last executing test programs: 2m23.143366121s ago: executing program 0 (id=5141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10023, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x10d8c1, 0x170) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@updsa={0x110, 0x1a, 0x4, 0x70bd2c, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e22, 0xdc, 0x4e22, 0x4, 0x2, 0x0, 0x120, 0x3a}, {@in6=@empty, 0x4d5, 0x9e9930a6d12639c4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x7, 0x9, 0x41, 0x41d6, 0x0, 0x5, 0x6, 0x9}, {0x7fff, 0x3, 0x4, 0x4}, {0x4, 0x5, 0x61c}, 0x70bd2b, 0x3506, 0x2, 0x1, 0x2, 0x10}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd28, 0x70bd2d, 0x70bd2c, 0x70bd25, 0x5, [0x2]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x880}, 0x2000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 2m22.099017424s ago: executing program 0 (id=5153): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) 2m21.104486952s ago: executing program 0 (id=5164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 2m20.92114191s ago: executing program 0 (id=5165): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x40000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0xb424, @mcast2, 0xb}}, 0x24) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x41) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000100)=""/104) getdents(r1, 0x0, 0xbb) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) shutdown(r4, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000240)={0x2, 0x0, [{0xffffffff, 0x5, 0x70c2, [0x7ff, 0xfa07, 0x401, 0x6, 0x10000, 0xb, 0x1, 0xd]}, {0x3f4, 0x7b9, 0x2, [0x69b, 0x80000001, 0x9, 0xa300, 0x6, 0x4, 0x1, 0x9]}]}) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) 2m20.498594001s ago: executing program 0 (id=5169): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) 2m20.137299417s ago: executing program 0 (id=5172): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 2m20.113706269s ago: executing program 32 (id=5172): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 2.693675354s ago: executing program 1 (id=7034): socket(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120084, r5}) 2.535963s ago: executing program 1 (id=7038): unshare(0x8000000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) r0 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x80) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) 2.153990777s ago: executing program 3 (id=7042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x302) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.973193225s ago: executing program 4 (id=7044): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 1.955032737s ago: executing program 4 (id=7045): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003fd000/0x1000)=nil, &(0x7f0000348000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x23c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x14c) lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback, 0x85}, 0x1c, 0x0}}], 0x1, 0x20040000) 1.9180806s ago: executing program 4 (id=7046): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000120) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xfdef) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240408c1}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000540)={0x4, 0x3, 0x8200, 0x51e6, 0x3ff, 0x2c1a, 0x4, 0xff, r4}, &(0x7f0000000580)=0x20) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="00631dda01aef2b0bad477a11d13ec0c19456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d24c60c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e9000001001d0149e6d308cbe315789f4baffe39bbced9b1d4db174c6121d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac10222664bbc980b4e99027c53ae2c6cc05d3be246e5837cbf286225d43e8c1d2e3fda86b86906b79fdedae7f3bbe362e8ad7f2b370442013de1788be93a3d553c2e1f5b559393d964df51bf393f52ecbe6f832b222231fbb9fee9e0343c2d3d567f7cff6d0b25303bcbcc99c879d3bc"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) ftruncate(r6, 0x81ff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 1.910061331s ago: executing program 2 (id=7047): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000400)={@random="810456feed48", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x24, 0x64, 0x0, 0xff, 0x2, 0x0, @private=0xa010100, @loopback}, {0x22, 0x40, 0x0, @remote, "8cd62d35e77c4994"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x80, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x18803) r10 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r10, 0x0, 0x80000000, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000380)={'\x00', 0x2, 0x3, 0x7, 0x7ff, 0x1000, r10}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@private=0xa010101, 0x0, 0xfffe, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x1, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 1.696086273s ago: executing program 5 (id=7049): socket(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120084, r5}) 1.685153203s ago: executing program 2 (id=7050): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000120) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)={0xcc, 0x3ed, 0x100, 0x70bd2a, 0x25dfdbfe, "e36c916d499fd659f2f6313d5578ee3f107d9ff7d8229476ad0b46312e625b200475005e1c3363e0fbb561a4fcf1a734fd91b4b004b8d5227e3ab6cc9dc00c011eb5b3fa2654f533bd20f0ffc95b0695c9dfccf3a181adbf3c9dc88892a990fcc095ce5fe3f9302fd8d714a9e3d80e67d81aa5e24c90b74b0059bd218908638271c16ac6aa160ea024de41de46631336935c78ac13347d82f7671304276cf1c81c0a1e2fd779c4d987031f97682439a3346d0900c7ff8ba81fa4", ["", "", "", "", "", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x240408c1}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000540)={0x4, 0x3, 0x8200, 0x51e6, 0x3ff, 0x2c1a, 0x4, 0xff, r4}, &(0x7f0000000580)=0x20) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) ftruncate(r6, 0x81ff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 1.645648347s ago: executing program 1 (id=7051): rt_sigtimedwait(&(0x7f0000000100)={[0x1]}, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) r1 = epoll_create1(0x0) rt_sigaction(0x7, &(0x7f0000000380)={&(0x7f0000000300)="420f0fa10080000097c442f19e448f02660f71d2bbc4419d57e1436f362e660f6ee145235bff2e470f01d5c4a229470500000000c4e1717d06", 0x4, &(0x7f0000000340)="67460f5dd96a9ac4c1a710e20fa2f30f1039c4c3e95f320f0f8bfeefffff8fe82895c02ec4e1e9fd6f372666ee", {[0x9]}}, &(0x7f0000000440)={&(0x7f00000003c0)="c421fe2c5cc800c4a30d49fb97c461fdda5fae3e6567660f380ba003000000f30faede0ffe96de000000420f64404df6bbc62f0000c4a3d56dd0ec0ff9e7", 0x0, &(0x7f0000000400)="c4e1577dae89000000df3e470f38ca7e00c441a571d00146d954b00d8fc968015200c4c2e93bcec48189161026460fff123666f30f5da200000100"}, 0x8, &(0x7f00000004c0)) ppoll(&(0x7f0000000780)=[{r1, 0x8020}], 0x1, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0xc]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0x6800201a}) r2 = socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800010000000000000000000a00000008000000e00000020c00088008000c00bcef13b6bbb9555c02e13555e5b3b71993aba55d8d23e46eb78a8ff1c377d959f708ad5c02c084befe839573985662b183b1e2f4fdb9fa3650158113ffed1a5ebd4826fcaab9959bacf87e20952075bae8f36df693135f627b08c5040d4b3bd84647534a684ad9c88e5442c08477040691279947c1d65a2ccae6ac45dd5fb54e883e", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r3, &(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_open_dev$vcsa(&(0x7f0000000840), 0xfff, 0x400280) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r5, 0x100000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x21) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x21) r7 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x2801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='afs_notify_call\x00', r8, 0x0, 0xffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x9275}, {0x6, 0x0, 0x5, 0x5fff0000}, {0xaee, 0xe2, 0xfe, 0x6d08}, {0x9, 0x5, 0xcc, 0xe2}, {0xffff, 0x1, 0x3}, {0x8000, 0x5, 0xd1, 0x1}, {0xf0, 0x4, 0x7, 0x1}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0xab8e, 0x7, 0x2, 0x101}, {0x6, 0x1, 0x4, 0x29}, {0xfff, 0xe, 0x9, 0x2a}, {0x7ff, 0x9, 0x0, 0x80000000}, {0x88c1, 0x2, 0x5, 0x3}, {0x3cb, 0xcd, 0x7, 0x3}, {0x83d3, 0x2, 0xf9, 0x6}]}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) 1.481615373s ago: executing program 5 (id=7052): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000010", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f00000003c0)}, 0xfffffffffffffd73) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) bind$isdn(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4, 0x0, 0x2c}, 0x9}], 0x1, 0x40012021, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000326bd7000fcdbdf25010000000c00020004000000000000000c0003007f0000000000000008000100000000000c000200000400000000000008000100000000000c000300b5000000000000000c0004000800000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.199558801s ago: executing program 3 (id=7053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10023, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x10d8c1, 0x170) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@updsa={0x110, 0x1a, 0x4, 0x70bd2c, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e22, 0xdc, 0x4e22, 0x4, 0x2, 0x0, 0x120, 0x3a}, {@in6=@empty, 0x4d5, 0x9e9930a6d12639c4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x7, 0x9, 