from 0 to 128 [ 225.722674][ T6592] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 225.730634][ T6592] FAT-fs (loop1): Filesystem has been set read-only [ 225.748318][ T6592] bio_check_eod: 17679 callbacks suppressed [ 225.748355][ T6592] syz.1.583: attempt to access beyond end of device [ 225.748355][ T6592] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 225.822047][ T6597] loop2: detected capacity change from 0 to 128 [ 225.828966][ T6597] EXT4-fs: test_dummy_encryption option not supported [ 225.924163][ T6592] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 225.932138][ T6592] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 226.035100][ T6592] syz.1.583: attempt to access beyond end of device [ 226.035100][ T6592] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.183027][ T6606] loop0: detected capacity change from 0 to 256 [ 226.198581][ T6585] syz.1.583: attempt to access beyond end of device [ 226.198581][ T6585] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.265109][ T6592] syz.1.583: attempt to access beyond end of device [ 226.265109][ T6592] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.373313][ T6606] FAT-fs (loop0): codepage cp1255 not found [ 226.388903][ T6585] syz.1.583: attempt to access beyond end of device [ 226.388903][ T6585] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.474912][ T6592] syz.1.583: attempt to access beyond end of device [ 226.474912][ T6592] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.532329][ T6585] syz.1.583: attempt to access beyond end of device [ 226.532329][ T6585] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.646000][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.729241][ T6624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.588'. [ 227.777081][ T6623] loop3: detected capacity change from 0 to 1024 [ 228.995894][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 228.995913][ T29] audit: type=1400 audit(1751524725.932:1290): avc: denied { firmware_load } for pid=6632 comm="syz.3.589" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 229.053345][ T6653] hub 6-0:1.0: USB hub found [ 229.087902][ T6653] hub 6-0:1.0: 8 ports detected [ 229.291510][ T6659] loop3: detected capacity change from 0 to 1024 [ 229.347119][ T6671] futex_wake_op: syz.1.593 tries to shift op by 144; fix this program [ 229.487768][ T29] audit: type=1326 audit(1751524726.442:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.511260][ T29] audit: type=1326 audit(1751524726.442:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.534714][ T29] audit: type=1326 audit(1751524726.442:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.558095][ T29] audit: type=1326 audit(1751524726.442:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.624171][ T29] audit: type=1326 audit(1751524726.552:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.647914][ T29] audit: type=1326 audit(1751524726.572:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.672215][ T29] audit: type=1326 audit(1751524726.572:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.695631][ T29] audit: type=1326 audit(1751524726.572:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 229.719209][ T29] audit: type=1326 audit(1751524726.572:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 230.423834][ T6702] loop3: detected capacity change from 0 to 128 [ 230.432129][ T6702] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 230.440018][ T6702] FAT-fs (loop3): Filesystem has been set read-only [ 230.446825][ T6702] syz.3.597: attempt to access beyond end of device [ 230.446825][ T6702] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 230.473993][ T6702] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 230.482022][ T6702] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 230.496044][ T6702] syz.3.597: attempt to access beyond end of device [ 230.496044][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.509337][ T6706] syz.3.597: attempt to access beyond end of device [ 230.509337][ T6706] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.753675][ T6702] bio_check_eod: 1899 callbacks suppressed [ 230.753697][ T6702] syz.3.597: attempt to access beyond end of device [ 230.753697][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.800306][ T6702] syz.3.597: attempt to access beyond end of device [ 230.800306][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.840771][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 230.850314][ T6702] syz.3.597: attempt to access beyond end of device [ 230.850314][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.880992][ T6702] syz.3.597: attempt to access beyond end of device [ 230.880992][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.894874][ T6702] syz.3.597: attempt to access beyond end of device [ 230.894874][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.940789][ T6702] syz.3.597: attempt to access beyond end of device [ 230.940789][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.964687][ T6702] syz.3.597: attempt to access beyond end of device [ 230.964687][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.995739][ T6702] syz.3.597: attempt to access beyond end of device [ 230.995739][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.040220][ T6702] syz.3.597: attempt to access beyond end of device [ 231.040220][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.070170][ T6702] syz.3.597: attempt to access beyond end of device [ 231.070170][ T6702] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.554853][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.563722][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.585355][ T6780] loop2: detected capacity change from 0 to 512 [ 231.594721][ T6780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.621101][ T6780] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.628658][ T6780] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.599: bg 0: block 248: padding at end of block bitmap is not set [ 231.644082][ T6780] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.599: Failed to acquire dquot type 1 [ 231.656505][ T6780] EXT4-fs (loop2): 1 truncate cleaned up [ 231.726222][ T6780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.761895][ T6781] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 231.788720][ T6781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.826693][ T6781] bond2: (slave veth5): Enslaving as an active interface with an up link [ 231.846150][ T6790] loop4: detected capacity change from 0 to 512 [ 231.853368][ T6790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.862273][ T6781] bond1: (slave dummy0): Releasing backup interface [ 231.869552][ T6790] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.882337][ T6790] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.601: bg 0: block 248: padding at end of block bitmap is not set [ 231.887045][ T6781] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 231.906935][ T6790] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.601: Failed to acquire dquot type 1 [ 231.923464][ T6790] EXT4-fs (loop4): 1 truncate cleaned up [ 231.933289][ T6790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.946963][ T6790] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.601: deleted inode referenced: 12 [ 232.061803][ T6798] loop1: detected capacity change from 0 to 1024 [ 232.160224][ T6803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.605'. [ 232.173509][ T6805] bond1: (slave dummy0): Releasing backup interface [ 232.180211][ T6805] bond1: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 232.254659][ T6807] loop3: detected capacity change from 0 to 1024 [ 232.263156][ T6807] EXT4-fs: Ignoring removed bh option [ 232.268737][ T6807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.308683][ T6807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.346312][ T6807] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.606: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 232.367705][ T6807] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.606: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 232.605969][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.626403][ T6815] loop4: detected capacity change from 0 to 256 [ 232.634323][ T6815] msdos: Unknown parameter 'dLts' [ 232.855618][ T6820] loop4: detected capacity change from 0 to 128 [ 232.862527][ T6820] EXT4-fs: test_dummy_encryption option not supported [ 232.911125][ T6821] loop0: detected capacity change from 0 to 512 [ 233.036242][ T6821] EXT4-fs: Ignoring removed oldalloc option [ 233.091471][ T6821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.221917][ T6821] EXT4-fs (loop0): orphan cleanup on readonly fs [ 233.270051][ T6821] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.609: Failed to acquire dquot type 1 [ 233.341095][ T6824] loop1: detected capacity change from 0 to 128 [ 233.355720][ T6821] EXT4-fs (loop0): 1 truncate cleaned up [ 233.374929][ T6821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.400249][ T6824] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 233.408147][ T6824] FAT-fs (loop1): Filesystem has been set read-only [ 233.512694][ T6824] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 233.520714][ T6824] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 