0x41, 0x41d6, 0x0, 0x5, 0x6, 0x9}, {0x7fff, 0x3, 0x4, 0x4}, {0x4, 0x5, 0x61c}, 0x70bd2b, 0x3506, 0x2, 0x1, 0x2, 0x10}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd28, 0x70bd2d, 0x70bd2c, 0x70bd25, 0x5, [0x2]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x880}, 0x2000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 1.021632739s ago: executing program 4 (id=7054): r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r0, 0x16) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r2, 0x15f1, 0x6184, 0x23, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r6, 0x0, 0x5}, 0x18) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x20040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 812.923849ms ago: executing program 2 (id=7055): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x2794, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xd4}, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) utimes(0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) 788.766672ms ago: executing program 1 (id=7056): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000007f8254a21c8bde28ffb703000008000000b704000000000100850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_io_uring_complete(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000f40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250a000000050005007f0000001c00018008000700", @ANYRES32=r6, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000801) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@usrquota}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xc) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r7, 0x807f, 0x1000000, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x8000002}, 0x18) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") 705.79802ms ago: executing program 4 (id=7057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000500)=0xffffffffffffffff, 0x4) unshare(0x22020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xe, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 606.40155ms ago: executing program 5 (id=7058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10000, &(0x7f00000005c0)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 581.861902ms ago: executing program 2 (id=7059): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003fd000/0x1000)=nil, &(0x7f0000348000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x14c) lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback, 0x85}, 0x1c, 0x0}}], 0x1, 0x20040000) 484.079532ms ago: executing program 2 (id=7060): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000400)={@random="810456feed48", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x24, 0x64, 0x0, 0xff, 0x2, 0x0, @private=0xa010100, @loopback}, {0x22, 0x40, 0x0, @remote, "8cd62d35e77c4994"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x80, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x18803) r10 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r10, 0x0, 0x80000000, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000380)={'\x00', 0x2, 0x3, 0x7, 0x7ff, 0x1000, r10}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@private=0xa010101, 0x0, 0xfffe, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x1, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 455.442375ms ago: executing program 5 (id=7061): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 283.289961ms ago: executing program 1 (id=7062): socket(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120084, r5}) 274.480703ms ago: executing program 3 (id=7063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x3}}, 0x20) 216.950348ms ago: executing program 3 (id=7064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='4rans=rdma,port=0x0000000000004e20,\x00']) 202.66024ms ago: executing program 4 (id=7065): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000070000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000005000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120084, r7}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x500, 0x6, 0x180107, r7}) 169.560253ms ago: executing program 2 (id=7066): rt_sigtimedwait(&(0x7f0000000100)={[0x1]}, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) r1 = epoll_create1(0x0) rt_sigaction(0x7, &(0x7f0000000380)={&(0x7f0000000300)="420f0fa10080000097c442f19e448f02660f71d2bbc4419d57e1436f362e660f6ee145235bff2e470f01d5c4a229470500000000c4e1717d06", 0x4, &(0x7f0000000340)="67460f5dd96a9ac4c1a710e20fa2f30f1039c4c3e95f320f0f8bfeefffff8fe82895c02ec4e1e9fd6f372666ee", {[0x9]}}, &(0x7f0000000440)={&(0x7f00000003c0)="c421fe2c5cc800c4a30d49fb97c461fdda5fae3e6567660f380ba003000000f30faede0ffe96de000000420f64404df6bbc62f0000c4a3d56dd0ec0ff9e7", 0x0, &(0x7f0000000400)="c4e1577dae89000000df3e470f38ca7e00c441a571d00146d954b00d8fc968015200c4c2e93bcec48189161026460fff123666f30f5da200000100"}, 0x8, &(0x7f00000004c0)) ppoll(&(0x7f0000000780)=[{r1, 0x8020}], 0x1, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0xc]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0x6800201a}) r2 = socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800010000000000000000000a00000008000000e00000020c00088008000c00bcef13b6bbb9555c02e13555e5b3b71993aba55d8d23e46eb78a8ff1c377d959f708ad5c02c084befe839573985662b183b1e2f4fdb9fa3650158113ffed1a5ebd4826fcaab9959bacf87e20952075bae8f36df693135f627b08c5040d4b3bd84647534a684ad9c88e5442c08477040691279947c1d65a2ccae6ac45dd5fb54e883e", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r3, &(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_open_dev$vcsa(&(0x7f0000000840), 0xfff, 0x400280) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r5, 0x100000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x21) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x21) r7 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x2801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='afs_notify_call\x00', r8, 0x0, 0xffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x9275}, {0x6, 0x0, 0x5, 0x5fff0000}, {0xaee, 0xe2, 0xfe, 0x6d08}, {0x9, 0x5, 0xcc, 0xe2}, {0xffff, 0x1, 0x3}, {0x8000, 0x5, 0xd1, 0x1}, {0xf0, 0x4, 0x7, 0x1}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0xab8e, 0x7, 0x2, 0x101}, {0x6, 0x1, 0x4, 0x29}, {0xfff, 0xe, 0x9, 0x2a}, {0x7ff, 0x9, 0x0, 0x80000000}, {0x88c1, 0x2, 0x5, 0x3}, {0x3cb, 0xcd, 0x7, 0x3}, {0x83d3, 0x2, 0xf9, 0x6}]}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) 151.010935ms ago: executing program 5 (id=7067): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) close(0x3) 134.881366ms ago: executing program 3 (id=7068): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1, r0}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x8, &(0x7f0000000640)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d00d2a9a9ca340000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x2004404d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) io_getevents(r1, 0x5543, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000520001fe00000000000000000a"], 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r11, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) syz_clone3(&(0x7f0000000440)={0x21000000, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000240)=0x0, {0xf}, &(0x7f0000000280)=""/255, 0xff, &(0x7f0000000380)=""/120, &(0x7f0000000400)=[0x0], 0x1, {r0}}, 0x58) ioprio_set$pid(0x3, r13, 0x4004) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x10) 72.198702ms ago: executing program 5 (id=7069): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000010", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f00000003c0)}, 0xfffffffffffffd73) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) bind$isdn(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4, 0x0, 0x2c}, 0x9}], 0x1, 0x40012021, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x6, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000326bd7000fcdbdf25010000000c00020004000000000000000c0003007f0000000000000008000100000000000c000200000400000000000008000100000000000c000300b5000000000000000c0004000800000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 22.311307ms ago: executing program 1 (id=7070): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 0s ago: executing program 3 (id=7071): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003fd000/0x1000)=nil, &(0x7f0000348000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x14c) lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback, 0x85}, 0x1c, 0x0}}], 0x1, 0x20040000) kernel console output (not intermixed with test programs): 4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.6608: corrupted inode contents [ 556.581384][T23274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 556.593073][T23269] EXT4-fs (loop3): Remounting filesystem read-only [ 556.605872][T23269] EXT4-fs (loop3): 1 truncate cleaned up [ 556.613204][ T9611] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 556.625089][ T9611] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 556.637337][ T9611] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 556.644546][T23274] EXT4-fs (loop1): 1 truncate cleaned up [ 556.697995][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6612'. [ 557.151560][T23296] loop2: detected capacity change from 0 to 512 [ 557.168293][T23296] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 557.228828][T23296] EXT4-fs (loop2): orphan cleanup on readonly fs [ 557.253112][T23304] __nla_validate_parse: 2 callbacks suppressed [ 557.253218][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 557.292125][T23296] __quota_error: 100 callbacks suppressed [ 557.292145][T23296] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 557.464115][T23296] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 557.640792][T23296] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 557.767474][T23296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6617: bg 0: block 40: padding at end of block bitmap is not set [ 557.800866][T23313] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6621'. [ 557.833675][T23296] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 557.880304][T23296] EXT4-fs (loop2): 1 truncate cleaned up [ 557.921599][T23296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6617'. [ 557.931496][T23313] batadv1: entered promiscuous mode [ 557.936844][T23313] batadv1: entered allmulticast mode [ 558.067841][T23316] loop4: detected capacity change from 0 to 512 [ 558.099362][T23316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 558.152569][T23321] loop2: detected capacity change from 0 to 512 [ 558.184367][T23316] EXT4-fs (loop4): 1 truncate cleaned up [ 558.197509][T23321] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 558.226233][ T29] audit: type=1326 audit(1760900063.710:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.1.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 558.264406][ T29] audit: type=1326 audit(1760900063.740:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.1.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 558.288121][ T29] audit: type=1326 audit(1760900063.750:20862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.1.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 558.311913][ T29] audit: type=1326 audit(1760900063.750:20863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.1.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 558.340047][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 558.350898][T23321] EXT4-fs (loop2): orphan cleanup on readonly fs [ 558.370204][T23321] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6624: corrupted inode contents [ 558.399533][T23321] EXT4-fs (loop2): Remounting filesystem read-only [ 558.407772][T23321] EXT4-fs (loop2): 1 truncate cleaned up [ 558.436803][ T29] audit: type=1326 audit(1760900063.910:20864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.1.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 558.460632][ T29] audit: type=1326 audit(1760900063.910:20865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.1.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 558.540510][T23334] loop3: detected capacity change from 0 to 128 [ 558.557350][ T9625] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 558.567997][ T9625] Quota error (device loop2): write_blk: dquota write failed [ 558.575477][ T9625] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 558.585566][ T9625] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 558.596156][ T9625] Quota error (device loop2): write_blk: dquota write failed [ 558.601432][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6626'. [ 558.636679][ T9625] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 558.672415][T23340] loop1: detected capacity change from 0 to 1024 [ 558.679377][T23340] EXT4-fs: Ignoring removed bh option [ 558.685196][T23340] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 558.798920][T23354] loop4: detected capacity change from 0 to 512 [ 558.807483][T23354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 558.830461][T23357] loop5: detected capacity change from 0 to 1024 [ 558.838849][T23357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 558.848366][T23354] EXT4-fs (loop4): 1 truncate cleaned up [ 558.977473][T23362] loop4: detected capacity change from 0 to 512 [ 559.008623][T23365] loop1: detected capacity change from 0 to 512 [ 559.047801][T23362] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 559.085372][T23362] EXT4-fs (loop4): orphan cleanup on readonly fs [ 559.113139][T23365] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 559.121453][T23365] EXT4-fs (loop1): orphan cleanup on readonly fs [ 559.141772][T23362] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6637: corrupted inode contents [ 559.163784][T23365] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6638: corrupted inode contents [ 559.176175][T23362] EXT4-fs (loop4): Remounting filesystem read-only [ 559.186563][T23365] EXT4-fs (loop1): Remounting filesystem read-only [ 559.193358][T23362] EXT4-fs (loop4): 1 truncate cleaned up [ 559.199955][T23365] EXT4-fs (loop1): 1 truncate cleaned up [ 559.323918][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6639'. [ 559.860936][ T9625] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 559.871592][ T9625] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 559.885995][ T9625] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 559.896554][ T9625] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 559.907212][ T9625] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 559.918255][ T9625] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 559.949589][T23365] EXT4-fs mount: 171 callbacks suppressed [ 559.949666][T23365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 559.968521][T23362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 559.989896][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.999499][T23362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.078830][T23376] 9pnet_virtio: no channels available for device 127.0.0.1 [ 560.093122][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.190951][T23381] netlink: 'syz.1.6642': attribute type 4 has an invalid length. [ 560.198808][T23381] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6642'. [ 560.243844][T23383] loop5: detected capacity change from 0 to 1024 [ 560.266242][T23386] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6642'. [ 560.286031][T23383] EXT4-fs: Ignoring removed bh option [ 560.304689][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6645'. [ 560.344292][T23383] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 560.388675][T23383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.500727][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.529867][T23395] loop1: detected capacity change from 0 to 512 [ 560.666621][T23395] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 560.686629][T23407] loop5: detected capacity change from 0 to 512 [ 560.697244][T23395] EXT4-fs (loop1): orphan cleanup on readonly fs [ 560.709690][T23402] loop3: detected capacity change from 0 to 1024 [ 560.716552][T23402] EXT4-fs: Ignoring removed bh option [ 560.722653][T23402] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 560.741250][T23402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.769709][T23414] loop2: detected capacity change from 0 to 512 [ 560.785009][T23395] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6649: corrupted inode contents [ 560.804441][T23395] EXT4-fs (loop1): Remounting filesystem read-only [ 560.811922][T23412] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6653'. [ 560.820930][T23407] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 560.821526][T23395] EXT4-fs (loop1): 1 truncate cleaned up [ 560.839702][T15067] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 560.842776][T23412] batadv1: entered promiscuous mode [ 560.850309][T15067] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 560.855493][T23412] batadv1: entered allmulticast mode [ 560.872886][T23407] EXT4-fs (loop5): 1 truncate cleaned up [ 560.879135][T15067] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 560.890558][T23414] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 560.902617][T23414] EXT4-fs (loop2): orphan cleanup on readonly fs [ 560.903103][T23407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.924905][T23414] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6654: corrupted inode contents [ 560.937501][T23395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 560.950606][T23414] EXT4-fs (loop2): Remounting filesystem read-only [ 560.973829][T23414] EXT4-fs (loop2): 1 truncate cleaned up [ 560.979656][T15067] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 560.990383][T15067] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 561.013654][T23420] loop4: detected capacity change from 0 to 512 [ 561.019367][T15067] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 561.021346][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.031206][T23414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.053376][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.080420][T23420] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 561.095570][T23420] EXT4-fs (loop4): orphan cleanup on readonly fs [ 561.104042][T23420] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 561.121619][T23420] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 561.121967][T23426] loop5: detected capacity change from 0 to 512 [ 561.135492][T23420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6655: bg 0: block 40: padding at end of block bitmap is not set [ 