233.700448][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.793758][ T6827] hub 6-0:1.0: USB hub found [ 233.806377][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.818046][ T6827] hub 6-0:1.0: 8 ports detected [ 233.884704][ T6830] loop0: detected capacity change from 0 to 512 [ 233.944226][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.984282][ T6830] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.841525][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.880017][ T6857] loop4: detected capacity change from 0 to 1024 [ 234.895493][ T6859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6859 comm=syz.0.616 [ 235.165422][ T6852] syzkaller0: entered promiscuous mode [ 235.171025][ T6852] syzkaller0: entered allmulticast mode [ 235.317125][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.441760][ T6854] Set syz1 is full, maxelem 65536 reached [ 235.783373][ T6906] loop2: detected capacity change from 0 to 256 [ 235.818727][ T6908] loop4: detected capacity change from 0 to 256 [ 235.968384][ T6908] FAT-fs (loop4): codepage cp1255 not found [ 236.052325][ T6906] FAT-fs (loop2): codepage cp1255 not found [ 236.143245][ T6920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.622'. [ 236.161762][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 236.161780][ T29] audit: type=1326 audit(1751524733.112:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.191426][ T29] audit: type=1326 audit(1751524733.122:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.214722][ T29] audit: type=1326 audit(1751524733.122:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.255744][ T29] audit: type=1326 audit(1751524733.202:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.279171][ T29] audit: type=1326 audit(1751524733.202:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.302818][ T29] audit: type=1326 audit(1751524733.202:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.326339][ T29] audit: type=1326 audit(1751524733.202:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.349685][ T29] audit: type=1326 audit(1751524733.202:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.373251][ T29] audit: type=1326 audit(1751524733.202:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.396630][ T29] audit: type=1326 audit(1751524733.202:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8e61c9e929 code=0x7ffc0000 [ 236.535602][ T6941] loop0: detected capacity change from 0 to 128 [ 236.645855][ T6941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 236.653878][ T6941] FAT-fs (loop0): Filesystem has been set read-only [ 236.722947][ T6941] bio_check_eod: 10793 callbacks suppressed [ 236.722968][ T6941] syz.0.625: attempt to access beyond end of device [ 236.722968][ T6941] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 236.825125][ T6941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 236.833080][ T6941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 237.017089][ T6944] syz.0.625: attempt to access beyond end of device [ 237.017089][ T6944] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 237.212617][ T6941] syz.0.625: attempt to access beyond end of device [ 237.212617][ T6941] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 237.505377][ T6944] syz.0.625: attempt to access beyond end of device [ 237.505377][ T6944] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 238.079117][ T6944] syz.0.625: attempt to access beyond end of device [ 238.079117][ T6944] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 238.158334][ T6970] loop3: detected capacity change from 0 to 4096 [ 238.526475][ T6976] hub 6-0:1.0: USB hub found [ 238.552459][ T6976] hub 6-0:1.0: 8 ports detected [ 239.096154][ T6970] syzkaller0: entered promiscuous mode [ 239.101803][ T6970] syzkaller0: entered allmulticast mode [ 239.556184][ T7017] loop4: detected capacity change from 0 to 512 [ 239.567207][ T7017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.578272][ T7017] EXT4-fs (loop4): orphan cleanup on readonly fs [ 239.585959][ T7017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.633: bg 0: block 248: padding at end of block bitmap is not set [ 239.601103][ T7017] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.633: Failed to acquire dquot type 1 [ 239.613582][ T7017] EXT4-fs (loop4): 1 truncate cleaned up [ 239.844554][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.669842][ T7132] hub 6-0:1.0: USB hub found [ 241.687047][ T7132] hub 6-0:1.0: 8 ports detected [ 241.817524][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.838225][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 241.851760][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.922246][ T7146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.639'. [ 242.659807][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 242.659825][ T29] audit: type=1326 audit(1751524739.612:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.803805][ T29] audit: type=1326 audit(1751524739.652:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.827306][ T29] audit: type=1326 audit(1751524739.652:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.850967][ T29] audit: type=1326 audit(1751524739.652:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.874365][ T29] audit: type=1326 audit(1751524739.652:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.897865][ T29] audit: type=1326 audit(1751524739.652:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.921256][ T29] audit: type=1326 audit(1751524739.652:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.944716][ T29] audit: type=1326 audit(1751524739.652:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.968344][ T29] audit: type=1326 audit(1751524739.662:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 242.991892][ T29] audit: type=1326 audit(1751524739.662:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 244.232984][ T7205] loop2: detected capacity change from 0 to 512 [ 244.491795][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.548675][ T7205] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.326499][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.443565][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 245.560237][ T7259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.650'. [ 246.351224][ T7265] SELinux: syz.1.651 (7265) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.371005][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.646'. [ 246.444384][ T7271] loop2: detected capacity change from 0 to 256 [ 246.694194][ T7276] loop1: detected capacity change from 0 to 512 [ 246.823778][ T7276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.860719][ T7276] EXT4-fs (loop1): orphan cleanup on readonly fs [ 246.872473][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.891767][ T7276] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.653: bg 0: block 248: padding at end of block bitmap is not set [ 246.936621][ T7276] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.653: Failed to acquire dquot type 1 [ 246.996501][ T7280] loop0: detected capacity change from 0 to 256 [ 247.008264][ T7280] msdos: Unknown parameter 'dLts' [ 247.142974][ T7276] EXT4-fs (loop1): 1 truncate cleaned up [ 247.160183][ T7271] FAT-fs (loop2): codepage cp1255 not found [ 247.311380][ T7276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.360917][ T7285] loop0: detected capacity change from 0 to 128 [ 247.367813][ T7285] EXT4-fs: test_dummy_encryption option not supported [ 247.632636][ T7276] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.653: deleted inode referenced: 12 [ 248.340763][ T7291] wg2: left promiscuous mode [ 248.345450][ T7291] wg2: left allmulticast mode [ 248.498324][ T7292] wg2: entered promiscuous mode [ 248.503321][ T7292] wg2: entered allmulticast mode [ 249.156982][ T7298] loop3: detected capacity change from 0 to 1024 [ 249.221723][ T7298] EXT4-fs: Ignoring removed bh option [ 249.227249][ T7298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.458437][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.510849][ T7298] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.659: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 249.574071][ T7301] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.659: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 249.729435][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 249.729449][ T29] audit: type=1326 audit(1751524746.682:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 249.759014][ T29] audit: type=1326 audit(1751524746.682:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 249.782466][ T29] audit: type=1326 audit(1751524746.682:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 249.805821][ T29] audit: type=1326 audit(1751524746.682:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 249.829097][ T29] audit: type=1326 audit(1751524746.682:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 249.852510][ T29] audit: type=1326 audit(1751524746.682:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 249.875854][ T29] audit: type=1326 audit(1751524746.682:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 250.011087][ T29] audit: type=1326 audit(1751524746.772:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 250.034635][ T29] audit: type=1326 