561.151939][T23426] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 561.162966][T23420] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 561.166448][T21417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.183884][T23426] EXT4-fs (loop5): 1 truncate cleaned up [ 561.190161][T23426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.231490][T23420] EXT4-fs (loop4): 1 truncate cleaned up [ 561.268011][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.279511][T23420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.311452][T23431] loop2: detected capacity change from 0 to 512 [ 561.384457][T21199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.407302][T23431] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 561.425673][T23431] EXT4-fs (loop2): orphan cleanup on readonly fs [ 561.438396][T23431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6660: corrupted inode contents [ 561.477902][T23431] EXT4-fs (loop2): Remounting filesystem read-only [ 561.489753][T23431] EXT4-fs (loop2): 1 truncate cleaned up [ 561.502540][T11547] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 561.513420][T11547] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 561.528520][T11547] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 561.571092][T23431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.601151][T21417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.611764][T23420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.622813][T23450] siw: device registration error -23 [ 561.690515][T23452] loop4: detected capacity change from 0 to 512 [ 561.691107][T23458] loop5: detected capacity change from 0 to 1024 [ 561.709371][T23452] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 561.710229][T23458] EXT4-fs: Ignoring removed bh option [ 561.737226][T23452] EXT4-fs (loop4): orphan cleanup on readonly fs [ 561.744652][T23458] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 561.744801][T23452] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 561.780819][T23461] batadv1: entered promiscuous mode [ 561.783333][T23452] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 561.786602][T23461] batadv1: entered allmulticast mode [ 561.837098][T23458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.868503][T23452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6667: bg 0: block 40: padding at end of block bitmap is not set [ 561.899007][T23452] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 561.911047][T23452] EXT4-fs (loop4): 1 truncate cleaned up [ 561.917698][T23452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.931014][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.003057][T23452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.122853][T23483] loop5: detected capacity change from 0 to 128 [ 562.173075][T23488] loop1: detected capacity change from 0 to 512 [ 562.207049][T23488] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 562.221555][T23469] loop2: detected capacity change from 0 to 2048 [ 562.229847][T23488] EXT4-fs (loop1): orphan cleanup on readonly fs [ 562.241942][T23488] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6678: corrupted inode contents [ 562.255272][T23488] EXT4-fs (loop1): Remounting filesystem read-only [ 562.266249][T23488] EXT4-fs (loop1): 1 truncate cleaned up [ 562.273287][T11547] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 562.283881][T11547] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 562.295703][T11547] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 562.305887][T11547] __quota_error: 94 callbacks suppressed [ 562.305900][T11547] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 562.306847][T23498] siw: device registration error -23 [ 562.313407][T11547] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 562.321533][T23469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.326386][T23488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 562.360813][T23488] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.370876][T23469] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.433570][T23501] loop3: detected capacity change from 0 to 512 [ 562.467692][T23501] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 562.499002][T23505] loop4: detected capacity change from 0 to 1024 [ 562.499203][T23501] EXT4-fs (loop3): orphan cleanup on readonly fs [ 562.518897][T23505] EXT4-fs: Ignoring removed bh option [ 562.531955][T23501] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 562.537289][T23505] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 562.554811][T23487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6671: bg 0: block 345: padding at end of block bitmap is not set [ 562.556552][T23501] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 562.575776][T23487] EXT4-fs (loop2): Remounting filesystem read-only [ 562.584637][T23501] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 562.600651][T23505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.606910][T23501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6680: bg 0: block 40: padding at end of block bitmap is not set [ 562.627380][T23501] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 562.645112][T23501] EXT4-fs (loop3): 1 truncate cleaned up [ 562.656652][T23501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 562.677014][T21730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.693229][T23513] __nla_validate_parse: 5 callbacks suppressed [ 562.693249][T23513] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6682'. [ 562.709999][T23501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6680'. [ 562.737273][T23501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.790386][T23519] 9pnet_virtio: no channels available for device 127.0.0.1 [ 562.794774][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6685'. [ 562.808408][T23513] batadv1: entered promiscuous mode [ 562.813725][T23513] batadv1: entered allmulticast mode [ 562.883292][T23522] loop3: detected capacity change from 0 to 512 [ 562.911236][T21417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.921204][T23522] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 562.991918][T23522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 562.999603][ T29] audit: type=1326 audit(1760900068.490:20921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 563.033130][ T29] audit: type=1326 audit(1760900068.510:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 563.035922][T23522] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 563.056825][ T29] audit: type=1326 audit(1760900068.510:20923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 563.098108][ T29] audit: type=1326 audit(1760900068.520:20924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 563.121825][ T29] audit: type=1326 audit(1760900068.520:20925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 563.145494][ T29] audit: type=1326 audit(1760900068.560:20926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23518 comm="syz.4.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 563.153773][T23522] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 563.192420][T23522] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 563.199728][T23522] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6686: bg 0: block 40: padding at end of block bitmap is not set [ 563.205498][T23540] loop2: detected capacity change from 0 to 512 [ 563.216992][T23522] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 563.229247][T23541] loop1: detected capacity change from 0 to 1024 [ 563.229631][T23522] EXT4-fs (loop3): 1 truncate cleaned up [ 563.241714][T23541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 563.245351][T23522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.253021][T23542] siw: device registration error -23 [ 563.276542][T23541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.296968][T23540] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 563.306513][T23540] EXT4-fs (loop2): orphan cleanup on readonly fs [ 563.322400][T23540] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6687: corrupted inode contents [ 563.347284][T23540] EXT4-fs (loop2): Remounting filesystem read-only [ 563.363552][T23540] EXT4-fs (loop2): 1 truncate cleaned up [ 563.369592][ T9611] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 563.380252][ T9611] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 563.398451][ T9611] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 563.409282][T23522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.409632][T23540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.453764][T21417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.469403][T23551] loop4: detected capacity change from 0 to 1024 [ 563.476467][T23551] EXT4-fs: Ignoring removed bh option [ 563.494168][T23551] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 563.509904][T23551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.563059][T23558] loop2: detected capacity change from 0 to 512 [ 563.592554][T21730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.602035][T23563] loop3: detected capacity change from 0 to 1024 [ 563.628741][T23558] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 563.629131][T23563] EXT4-fs: Ignoring removed nobh option [ 563.642451][T23563] EXT4-fs: Ignoring removed bh option [ 563.664527][T23558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 563.673312][T23558] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 563.688320][T23558] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 563.696156][T23558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6695: bg 0: block 40: padding at end of block bitmap is not set [ 563.700408][T23563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.723191][T23558] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 563.737088][T23558] EXT4-fs (loop2): 1 truncate cleaned up [ 563.743371][T23558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.759164][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6695'. [ 563.778928][T23558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.813724][T23575] loop2: detected capacity change from 0 to 512 [ 563.833042][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.854641][T23575] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 563.862916][T23575] EXT4-fs (loop2): orphan cleanup on readonly fs [ 563.871229][T23575] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6700: corrupted inode contents [ 563.888761][T23575] EXT4-fs (loop2): Remounting filesystem read-only [ 563.895564][T23575] EXT4-fs (loop2): 1 truncate cleaned up [ 563.901451][T11547] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 563.912182][T11547] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 563.930018][T11547] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 563.934449][T23577] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6701'. [ 563.940973][T23575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.972096][T23584] loop1: detected capacity change from 0 to 512 [ 563.980860][T21417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.981488][T23577] batadv1: entered promiscuous mode [ 563.995117][T23577] batadv1: entered allmulticast mode [ 564.000865][T23584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 564.022319][T23584] EXT4-fs (loop1): 1 truncate cleaned up [ 564.036122][T23584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.063403][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.089659][T23590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6705'. [ 564.108373][T23591] siw: device registration error -23 [ 564.189674][T23595] loop5: detected capacity change from 0 to 512 [ 564.199803][T23595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 564.249895][T23595] EXT4-fs (loop5): 1 truncate cleaned up [ 564.284632][T23595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.315380][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.375505][T23606] loop5: detected capacity change from 0 to 512 [ 564.400133][T23606] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 564.408442][T23606] EXT4-fs (loop5): orphan cleanup on readonly fs [ 564.416003][T23606] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 564.433180][T23613] loop1: detected capacity change from 0 to 512 [ 564.433463][T23606] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 564.442000][T21199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.447842][T23606] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6711: bg 0: block 40: padding at end of block bitmap is not set [ 564.475377][T23606] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 564.492206][T23606] EXT4-fs (loop5): 1 truncate cleaned up [ 564.499521][T23606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.531449][T23613] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 564.544090][T23613] EXT4-fs (loop1): orphan cleanup on readonly fs [ 564.551273][T23619] loop4: detected capacity change from 0 to 512 [ 564.559407][T23613] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6712: corrupted inode contents [ 564.578379][T23619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 564.594288][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6711'. [ 564.604295][T23619] EXT4-fs (loop4): 1 truncate cleaned up [ 564.611167][T23613] EXT4-fs (loop1): Remounting filesystem read-only [ 564.621097][T23619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.648063][T23613] EXT4-fs (loop1): 1 truncate cleaned up [ 564.672878][T11547] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 564.683937][T11547] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 564.684412][T23606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.715071][T11547] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 564.726162][T23613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.739576][T21730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.763001][T23625] loop2: detected capacity change from 0 to 512 [ 564.776937][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.830194][T23625] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 564.846941][T23625] EXT4-fs (loop2): orphan cleanup on readonly fs [ 564.865385][T23625] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 564.915612][T23625] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 564.935408][T23632] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6717'. [ 564.948087][T23632] batadv1: entered promiscuous mode [ 564.953368][T23632] batadv1: entered allmulticast mode [ 564.964265][T23625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6715: bg 0: block 40: padding at end of block bitmap is not set [ 564.979011][T23625] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 564.988516][T23625] EXT4-fs (loop2): 1 truncate cleaned up [ 564.995060][T23625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.025235][T23644] loop5: detected capacity change from 0 to 512 [ 565.035387][T23644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 565.054365][T23636] loop1: detected capacity change from 0 to 2048 [ 565.062770][T23644] EXT4-fs (loop5): 1 truncate cleaned up [ 565.069693][T23625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.079714][T23644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.149834][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.160550][T23636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.176685][T23636] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.210948][T23650] loop4: detected capacity change from 0 to 512 [ 565.220603][T23653] loop2: detected capacity change from 0 to 512 [ 565.243980][T23653] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 565.255270][T23650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 565.269568][T23653] EXT4-fs (loop2): orphan cleanup on readonly fs [ 565.282524][T23650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 565.295715][T23653] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 565.312622][T23650] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6723: corrupted inode contents [ 565.315888][T23642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6716: bg 0: block 345: padding at end of block bitmap is not set [ 565.324972][T23650] EXT4-fs (loop4): Remounting filesystem read-only [ 565.339848][T23653] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 565.346674][T23642] EXT4-fs (loop1): Remounting filesystem read-only [ 565.352883][T23650] EXT4-fs (loop4): 1 truncate cleaned up [ 565.364224][T23653] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6725: bg 0: block 40: padding at end of block bitmap is not set [ 565.378907][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 565.389473][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 565.400750][T23653] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 565.431265][T11547] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 565.442012][T23653] EXT4-fs (loop2): 1 truncate cleaned up [ 565.449173][T23653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.462355][T23650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.554679][T23672] loop4: detected capacity change from 0 to 512 [ 565.565656][T23672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 565.605583][T23672] EXT4-fs (loop4): 1 truncate cleaned up [ 565.721854][T23679] loop4: detected capacity change from 0 to 512 [ 565.731800][T23682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6731'. [ 565.749611][T23679] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 565.757910][T23679] EXT4-fs (loop4): orphan cleanup on readonly fs [ 565.765767][T23679] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6730: corrupted inode contents [ 565.778500][T23679] EXT4-fs (loop4): Remounting filesystem read-only [ 565.785203][T23679] EXT4-fs (loop4): 1 truncate cleaned up [ 565.791168][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 565.801878][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 565.812497][T11547] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 565.944538][T23688] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6733'. [ 565.956879][T23688] batadv1: entered promiscuous mode [ 565.962178][T23688] batadv1: entered allmulticast mode [ 566.094092][T23696] loop4: detected capacity change from 0 to 512 [ 566.111594][T23696] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 566.120483][T23696] EXT4-fs (loop4): orphan cleanup on readonly fs [ 566.128707][T23696] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6736: corrupted inode contents [ 566.141938][T23696] EXT4-fs (loop4): Remounting filesystem read-only [ 566.148837][T23696] EXT4-fs (loop4): 1 truncate