audit(1751524746.852:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 250.057973][ T29] audit: type=1326 audit(1751524746.852:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4478e929 code=0x7ffc0000 [ 250.234123][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.282920][ T7310] loop3: detected capacity change from 0 to 1024 [ 250.289819][ T7310] EXT4-fs: Ignoring removed nobh option [ 250.454256][ T7310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.509949][ T7310] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.662: Allocating blocks 385-513 which overlap fs metadata [ 250.536127][ T7310] EXT4-fs (loop3): pa ffff888106aa7850: logic 16, phys. 129, len 24 [ 250.544261][ T7310] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 250.621548][ T7317] loop2: detected capacity change from 0 to 512 [ 250.628217][ T7317] EXT4-fs: Ignoring removed oldalloc option [ 250.635133][ T7317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.644871][ T7317] EXT4-fs (loop2): orphan cleanup on readonly fs [ 250.651847][ T7317] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.663: Failed to acquire dquot type 1 [ 250.664877][ T7317] EXT4-fs (loop2): 1 truncate cleaned up [ 250.673588][ T7317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.690036][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.731378][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.818353][ T7328] loop0: detected capacity change from 0 to 512 [ 250.893594][ T7328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.914249][ T7327] loop2: detected capacity change from 0 to 512 [ 250.984776][ T7328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 250.993020][ T7328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.666: bg 0: block 248: padding at end of block bitmap is not set [ 251.008010][ T7327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.040399][ T7328] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.666: Failed to acquire dquot type 1 [ 251.061026][ T7328] EXT4-fs (loop0): 1 truncate cleaned up [ 251.067657][ T7328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.097264][ T7333] loop3: detected capacity change from 0 to 128 [ 251.113986][ T7327] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.158980][ T7333] FAT-fs (loop3): Directory bread(block 32) failed [ 251.177957][ T7333] FAT-fs (loop3): Directory bread(block 33) failed [ 251.199815][ T7333] FAT-fs (loop3): Directory bread(block 34) failed [ 251.206553][ T7333] FAT-fs (loop3): Directory bread(block 35) failed [ 251.213263][ T7333] FAT-fs (loop3): Directory bread(block 36) failed [ 251.219834][ T7333] FAT-fs (loop3): Directory bread(block 37) failed [ 251.226564][ T7333] FAT-fs (loop3): Directory bread(block 38) failed [ 251.233189][ T7333] FAT-fs (loop3): Directory bread(block 39) failed [ 251.239770][ T7333] FAT-fs (loop3): Directory bread(block 40) failed [ 251.246385][ T7333] FAT-fs (loop3): Directory bread(block 41) failed [ 252.307584][ T7322] syzkaller0: entered promiscuous mode [ 252.313183][ T7322] syzkaller0: entered allmulticast mode [ 252.582589][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.644196][ T7338] loop3: detected capacity change from 0 to 128 [ 252.679761][ T7338] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 252.687697][ T7338] FAT-fs (loop3): Filesystem has been set read-only [ 252.734894][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.745004][ T7338] syz.3.669: attempt to access beyond end of device [ 252.745004][ T7338] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 252.772190][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.775389][ T7338] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 252.787921][ T7338] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 252.796880][ T7338] syz.3.669: attempt to access beyond end of device [ 252.796880][ T7338] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 252.797575][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.810384][ T7338] syz.3.669: attempt to access beyond end of device [ 252.810384][ T7338] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 252.832457][ T7341] syz.3.669: attempt to access beyond end of device [ 252.832457][ T7341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 252.846571][ T7338] syz.3.669: attempt to access beyond end of device [ 252.846571][ T7338] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 252.869576][ T7345] loop0: detected capacity change from 0 to 512 [ 252.883701][ T7341] syz.3.669: attempt to access beyond end of device [ 252.883701][ T7341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 252.892381][ T7344] loop2: detected capacity change from 0 to 1024 [ 252.898269][ T7341] syz.3.669: attempt to access beyond end of device [ 252.898269][ T7341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 252.917716][ T7344] EXT4-fs: Ignoring removed bh option [ 252.923236][ T7344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.946448][ T7345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.947404][ T7344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.967037][ T7345] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.990423][ T7338] syz.3.669: attempt to access beyond end of device [ 252.990423][ T7338] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.015055][ T7341] syz.3.669: attempt to access beyond end of device [ 253.015055][ T7341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.028641][ T7344] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.670: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 253.028814][ T7338] syz.3.669: attempt to access beyond end of device [ 253.028814][ T7338] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.047171][ T7344] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.670: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 253.253719][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.321778][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.438650][ T7361] loop3: detected capacity change from 0 to 512 [ 254.563799][ T7361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.761300][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 254.761340][ T29] audit: type=1326 audit(1751524751.722:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.066873][ T29] audit: type=1326 audit(1751524751.902:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.090380][ T29] audit: type=1326 audit(1751524751.902:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.113777][ T29] audit: type=1326 audit(1751524751.902:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x0 [ 255.432895][ T29] audit: type=1326 audit(1751524752.182:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.456303][ T29] audit: type=1326 audit(1751524752.182:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.479798][ T29] audit: type=1326 audit(1751524752.182:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.503287][ T29] audit: type=1326 audit(1751524752.182:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.526622][ T29] audit: type=1326 audit(1751524752.182:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.549976][ T29] audit: type=1326 audit(1751524752.182:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 255.640201][ T7361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.652885][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.662014][ T7361] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.676: bg 0: block 248: padding at end of block bitmap is not set [ 255.689239][ T7361] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.676: Failed to acquire dquot type 1 [ 255.713532][ T7361] EXT4-fs (loop3): 1 truncate cleaned up [ 255.728236][ T7380] loop2: detected capacity change from 0 to 1024 [ 255.730032][ T7361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.814559][ T7384] loop2: detected capacity change from 0 to 1024 [ 255.845779][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.855327][ T7384] EXT4-fs: Ignoring removed bh option [ 255.860775][ T7384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.881530][ T7384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.951658][ T7384] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.682: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 255.985609][ T7387] loop3: detected capacity change from 0 to 128 [ 256.011428][ T7387] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 256.019395][ T7387] FAT-fs (loop3): Filesystem has been set read-only [ 256.028460][ T7389] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.682: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 256.066472][ T7387] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 256.074588][ T7387] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 256.121820][ T7394] loop1: detected capacity change from 0 to 512 [ 256.129123][ T7394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.138373][ T7394] EXT4-fs (loop1): orphan cleanup on readonly fs [ 256.146386][ T7394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.684: bg 0: block 248: padding at end of block bitmap is not set [ 256.161139][ T7394] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.684: Failed to acquire dquot type 1 [ 256.174329][ T7394] EXT4-fs (loop1): 1 truncate cleaned up [ 256.183102][ T7394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.189133][ T7382] SELinux: syz.4.681 (7382) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 256.415107][ T7397] loop4: detected capacity change from 0 to 1024 [ 256.424143][ T7397] EXT4-fs: Ignoring removed bh option [ 256.429640][ T7397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.456855][ T7397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.530757][ T7397] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.685: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 256.568715][ T7397] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.685: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 256.656545][ T7402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.686'. [ 256.931628][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.023943][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.042450][ T7411] hub 6-0:1.0: USB hub found [ 257.058007][ T7411] hub 6-0:1.0: 8 ports detected [ 257.279955][ T7406] syzkaller0: entered promiscuous mode [ 257.285566][ T7406] syzkaller0: entered allmulticast mode [ 257.576081][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.870572][ T7444] loop3: detected capacity change from 0 to 1024 [ 258.101549][ T7440] syzkaller0: entered promiscuous mode [ 258.107110][ T7440] syzkaller0: entered allmulticast mode [ 258.310671][ T7497] wg2: left promiscuous mode [ 258.316952][ T7497] wg2: left allmulticast mode [ 258.337573][ T7501] loop0: detected capacity change from 0 to 256 [ 258.358428][ T7501] FAT-fs (loop0): codepage cp857 not found [ 258.407381][ T7504] wg2: entered promiscuous mode [ 258.412386][ T7504] wg2: entered allmulticast mode [ 258.449361][ T7511] hub 6-0:1.0: USB hub found [ 258.461626][ T7511] hub 6-0:1.0: 8 ports detected [ 259.170752][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.179239][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.383150][ T7540] loop2: detected capacity change from 0 to 512 [ 259.930146][ T7540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.132736][ T7541] loop4: detected capacity change from 0 to 512 [ 260.696090][ T7561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7561 comm=syz.1.701 [ 261.407803][ T7541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.419838][ T7540] EXT4-fs (loop2): orphan cleanup on readonly fs [ 261.427074][ T7540] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.698: bg 0: block 248: padding at end of block bitmap is not set [ 261.590593][ T7540] __quota_error: 78 callbacks suppressed [ 261.590614][ T7540] Quota error (device loop2): write_blk: dquota write failed [ 261.603804][ T7540] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 261.613860][ T7540] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.698: Failed to acquire dquot type 1 [ 261.631012][ T7563] loop3: detected capacity change from 0 to 1024 [ 261.640458][ T7541] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 261.640546][ T7541] EXT4-fs: failed to create workqueue [ 261.655545][ T7541] EXT4-fs (loop4): mount failed [ 261.744713][ T7540] EXT4-fs (loop2): 1 truncate cleaned up [ 261.751844][ T7540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.920933][ T7563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.963641][ T7573] loop4: detected capacity change from 0 to 1024 [ 261.998908][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.014440][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.085355][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.167364][ T29] audit: type=1326 audit(1751524759.122:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.190878][ T29] audit: type=1326 audit(1751524759.122:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.219549][ T7588] loop3: detected capacity change from 0 to 128 [ 262.230146][ T7588] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 262.238067][ T7588] FAT-fs (loop3): Filesystem has been set read-only [ 262.246958][ T7588] bio_check_eod: 17691 callbacks suppressed [ 262.246978][ T7588] syz.3.705: attempt to access beyond end of device [ 262.246978][ T7588] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 262.271483][ T29] audit: type=1326 audit(1751524759.132:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.294823][ T29] audit: type=1326 audit(1751524759.132:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.318296][ T29] audit: type=1326 audit(1751524759.132:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.326967][ T7585] loop2: detected capacity change from 0 to 1024 [ 262.341637][ T29] audit: type=1326 audit(1751524759.132:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.371528][ T29] audit: type=1326 audit(1751524759.132:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.395575][ T29] audit: type=1326 audit(1751524759.182:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff626d8e929 code=0x7ffc0000 [ 262.415773][ T7588] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 262.427518][ T7588] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 262.443488][ T7588] syz.3.705: attempt to access beyond end of device [ 262.443488][ T7588] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.459876][ T7588] syz.3.705: attempt to access beyond end of device [ 262.459876][ T7588] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.473711][ T7588] syz.3.705: attempt to access beyond end of device [ 262.473711][ T7588] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.487534][ T7588] syz.3.705: attempt to access beyond end of device [ 262.487534][ T7588] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.501385][ T7594] syz.3.705: attempt to access beyond end of device [ 262.501385][ T7594] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.540348][ T7594] syz.3.705: attempt to access beyond end of device [ 262.540348][ T7594] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.572936][ T7594] syz.3.705: attempt to access beyond end of device [ 262.572936][ T7594] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.586849][ T7594] syz.3.705: attempt to access beyond end of device [ 262.586849][ T7594] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.600596][ T7588] syz.3.705: attempt to access beyond end of device [ 262.600596][ T7588] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 262.618247][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.668740][ T7591] syzkaller0: entered promiscuous mode [ 262.674302][ T7591] syzkaller0: entered allmulticast mode [ 263.160565][ T7602] loop3: detected capacity change from 0 to 512 [ 263.171607][ T7602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.197280][ T7602] EXT4-fs (loop3): orphan cleanup on readonly fs [ 263.205751][ T7602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.708: bg 0: block 248: padding at end of block bitmap is not set [ 263.232728][ T7602] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.708: Failed to acquire dquot type 1 [ 263.245444][ T7602] EXT4-fs (loop3): 1 truncate cleaned up [ 263.252106][ T7602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.302105][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.395336][ T7614] loop2: detected capacity change from 0 to 1024 [ 263.426112][ T7614] EXT4-fs: Ignoring removed bh option [ 263.431675][ T7614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.432295][ T7618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.710'. [ 263.466884][ T7614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.506233][ T7623] loop0: detected capacity change from 0 to 256 [ 263.537069][ T7614] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.712: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 263.562027][ T7614] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.712: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 263.652207][ T7631] loop1: detected capacity change from 0 to 1024 [ 263.669610][ T7631] EXT4-fs: Ignoring removed bh option [ 263.675105][ T7631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.748661][ T7623] FAT-fs (loop0): codepage cp1255 not found [ 263.770315][ T7631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.859578][ T7631] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.715: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 263.914940][ T7637] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.715: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 264.570586][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.668264][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.714146][ T7644] loop3: detected capacity change from 0 to 1024 [ 264.737826][ T7644] EXT4-fs: Ignoring removed bh option [ 264.743361][ T7644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.755850][ T7647] loop1: detected capacity change from 0 to 512 [ 264.762711][ T7646] loop2: detected capacity change from 0 to 128 [ 264.763441][ T7647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.778920][ T7646] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 264.786829][ T7646] FAT-fs (loop2): Filesystem has been set read-only [ 264.794400][ T7647] EXT4-fs (loop1): orphan cleanup on readonly fs [ 264.807695][ T7646] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 264.809973][ T7647] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.718: bg 0: block 248: padding at end of block bitmap is not set [ 264.815657][ T7646] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 264.838007][ T7647] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.718: Failed to acquire dquot type 1 [ 264.850196][ T7647] EXT4-fs (loop1): 1 truncate cleaned up [ 264.858085][ T7647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.882987][ T7644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.916332][ T7644] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.720: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 264.959280][ T7644] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.720: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 264.985408][ T7640] SELinux: syz.0.717 (7640) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.228701][ T7655] loop0: detected capacity change from 0 to 512 [ 265.252324][ T7655] EXT4-fs: Ignoring removed oldalloc option [ 265.270330][ T7655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.281797][ T7655] EXT4-fs (loop0): orphan cleanup on readonly fs [ 265.288894][ T7655] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.721: Failed to acquire dquot type 1 [ 265.306825][ T7655] EXT4-fs (loop0): 1 truncate cleaned up [ 265.450825][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.514397][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.678980][ T7658] loop4: detected capacity change from 0 to 1024 [ 265.989310][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.451276][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.591055][ T7679] loop3: detected capacity change from 0 to 256 [ 266.666947][ T7679] FAT-fs (loop3): codepage cp1255 not found [ 266.816393][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.2.728'. [ 266.875179][ T7684] batman_adv: batadv0: Removing interface: dummy0 [ 266.936027][ T7684] bridge_slave_0: left allmulticast mode [ 266.941779][ T7684] bridge_slave_0: left promiscuous mode [ 266.947541][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.018640][ T7684] bridge_slave_1: left allmulticast mode [ 267.024454][ T7684] bridge_slave_1: left promiscuous mode [ 267.030259][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.076292][ T7684] bond0: (slave bond_slave_0): Releasing backup interface [ 267.109201][ T7684] bond0: (slave bond_slave_1): Releasing backup interface [ 267.347112][ T7684] team0: Port device team_slave_0 removed [ 267.403290][ T7684] team0: Port device team_slave_1 removed [ 267.433029][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.440538][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.471793][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.479255][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.744839][ T7694] loop2: detected capacity change from 0 to 1024 [ 267.773344][ T7694] EXT4-fs: Ignoring removed bh option [ 267.778798][ T7694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.843301][ T7694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.924918][ T7694] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.729: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 268.187099][ T7700] loop1: detected capacity change from 0 to 512 [ 268.287470][ T7700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.307567][ T7700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 268.322450][ T7700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.730: bg 0: block 248: padding at end of block bitmap is not set [ 268.338292][ T7700] __quota_error: 130 callbacks suppressed [ 268.338311][ T7700] Quota error (device loop1): write_blk: dquota write failed [ 268.351667][ T7700] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 268.361615][ T7700] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.730: Failed to acquire dquot type 1 [ 268.392399][ T7700] EXT4-fs (loop1): 1 truncate cleaned up [ 268.403272][ T7700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.463352][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.565758][ T7704] hub 6-0:1.0: USB hub found [ 268.573327][ T7704] hub 6-0:1.0: 8 ports detected [ 268.694041][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.811393][ T7724] loop2: detected capacity change from 0 to 512 [ 268.818817][ T7724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.828148][ T7724] EXT4-fs (loop2): orphan cleanup on readonly fs [ 268.835191][ T7724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.733: bg 0: block 248: padding at end of block bitmap is not set [ 268.849742][ T7724] Quota error (device loop2): write_blk: dquota write failed [ 268.857434][ T7724] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 268.867502][ T7724] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.733: Failed to acquire dquot type 1 [ 268.880813][ T7724] EXT4-fs (loop2): 1 truncate cleaned up [ 268.893393][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.592975][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.938294][ T7773] loop4: detected capacity change from 0 to 1024 [ 269.967593][ T7773] EXT4-fs: Ignoring removed nobh option [ 270.008426][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.223117][ T7773] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.736: Allocating blocks 385-513 which overlap fs metadata [ 270.333888][ T7789] EXT4-fs (loop4): pa ffff888106a65230: logic 16, phys. 129, len 24 [ 270.342251][ T7789] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 270.654021][ T7806] wg2: left promiscuous mode [ 270.659352][ T7806] wg2: left allmulticast mode [ 270.852220][ T7807] wg2: entered promiscuous mode [ 270.857165][ T7807] wg2: entered allmulticast mode [ 271.617477][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.683247][ T7837] loop0: detected capacity change from 0 to 1024 [ 271.720339][ T7837] EXT4-fs: Ignoring removed bh option [ 271.725808][ T7837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.765517][ T7843] loop1: detected capacity change from 0 to 1024 [ 271.807119][ T7837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.826935][ T7843] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.888807][ T7843] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.741: lblock 1 mapped to illegal pblock 1 (length 1) [ 271.909900][ T7850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7850 comm=syz.4.740 [ 271.935462][ T7837] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.739: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 271.960329][ T7843] Quota error (device loop1): write_blk: dquota write failed [ 271.967878][ T7843] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 272.032218][ T7843] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.741: Failed to acquire dquot type 0 [ 272.105270][ T7843] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.741: Freeing blocks not in datazone - block = 0, count = 4096 [ 272.171290][ T7843] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.741: Invalid inode bitmap blk 0 in block_group 0 [ 272.190894][ T37] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 272.240435][ T7843] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 272.276214][ T37] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 272.284735][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 272.304289][ T7843] EXT4-fs (loop1): 1 orphan inode deleted [ 272.330680][ T7843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.406466][ T7839] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.741: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 272.473967][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.516203][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.533358][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.560024][ T7861] loop4: detected capacity change from 0 to 512 [ 272.585899][ T7861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.639195][ T7861] EXT4-fs (loop4): orphan cleanup on readonly fs [ 272.944369][ T7861] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.743: bg 0: block 248: padding at end of block bitmap is not set [ 273.006891][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.037377][ T7861] Quota error (device loop4): write_blk: dquota write failed [ 273.044893][ T7861] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 273.054895][ T7861] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.743: Failed to acquire dquot type 1 [ 273.121431][ T7861] EXT4-fs (loop4): 1 truncate cleaned up [ 273.131139][ T7861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.167039][ T29] audit: type=1400 audit(1751524770.122:1593): avc: denied { read write } for pid=7865 comm="syz.0.745" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.442854][ T7868] loop3: detected capacity change from 0 to 128 [ 273.461302][ T7868] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 273.469360][ T7868] FAT-fs (loop3): Filesystem has been set read-only [ 273.485886][ T7870] loop1: detected capacity change from 0 to 1024 [ 273.525215][ T7868] bio_check_eod: 17990 callbacks suppressed [ 273.525300][ T7868] syz.3.746: attempt to access beyond end of device [ 273.525300][ T7868] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 273.556811][ T7868] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 273.564784][ T7868] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 273.573332][ T7868] syz.3.746: attempt to access beyond end of device [ 273.573332][ T7868] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.586610][ T7875] syz.3.746: attempt to access beyond end of device [ 273.586610][ T7875] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.599858][ T7868] syz.3.746: attempt to access beyond end of device [ 273.599858][ T7868] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.619017][ T7875] syz.3.746: attempt to access beyond end of device [ 273.619017][ T7875] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.639024][ T7868] syz.3.746: attempt to access beyond end of device [ 273.639024][ T7868] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.664193][ T7875] syz.3.746: attempt to access beyond end of device [ 273.664193][ T7875] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.696397][ T7868] syz.3.746: attempt to access beyond end of device [ 273.696397][ T7868] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.729246][ T7875] syz.3.746: attempt to access beyond end of device [ 273.729246][ T7875] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.759602][ T7868] syz.3.746: attempt to access beyond end of device [ 273.759602][ T7868] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.371187][ T7879] loop3: detected capacity change from 0 to 256 [ 274.436343][ T7879] FAT-fs (loop3): codepage cp857 not found [ 274.804594][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.813366][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.125063][ T7893] loop2: detected capacity change from 0 to 512 [ 275.157783][ T7893] EXT4-fs: Ignoring removed oldalloc option [ 275.392706][ T7893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.402971][ T7893] EXT4-fs (loop2): orphan cleanup on readonly fs [ 275.409913][ T7893] __quota_error: 1 callbacks suppressed [ 275.409929][ T7893] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 275.425139][ T7893] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 275.434602][ T7893] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.753: Failed to acquire dquot type 1 [ 275.446653][ T7893] EXT4-fs (loop2): 1 truncate cleaned up [ 275.461736][ T7899] loop1: detected capacity change from 0 to 1024 [ 275.468798][ T7899] EXT4-fs: Ignoring removed bh option [ 275.474396][ T7899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.491046][ T7899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.508002][ T7901] loop3: detected capacity change from 0 to 512 [ 275.515981][ T7901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.552781][ T7899] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.755: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 275.570220][ T7901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.577867][ T7901] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.754: bg 0: block 248: padding at end of block bitmap is not set [ 275.678581][ T7901] Quota error (device loop3): write_blk: dquota write failed [ 275.686069][ T7901] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 275.696091][ T7901] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.754: Failed to acquire dquot type 1 [ 275.714964][ T7901] EXT4-fs (loop3): 1 truncate cleaned up [ 275.863365][ T7893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.886911][ T7906] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.755: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 275.909596][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.945911][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.177585][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.628364][ T7913] loop0: detected capacity change from 0 to 1024 [ 276.690342][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.727632][ T7917] loop2: detected capacity change from 0 to 1024 [ 276.755311][ T7917] EXT4-fs: Ignoring removed nobh option [ 276.771536][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.760'. [ 276.852621][ T7917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.889934][ T7917] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.758: Allocating blocks 385-513 which overlap fs metadata [ 276.910597][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.947824][ T7917] EXT4-fs (loop2): pa ffff888106a652a0: logic 16, phys. 129, len 24 [ 276.956156][ T7917] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 276.997345][ T7926] loop3: detected capacity change from 0 to 512 [ 277.014371][ T7926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.014750][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.042684][ T7926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 277.100292][ T7926] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.762: bg 0: block 248: padding at end of block bitmap is not set [ 277.143269][ T7926] Quota error (device loop3): write_blk: dquota write failed [ 277.150779][ T7926] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 277.160902][ T7926] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.762: Failed to acquire dquot type 1 [ 277.173593][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 277.210783][ T7926] EXT4-fs (loop3): 1 truncate cleaned up [ 277.226737][ T7926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.274880][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.301938][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 277.330400][ T29] audit: type=1326 audit(1751524774.282:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded37de929 code=0x7ffc0000 [ 277.373991][ T7938] loop3: detected capacity change from 0 to 1024 [ 277.384382][ T29] audit: type=1326 audit(1751524774.312:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fded37de929 code=0x7ffc0000 [ 277.407784][ T29] audit: type=1326 audit(1751524774.312:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded37de929 code=0x7ffc0000 [ 277.420753][ T7943] hub 6-0:1.0: USB hub found [ 277.431233][ T29] audit: type=1326 audit(1751524774.312:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fded37de929 code=0x7ffc0000 [ 277.438603][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.469421][ T7943] hub 6-0:1.0: 8 ports detected [ 277.473326][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.530254][ T7944] loop2: detected capacity change from 0 to 512 [ 277.548828][ T7944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.571981][ T7944] EXT4-fs (loop2): orphan cleanup on readonly fs [ 277.599976][ T7944] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.766: bg 0: block 248: padding at end of block bitmap is not set [ 277.631956][ T7944] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.766: Failed to acquire dquot type 1 [ 277.704143][ T7944] EXT4-fs (loop2): 1 truncate cleaned up [ 277.711684][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.988216][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.768'. [ 278.084349][ T7980] loop1: detected capacity change from 0 to 4096 [ 278.423281][ T7980] syzkaller0: entered promiscuous mode [ 278.428970][ T7980] syzkaller0: entered allmulticast mode [ 278.487836][ T8000] loop0: detected capacity change from 0 to 1024 [ 278.495398][ T8000] EXT4-fs: Ignoring removed bh option [ 278.500924][ T8000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.586534][ T8000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.766084][ T8000] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.772: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 278.952032][ T8023] loop1: detected capacity change from 0 to 512 [ 278.960016][ T8023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.972893][ T8023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 278.980135][ T8023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.773: bg 0: block 248: padding at end of block bitmap is not set [ 278.998834][ T8023] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.773: Failed to acquire dquot type 1 [ 279.013660][ T8023] EXT4-fs (loop1): 1 truncate cleaned up [ 279.161785][ T8028] loop3: detected capacity change from 0 to 512 [ 279.208592][ T8028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.252210][ T8028] EXT4-fs (loop3): orphan cleanup on readonly fs [ 279.282804][ T8028] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.774: bg 0: block 248: padding at end of block bitmap is not set [ 279.334393][ T8028] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.774: Failed to acquire dquot type 1 [ 279.387868][ T8028] EXT4-fs (loop3): 1 truncate cleaned up [ 279.849144][ T8023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.865691][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.875314][ T8028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.928363][ T8086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8086 comm=syz.0.775 [ 279.982203][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.106383][ T8093] bond2: (slave dummy0): Releasing backup interface [ 280.149269][ T8093] bond1: (slave veth3): Releasing backup interface [ 280.166235][ T8093] bond2: (slave veth5): Releasing backup interface [ 280.366259][ T8107] loop3: detected capacity change from 0 to 128 [ 280.394937][ T8107] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 280.402875][ T8107] FAT-fs (loop3): Filesystem has been set read-only [ 280.427003][ T8109] loop0: detected capacity change from 0 to 128 [ 280.435333][ T8107] bio_check_eod: 5228 callbacks suppressed [ 280.435345][ T8107] syz.3.777: attempt to access beyond end of device [ 280.435345][ T8107] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 280.459176][ T8109] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 