cleaned up [ 566.154677][ T9605] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 566.165314][ T9605] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 566.175932][ T9605] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 566.214913][T23700] loop1: detected capacity change from 0 to 1024 [ 566.221494][T23702] loop4: detected capacity change from 0 to 512 [ 566.226235][T23700] EXT4-fs: Ignoring removed bh option [ 566.234061][T23700] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 566.257434][T23702] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 566.265721][T23702] EXT4-fs (loop4): orphan cleanup on readonly fs [ 566.274293][T23702] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6738: corrupted inode contents [ 566.287556][T23702] EXT4-fs (loop4): Remounting filesystem read-only [ 566.294361][T23702] EXT4-fs (loop4): 1 truncate cleaned up [ 566.300898][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 566.311489][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 566.322307][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 566.364229][T23710] 9pnet_virtio: no channels available for device 127.0.0.1 [ 566.395124][T23712] loop4: detected capacity change from 0 to 512 [ 566.403122][T23712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 566.416164][T23712] EXT4-fs (loop4): 1 truncate cleaned up [ 566.649186][T23718] loop2: detected capacity change from 0 to 2048 [ 566.709877][T23718] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.730254][T23735] loop3: detected capacity change from 0 to 512 [ 566.738540][T23735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 566.793159][T23735] EXT4-fs (loop3): 1 truncate cleaned up [ 566.814629][T23736] batadv1: entered promiscuous mode [ 566.819961][T23736] batadv1: entered allmulticast mode [ 566.839556][T23724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6742: bg 0: block 345: padding at end of block bitmap is not set [ 566.854289][T23724] EXT4-fs (loop2): Remounting filesystem read-only [ 566.971397][T23743] loop1: detected capacity change from 0 to 512 [ 567.008020][T23743] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 567.016200][T23743] EXT4-fs (loop1): orphan cleanup on readonly fs [ 567.030824][T23745] loop2: detected capacity change from 0 to 512 [ 567.050173][T23743] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6750: corrupted inode contents [ 567.063375][T23743] EXT4-fs (loop1): Remounting filesystem read-only [ 567.070559][T23751] loop4: detected capacity change from 0 to 1024 [ 567.076370][T23745] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 567.077628][T23751] EXT4-fs: Ignoring removed bh option [ 567.085092][T23745] EXT4-fs (loop2): orphan cleanup on readonly fs [ 567.110750][T23751] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 567.117063][T23743] EXT4-fs (loop1): 1 truncate cleaned up [ 567.124058][T23745] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6751: corrupted inode contents [ 567.126285][T10142] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 567.148541][T10142] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 567.159644][T10142] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 567.164762][T23745] EXT4-fs (loop2): Remounting filesystem read-only [ 567.178412][T23745] EXT4-fs (loop2): 1 truncate cleaned up [ 567.186717][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 567.197313][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 567.221441][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 567.322873][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 567.322891][ T29] audit: type=1400 audit(1760900072.810:21028): avc: denied { read } for pid=23764 comm="syz.2.6758" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 567.350518][ T29] audit: type=1400 audit(1760900072.810:21029): avc: denied { open } for pid=23764 comm="syz.2.6758" path="net:[4026532385]" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 567.375363][ T29] audit: type=1400 audit(1760900072.820:21030): avc: denied { ioctl } for pid=23764 comm="syz.2.6758" path="socket:[81047]" dev="sockfs" ino=81047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 567.401432][ T29] audit: type=1400 audit(1760900072.820:21031): avc: denied { module_request } for pid=23764 comm="syz.2.6758" kmod="net-pf-16-proto-16-family-nbd" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 567.428370][ T29] audit: type=1326 audit(1760900072.920:21032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23767 comm="syz.3.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 567.452211][ T29] audit: type=1326 audit(1760900072.920:21033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23767 comm="syz.3.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 567.475877][ T29] audit: type=1326 audit(1760900072.920:21034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23767 comm="syz.3.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 567.499675][ T29] audit: type=1326 audit(1760900072.920:21035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23767 comm="syz.3.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 567.568701][ T29] audit: type=1400 audit(1760900073.030:21036): avc: denied { execmem } for pid=23773 comm="syz.4.6760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 567.616363][ T29] audit: type=1326 audit(1760900073.100:21037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23775 comm="syz.2.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f620efc9 code=0x7ffc0000 [ 567.809049][T23781] loop3: detected capacity change from 0 to 512 [ 567.858704][T23781] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 567.891903][T23781] EXT4-fs (loop3): orphan cleanup on readonly fs [ 567.920414][T23781] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 568.089753][T23781] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 568.160826][T23781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6763: bg 0: block 40: padding at end of block bitmap is not set [ 568.309962][T23781] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 568.433487][T23781] EXT4-fs (loop3): 1 truncate cleaned up [ 568.487728][T23781] __nla_validate_parse: 4 callbacks suppressed [ 568.487749][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6763'. [ 568.505532][T23800] loop5: detected capacity change from 0 to 1024 [ 568.522638][T23796] siw: device registration error -23 [ 568.528750][T23800] EXT4-fs: Ignoring removed bh option [ 568.543843][T23802] loop2: detected capacity change from 0 to 1024 [ 568.565434][T23800] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 568.576176][T23802] EXT4-fs: Ignoring removed nobh option [ 568.581939][T23802] EXT4-fs: Ignoring removed bh option [ 568.758921][T23811] loop1: detected capacity change from 0 to 512 [ 568.788317][T23811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 568.840928][T23811] EXT4-fs (loop1): 1 truncate cleaned up [ 568.955207][T23817] loop1: detected capacity change from 0 to 512 [ 568.979478][T23817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 569.040720][T23817] EXT4-fs (loop1): 1 truncate cleaned up [ 569.200093][T23827] 9pnet_virtio: no channels available for device 127.0.0.1 [ 569.237988][T23825] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6774'. [ 569.250272][T23825] batadv1: entered promiscuous mode [ 569.255619][T23825] batadv1: entered allmulticast mode [ 569.357942][T23834] loop4: detected capacity change from 0 to 512 [ 569.362360][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6777'. [ 569.376643][T23834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 569.397094][T23834] EXT4-fs (loop4): 1 truncate cleaned up [ 569.462211][T23842] loop2: detected capacity change from 0 to 512 [ 569.483649][T23843] loop4: detected capacity change from 0 to 1024 [ 569.491343][T23843] EXT4-fs: Ignoring removed bh option [ 569.498347][T23843] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 569.508812][T23842] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 569.516990][T23842] EXT4-fs (loop2): orphan cleanup on readonly fs [ 569.524919][T23842] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6780: corrupted inode contents [ 569.538173][T23842] EXT4-fs (loop2): Remounting filesystem read-only [ 569.544840][T23842] EXT4-fs (loop2): 1 truncate cleaned up [ 569.550788][ T9611] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 569.561448][ T9611] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 569.621757][ T9611] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 569.648119][T23855] loop5: detected capacity change from 0 to 512 [ 569.702813][T23855] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 569.745167][T23855] EXT4-fs (loop5): orphan cleanup on readonly fs [ 569.752369][T23855] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 569.763177][T23869] 9pnet_virtio: no channels available for device 127.0.0.1 [ 569.793657][T23855] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 569.801302][T23872] siw: device registration error -23 [ 569.817800][T23855] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6785: bg 0: block 40: padding at end of block bitmap is not set [ 569.838850][T23855] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 569.848377][T23855] EXT4-fs (loop5): 1 truncate cleaned up [ 