280.467136][ T8109] FAT-fs (loop0): Filesystem has been set read-only [ 280.484892][ T8107] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 280.492855][ T8107] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 280.502081][ T8109] syz.0.778: attempt to access beyond end of device [ 280.502081][ T8109] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 280.516539][ T8109] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 280.524459][ T8109] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 280.534530][ T8111] syz.3.777: attempt to access beyond end of device [ 280.534530][ T8111] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.549189][ T8107] syz.3.777: attempt to access beyond end of device [ 280.549189][ T8107] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.565341][ T8110] syz.0.778: attempt to access beyond end of device [ 280.565341][ T8110] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.578837][ T8111] syz.3.777: attempt to access beyond end of device [ 280.578837][ T8111] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.593645][ T8109] syz.0.778: attempt to access beyond end of device [ 280.593645][ T8109] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.607016][ T8107] syz.3.777: attempt to access beyond end of device [ 280.607016][ T8107] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.621730][ T8110] syz.0.778: attempt to access beyond end of device [ 280.621730][ T8110] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.635233][ T8111] syz.3.777: attempt to access beyond end of device [ 280.635233][ T8111] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 280.685181][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.697493][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.768657][ T8115] loop2: detected capacity change from 0 to 1024 [ 280.782816][ T8115] EXT4-fs: Ignoring removed nobh option [ 280.821918][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.856915][ T8121] loop4: detected capacity change from 0 to 256 [ 280.865788][ T8122] netlink: 60 bytes leftover after parsing attributes in process `syz.1.781'. [ 280.886186][ T8115] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.780: Allocating blocks 385-513 which overlap fs metadata [ 280.929083][ T8121] FAT-fs (loop4): codepage cp857 not found [ 280.993502][ T8115] EXT4-fs (loop2): pa ffff888106aa7770: logic 16, phys. 129, len 24 [ 281.001625][ T8115] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 281.102570][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.148833][ T8131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.784'. [ 281.170949][ T8133] loop2: detected capacity change from 0 to 256 [ 281.277633][ T8133] FAT-fs (loop2): codepage cp857 not found [ 281.352687][ T8138] loop0: detected capacity change from 0 to 128 [ 281.363068][ T8138] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 281.371025][ T8138] FAT-fs (loop0): Filesystem has been set read-only [ 281.379969][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 281.379986][ T29] audit: type=1326 audit(1751524778.332:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.384882][ T8138] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 281.409486][ T8138] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 281.425513][ T29] audit: type=1326 audit(1751524778.332:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.448798][ T29] audit: type=1326 audit(1751524778.332:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.472187][ T29] audit: type=1326 audit(1751524778.332:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.495635][ T29] audit: type=1326 audit(1751524778.332:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.519036][ T29] audit: type=1326 audit(1751524778.332:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.542410][ T29] audit: type=1326 audit(1751524778.332:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.568023][ T29] audit: type=1326 audit(1751524778.332:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.591295][ T29] audit: type=1326 audit(1751524778.342:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.614680][ T29] audit: type=1326 audit(1751524778.342:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9c47d6e929 code=0x7ffc0000 [ 281.686681][ T8143] netlink: 76 bytes leftover after parsing attributes in process `syz.2.788'. [ 281.898138][ T8127] loop4: detected capacity change from 0 to 1024 [ 281.943026][ T8127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.107248][ T8160] loop2: detected capacity change from 0 to 512 [ 282.119209][ T8160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.132842][ T8160] EXT4-fs (loop2): orphan cleanup on readonly fs [ 282.139859][ T8160] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.790: bg 0: block 248: padding at end of block bitmap is not set [ 282.226016][ T8160] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.790: Failed to acquire dquot type 1 [ 282.240310][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.249809][ T8160] EXT4-fs (loop2): 1 truncate cleaned up [ 282.411846][ T8163] loop0: detected capacity change from 0 to 128 [ 282.434326][ T8163] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 282.442349][ T8163] FAT-fs (loop0): Filesystem has been set read-only [ 282.468468][ T8163] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 282.476390][ T8163] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 282.723374][ T8168] loop3: detected capacity change from 0 to 128 [ 282.766523][ T8168] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 282.774460][ T8168] FAT-fs (loop3): Filesystem has been set read-only [ 282.952605][ T8168] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 282.960594][ T8168] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 283.174510][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.793'. [ 283.500751][ T8177] loop4: detected capacity change from 0 to 1024 [ 283.548013][ T8174] hub 6-0:1.0: USB hub found [ 283.554736][ T8174] hub 6-0:1.0: 8 ports detected [ 283.562917][ T8181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.795'. [ 283.581420][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.797'. [ 285.551872][ T8232] program syz.1.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.570962][ T8234] netlink: 60 bytes leftover after parsing attributes in process `syz.2.803'. [ 285.587655][ T8229] loop3: detected capacity change from 0 to 1024 [ 285.994247][ T8265] hub 6-0:1.0: USB hub found [ 286.003970][ T8265] hub 6-0:1.0: 8 ports detected [ 286.017753][ T8268] loop2: detected capacity change from 0 to 512 [ 286.077316][ T8268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.143115][ T8268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 286.175225][ T8268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.806: bg 0: block 248: padding at end of block bitmap is not set [ 286.216697][ T8281] wg2: left promiscuous mode [ 286.225372][ T8281] wg2: left allmulticast mode [ 286.264270][ T8268] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.806: Failed to acquire dquot type 1 [ 286.305585][ T8288] wg2: entered promiscuous mode [ 286.310583][ T8288] wg2: entered allmulticast mode [ 286.327014][ T8268] EXT4-fs (loop2): 1 truncate cleaned up [ 286.369223][ T8268] EXT4-fs mount: 2 callbacks suppressed [ 286.369244][ T8268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.431609][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 286.431632][ T29] audit: type=1400 audit(1751524783.392:1792): avc: denied { mount } for pid=8256 comm="syz.2.806" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.584489][ T29] audit: type=1400 audit(1751524783.542:1793): avc: denied { read } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 286.672793][ T29] audit: type=1400 audit(1751524783.582:1794): avc: denied { create } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.693319][ T29] audit: type=1400 audit(1751524783.592:1795): avc: denied { write } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.713697][ T29] audit: type=1400 audit(1751524783.592:1796): avc: denied { read } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.734135][ T29] audit: type=1400 audit(1751524783.602:1797): avc: denied { create } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.753675][ T29] audit: type=1400 audit(1751524783.612:1798): avc: denied { shutdown } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.773309][ T29] audit: type=1400 audit(1751524783.612:1799): avc: denied { getopt } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.792832][ T29] audit: type=1400 audit(1751524783.612:1800): avc: denied { connect } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.812362][ T29] audit: type=1400 audit(1751524783.612:1801): avc: denied { name_connect } for pid=8303 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 287.229967][ T8319] bridge_slave_0: left allmulticast mode [ 287.235807][ T8319] bridge_slave_0: left promiscuous mode [ 287.241515][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.251703][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 287.262849][ T8319] bridge_slave_1: left allmulticast mode [ 287.268571][ T8319] bridge_slave_1: left promiscuous mode [ 287.274475][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.290979][ T8319] bond0: (slave bond_slave_0): Releasing backup interface [ 287.318795][ T8319] bond0: (slave bond_slave_1): Releasing backup interface [ 287.347575][ T8319] team0: Port device team_slave_0 removed [ 287.372804][ T8319] team0: Port device team_slave_1 removed [ 287.390678][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.398152][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.420220][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.427755][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.476277][ T8319] bond1: (slave veth3): Releasing backup interface [ 287.499761][ T8321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.812'. [ 287.668497][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.677082][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.694360][ T8328] loop3: detected capacity change from 0 to 512 [ 287.705151][ T8328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.715329][ T8328] EXT4-fs (loop3): orphan cleanup on readonly fs [ 287.723607][ T8328] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.813: bg 0: block 248: padding at end of block bitmap is not set [ 287.739397][ T8328] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.813: Failed to acquire dquot type 1 [ 287.752459][ T8328] EXT4-fs (loop3): 1 truncate cleaned up [ 287.759116][ T8328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.320291][ T8340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.817'. [ 290.420226][ T8343] loop0: detected capacity change from 0 to 512 [ 290.451279][ T8343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.521109][ T8343] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.327816][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.337482][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.423039][ T8351] hub 6-0:1.0: USB hub found [ 291.430233][ T8351] hub 6-0:1.0: 8 ports detected [ 291.460236][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 291.460256][ T29] audit: type=1400 audit(1751524788.422:1858): avc: denied { create } for pid=8350 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.522133][ T29] audit: type=1400 audit(1751524788.452:1859): avc: denied { write } for pid=8350 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.541500][ T29] audit: type=1400 audit(1751524788.452:1860): avc: denied { module_request } for pid=8350 comm="syz.0.819" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.613082][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 291.649772][ T29] audit: type=1400 audit(1751524788.602:1861): avc: denied { setopt } for pid=8357 comm="syz.4.821" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.677393][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 291.696415][ T29] audit: type=1400 audit(1751524788.652:1862): avc: denied { create } for pid=8364 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.715940][ T29] audit: type=1400 audit(1751524788.652:1863): avc: denied { setopt } for pid=8364 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.718945][ T8365] loop1: detected capacity change from 0 to 128 [ 291.765009][ T29] audit: type=1400 audit(1751524788.722:1864): avc: denied { mount } for pid=8364 comm="syz.1.822" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 291.787580][ T8365] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 291.795583][ T8365] FAT-fs (loop1): Filesystem has been set read-only [ 291.820651][ T8365] bio_check_eod: 53946 callbacks suppressed [ 291.820671][ T8365] syz.1.822: attempt to access beyond end of device [ 291.820671][ T8365] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 291.843144][ T8365] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 291.851061][ T8365] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 291.883662][ T8365] syz.1.822: attempt to access beyond end of device [ 291.883662][ T8365] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 291.887062][ T29] audit: type=1400 audit(1751524788.842:1865): avc: denied { bind } for pid=8364 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.912959][ T8376] syz.1.822: attempt to access beyond end of device [ 291.912959][ T8376] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 291.949292][ T8365] syz.1.822: attempt to access beyond end of device [ 291.949292][ T8365] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 291.977342][ T8376] syz.1.822: attempt to access beyond end of device [ 291.977342][ T8376] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.013440][ T8365] syz.1.822: attempt to access beyond end of device [ 292.013440][ T8365] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.067767][ T8376] syz.1.822: attempt to access beyond end of device [ 292.067767][ T8376] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.090447][ T8365] syz.1.822: attempt to access beyond end of device [ 292.090447][ T8365] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.113445][ T8376] syz.1.822: attempt to access beyond end of device [ 292.113445][ T8376] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.208777][ T8365] syz.1.822: attempt to access beyond end of device [ 292.208777][ T8365] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.358396][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.462901][ T8409] loop2: detected capacity change from 0 to 1024 [ 292.492237][ T8409] EXT4-fs: Ignoring removed bh option [ 292.497772][ T8409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.546907][ T8409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.578983][ T29] audit: type=1400 audit(1751524789.532:1866): avc: denied { read } for pid=8408 comm="syz.2.824" path="/158/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 292.615787][ T29] audit: type=1400 audit(1751524789.572:1867): avc: denied { write } for pid=8408 comm="syz.2.824" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 292.645204][ T8409] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.824: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 293.147814][ T8424] syzkaller0: entered promiscuous mode [ 293.153392][ T8424] syzkaller0: entered allmulticast mode [ 293.250013][ T8409] ================================================================== [ 293.258170][ T8409] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 293.266155][ T8409] [ 293.268481][ T8409] write to 0xffff88811a42c6e4 of 4 bytes by task 8425 on cpu 0: [ 293.276112][ T8409] xas_set_mark+0x12b/0x140 [ 293.280637][ T8409] __folio_start_writeback+0x1dd/0x440 [ 293.286113][ T8409] ext4_bio_write_folio+0x5ad/0x9f0 [ 293.291316][ T8409] mpage_submit_folio+0xe4/0x170 [ 293.296269][ T8409] mpage_process_page_bufs+0x39b/0x4a0 [ 293.301767][ T8409] mpage_prepare_extent_to_map+0x741/0xaa0 [ 293.307608][ T8409] ext4_do_writepages+0xa1a/0x21c0 [ 293.312737][ T8409] ext4_writepages+0x176/0x300 [ 293.317526][ T8409] do_writepages+0x1c6/0x310 [ 293.322130][ T8409] file_write_and_wait_range+0x156/0x2c0 [ 293.327787][ T8409] generic_buffers_fsync_noflush+0x45/0x120 [ 293.333699][ T8409] ext4_sync_file+0x1ab/0x690 [ 293.338420][ T8409] vfs_fsync_range+0x10a/0x130 [ 293.343205][ T8409] ext4_buffered_write_iter+0x34f/0x3c0 [ 293.348770][ T8409] ext4_file_write_iter+0x383/0xf00 [ 293.353977][ T8409] iter_file_splice_write+0x5ef/0x970 [ 293.359370][ T8409] direct_splice_actor+0x153/0x2a0 [ 293.364506][ T8409] splice_direct_to_actor+0x30f/0x680 [ 293.369984][ T8409] do_splice_direct+0xda/0x150 [ 293.374763][ T8409] do_sendfile+0x380/0x650 [ 293.379220][ T8409] __x64_sys_sendfile64+0x105/0x150 [ 293.384430][ T8409] x64_sys_call+0xb39/0x2fb0 [ 293.389030][ T8409] do_syscall_64+0xd2/0x200 [ 293.393539][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.399454][ T8409] [ 293.401788][ T8409] read to 0xffff88811a42c6e4 of 4 bytes by task 8409 on cpu 1: [ 293.409380][ T8409] __writeback_single_inode+0x1f9/0x7c0 [ 293.414942][ T8409] writeback_single_inode+0x167/0x3e0 [ 293.420340][ T8409] sync_inode_metadata+0x5b/0x90 [ 293.425304][ T8409] generic_buffers_fsync_noflush+0xd9/0x120 [ 293.431227][ T8409] ext4_sync_file+0x1ab/0x690 [ 293.435959][ T8409] vfs_fsync_range+0x10a/0x130 [ 293.440759][ T8409] ext4_buffered_write_iter+0x34f/0x3c0 [ 293.446330][ T8409] ext4_file_write_iter+0x383/0xf00 [ 293.451543][ T8409] iter_file_splice_write+0x5ef/0x970 [ 293.456950][ T8409] direct_splice_actor+0x153/0x2a0 [ 293.462085][ T8409] splice_direct_to_actor+0x30f/0x680 [ 293.467484][ T8409] do_splice_direct+0xda/0x150 [ 293.472269][ T8409] do_sendfile+0x380/0x650 [ 293.476705][ T8409] __x64_sys_sendfile64+0x105/0x150 [ 293.481930][ T8409] x64_sys_call+0xb39/0x2fb0 [ 293.486535][ T8409] do_syscall_64+0xd2/0x200 [ 293.491049][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.496961][ T8409] [ 293.499287][ T8409] value changed: 0x0a000021 -> 0x04000021 [ 293.505004][ T8409] [ 293.507327][ T8409] Reported by Kernel Concurrency Sanitizer on: [ 293.513496][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.2.824 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 293.525831][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.535897][ T8409] ================================================================== [ 293.560013][ T8465] wg2: left promiscuous mode [ 293.566373][ T8465] wg2: left allmulticast mode [ 293.623397][ T8469] wg2: entered promiscuous mode [ 293.628337][ T8469] wg2: entered allmulticast mode [ 293.874596][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.