569.857589][T23855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6785'. [ 569.976810][T23878] loop5: detected capacity change from 0 to 1024 [ 570.004375][T23878] EXT4-fs: Ignoring removed nobh option [ 570.010077][T23878] EXT4-fs: Ignoring removed bh option [ 572.185970][T23893] loop1: detected capacity change from 0 to 1024 [ 572.199681][T23895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6795'. [ 572.236786][T23893] EXT4-fs: Ignoring removed bh option [ 572.285013][T23893] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 572.347256][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 572.347277][ T29] audit: type=1326 audit(1760900077.820:21086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23896 comm="syz.3.6796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 572.377144][ T29] audit: type=1326 audit(1760900077.820:21087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23896 comm="syz.3.6796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 572.401053][ T29] audit: type=1326 audit(1760900077.820:21088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23896 comm="syz.3.6796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 572.424684][ T29] audit: type=1326 audit(1760900077.830:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23896 comm="syz.3.6796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 572.602630][T23910] 9pnet_virtio: no channels available for device 127.0.0.1 [ 572.661429][ T29] audit: type=1326 audit(1760900078.040:21090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.5.6795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 572.685312][ T29] audit: type=1326 audit(1760900078.040:21091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.5.6795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 572.798134][T23919] loop3: detected capacity change from 0 to 512 [ 572.839250][T23920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6803'. [ 572.868034][T23919] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 572.886578][T23919] EXT4-fs (loop3): orphan cleanup on readonly fs [ 572.908059][T23919] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 572.929838][ T29] audit: type=1400 audit(1760900078.380:21092): avc: denied { open } for pid=23913 comm="syz.5.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 572.949390][ T29] audit: type=1400 audit(1760900078.380:21093): avc: denied { kernel } for pid=23913 comm="syz.5.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 572.982197][T23919] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 573.055113][T23919] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 573.069848][T23919] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6801: bg 0: block 40: padding at end of block bitmap is not set [ 573.096903][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6805'. [ 573.102276][T23919] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 573.135729][T23934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6806'. [ 573.145039][T23919] EXT4-fs (loop3): 1 truncate cleaned up [ 573.163628][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6801'. [ 573.166876][T23930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6804'. [ 573.264484][T23930] batadv1: entered promiscuous mode [ 573.269857][T23930] batadv1: entered allmulticast mode [ 573.282357][ T29] audit: type=1326 audit(1760900078.770:21094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23931 comm="syz.1.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 573.446741][T23947] loop4: detected capacity change from 0 to 512 [ 573.467124][T23947] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 573.475381][T23947] EXT4-fs (loop4): orphan cleanup on readonly fs [ 573.482076][T23947] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 573.503555][T23947] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 573.504679][T23953] loop2: detected capacity change from 0 to 512 [ 573.510937][T23947] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6810: bg 0: block 40: padding at end of block bitmap is not set [ 573.537243][T23953] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 573.539181][T23947] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 573.545789][T23953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 573.561709][T23954] loop3: detected capacity change from 0 to 1024 [ 573.568991][T23954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 573.579306][T23953] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6811: corrupted inode contents [ 573.593221][T23947] EXT4-fs (loop4): 1 truncate cleaned up [ 573.606266][T23953] EXT4-fs (loop2): Remounting filesystem read-only [ 573.631542][T23953] EXT4-fs (loop2): 1 truncate cleaned up [ 573.637959][T11547] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.649026][T11547] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.669028][T11547] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 573.698108][T23960] loop5: detected capacity change from 0 to 512 [ 573.711953][T23962] loop4: detected capacity change from 0 to 512 [ 573.729061][T23960] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 573.749331][T23962] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 573.767760][T23960] EXT4-fs (loop5): orphan cleanup on readonly fs [ 573.774630][T23962] EXT4-fs (loop4): orphan cleanup on readonly fs [ 573.794178][T23960] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.6812: corrupted inode contents [ 573.809276][T23962] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6813: corrupted inode contents [ 573.822139][T23960] EXT4-fs (loop5): Remounting filesystem read-only [ 573.828968][T23962] EXT4-fs (loop4): Remounting filesystem read-only [ 573.835769][T23960] EXT4-fs (loop5): 1 truncate cleaned up [ 573.836735][T23962] EXT4-fs (loop4): 1 truncate cleaned up [ 573.845778][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.857649][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.868318][T11547] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 573.878572][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.889245][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.901258][T11547] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 573.921228][T23974] loop2: detected capacity change from 0 to 512 [ 573.927812][T23972] loop1: detected capacity change from 0 to 128 [ 573.941415][T23974] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 573.955983][T23974] EXT4-fs (loop2): 1 truncate cleaned up [ 573.978027][T23977] loop4: detected capacity change from 0 to 1024 [ 573.988200][T23977] EXT4-fs: Ignoring removed bh option [ 574.031111][T23977] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 574.051454][T23982] loop5: detected capacity change from 0 to 512 [ 574.081857][T23982] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 574.100227][T23982] EXT4-fs (loop5): orphan cleanup on readonly fs [ 574.108615][T23982] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 574.144184][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'. [ 574.176147][T23982] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 574.188780][T23982] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6818: bg 0: block 40: padding at end of block bitmap is not set [ 574.202880][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6822'. [ 574.222734][T23982] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 574.239345][T23982] EXT4-fs (loop5): 1 truncate cleaned up [ 574.267245][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6823'. [ 574.276188][T23990] loop4: detected capacity change from 0 to 2048 [ 574.284708][T23979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6818'. [ 574.347104][T23990] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.379398][T24003] loop5: detected capacity change from 0 to 512 [ 574.409050][T24003] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 574.424322][T24003] EXT4-fs (loop5): orphan cleanup on readonly fs [ 574.454472][T24003] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 574.485874][T23995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6820: bg 0: block 345: padding at end of block bitmap is not set [ 574.500426][T24003] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 574.512095][T23995] EXT4-fs (loop4): Remounting filesystem read-only [ 574.519265][T24003] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6824: bg 0: block 40: padding at end of block bitmap is not set [ 574.543470][T24003] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 574.575628][T24003] EXT4-fs (loop5): 1 truncate cleaned up [ 574.686351][T24011] loop5: detected capacity change from 0 to 512 [ 574.702478][T24017] loop3: detected capacity change from 0 to 512 [ 574.708761][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6827'. [ 574.751387][T24011] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 574.759966][T24011] EXT4-fs (loop5): orphan cleanup on readonly fs [ 574.779266][T24017] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 574.789692][T24017] EXT4-fs (loop3): orphan cleanup on readonly fs [ 574.798357][T24011] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.6825: corrupted inode contents [ 574.820094][T24017] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.6828: corrupted inode contents [ 574.832426][T24025] loop2: detected capacity change from 0 to 512 [ 574.844538][T24011] EXT4-fs (loop5): Remounting filesystem read-only [ 574.851379][T24017] EXT4-fs (loop3): Remounting filesystem read-only [ 574.865064][T24025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 574.882794][T24011] EXT4-fs (loop5): 1 truncate cleaned up [ 574.888607][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 574.899283][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 574.910904][T24017] EXT4-fs (loop3): 1 truncate cleaned up [ 574.923461][T11547] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 574.943177][T11547] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 574.944055][T24025] EXT4-fs (loop2): 1 truncate cleaned up [ 574.953799][T11547] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 574.970366][T11547] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 575.009605][T24030] loop4: detected capacity change from 0 to 128 [ 575.112250][T24038] loop3: detected capacity change from 0 to 1024 [ 575.134746][T24038] EXT4-fs: Ignoring removed nobh option [ 575.140453][T24038] EXT4-fs: Ignoring removed bh option [ 575.164848][T24045] loop2: detected capacity change from 0 to 512 [ 575.175407][T24042] loop1: detected capacity change from 0 to 512 [ 575.197893][T24045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 575.198519][T24042] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 575.206134][T24045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 575.220989][T24045] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 575.226051][T24053] loop5: detected capacity change from 0 to 1024 [ 575.242215][T24045] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 575.244525][T24042] EXT4-fs (loop1): orphan cleanup on readonly fs [ 575.251563][T24045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6836: bg 0: block 40: padding at end of block bitmap is not set [ 575.270060][T24053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 575.279092][T24045] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 575.282446][T24042] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 575.290532][T24045] EXT4-fs (loop2): 1 truncate cleaned up [ 575.305610][T24042] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 575.315429][T24042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6835: bg 0: block 40: padding at end of block bitmap is not set [ 575.330053][T24042] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 575.339490][T24042] EXT4-fs (loop1): 1 truncate cleaned up [ 575.350746][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6835'. [ 575.445581][T24057] loop2: detected capacity change from 0 to 2048 [ 575.473858][T24057] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.514584][T24063] loop1: detected capacity change from 0 to 128 [ 575.548088][T24064] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6837: bg 0: block 345: padding at end of block bitmap is not set [ 575.562830][T24064] EXT4-fs (loop2): Remounting filesystem read-only [ 575.663828][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6840'. [ 575.972512][T24076] loop2: detected capacity change from 0 to 512 [ 575.987650][T24078] loop3: detected capacity change from 0 to 512 [ 575.995894][T24078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 576.007438][T24078] EXT4-fs (loop3): 1 truncate cleaned up [ 576.013369][T24076] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 576.021545][T24076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 576.030196][T24076] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6844: corrupted inode contents [ 576.042978][T24076] EXT4-fs (loop2): Remounting filesystem read-only [ 576.050493][T24076] EXT4-fs (loop2): 1 truncate cleaned up [ 576.057617][ T9621] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 576.068313][ T9621] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 576.078926][ T9621] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 576.139850][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6846'. [ 576.187190][T24089] siw: device registration error -23 [ 576.314590][T24094] loop3: detected capacity change from 0 to 512 [ 576.329154][T24094] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 576.337468][T24094] EXT4-fs (loop3): orphan cleanup on readonly fs [ 576.344343][T24094] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 576.359923][T24094] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 576.367457][T24094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6848: bg 0: block 40: padding at end of block bitmap is not set [ 576.377677][T24092] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6847'. [ 576.391009][T24094] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 576.402731][T24094] EXT4-fs (loop3): 1 truncate cleaned up [ 576.410940][T24092] batadv1: entered promiscuous mode [ 576.416191][T24092] batadv1: entered allmulticast mode [ 576.450026][T24099] loop2: detected capacity change from 0 to 512 [ 576.470072][T24099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 576.480503][T24099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 576.489867][T24099] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6849: corrupted inode contents [ 576.506256][T24099] EXT4-fs (loop2): Remounting filesystem read-only [ 576.554062][T24099] EXT4-fs (loop2): 1 truncate cleaned up [ 576.559891][ T2912] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 576.570508][ T2912] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 576.588076][T24107] loop1: detected capacity change from 0 to 1024 [ 576.595936][T24107] EXT4-fs: Ignoring removed bh option [ 576.602554][ T2912] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 576.605214][T24103] loop3: detected capacity change from 0 to 2048 [ 576.630413][T24107] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 576.656991][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6853'. [ 576.671736][T24103] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.709181][T24116] loop1: detected capacity change from 0 to 1024 [ 576.716225][T24116] EXT4-fs: Ignoring removed nobh option [ 576.721900][T24116] EXT4-fs: Ignoring removed bh option [ 576.766082][T24122] loop5: detected capacity change from 0 to 512 [ 576.771769][T24118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6850: bg 0: block 345: padding at end of block bitmap is not set [ 576.793728][T24123] loop4: detected capacity change from 0 to 1024 [ 576.796121][T24122] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 576.802529][T24118] EXT4-fs (loop3): Remounting filesystem read-only [ 576.820251][T24123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.874448][T24122] EXT4-fs (loop5): 1 truncate cleaned up [ 577.016038][T24140] siw: device registration error -23 [ 577.171405][T24146] loop5: detected capacity change from 0 to 512 [ 577.191069][T24146] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 577.199465][T24146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 577.206098][T24146] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 577.221138][T24146] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 577.228469][T24146] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6862: bg 0: block 40: padding at end of block bitmap is not set [ 577.240145][T24144] batadv1: entered promiscuous mode [ 577.243272][T24146] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 577.247969][T24144] batadv1: entered allmulticast mode [ 577.258247][T24146] EXT4-fs (loop5): 1 truncate cleaned up [ 577.327300][T24157] loop3: detected capacity change from 0 to 1024 [ 577.335938][T24157] EXT4-fs: Ignoring removed bh option [ 577.346704][T24157] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 577.453796][T24167] loop2: detected capacity change from 0 to 512 [ 577.461006][T24167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.484175][T24167] EXT4-fs (loop2): 1 truncate cleaned up [ 577.511891][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 577.511910][ T29] audit: type=1326 audit(1760900083.000:21196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.561505][ T29] audit: type=1326 audit(1760900083.040:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.585278][ T29] audit: type=1326 audit(1760900083.050:21198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.612630][ T29] audit: type=1326 audit(1760900083.050:21199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.636357][ T29] audit: type=1326 audit(1760900083.050:21200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.660103][ T29] audit: type=1326 audit(1760900083.100:21201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.717096][ T29] audit: type=1326 audit(1760900083.210:21202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.741065][ T29] audit: type=1326 audit(1760900083.210:21203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0559cefc9 code=0x7ffc0000 [ 577.765619][T24180] siw: device registration error -23 [ 577.845718][ T29] audit: type=1326 audit(1760900083.330:21204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24154 comm="syz.5.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d06135e67 code=0x7ffc0000 [ 577.951132][ T29] audit: type=1326 audit(1760900083.330:21205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24154 comm="syz.5.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d060db099 code=0x7ffc0000 [ 577.983027][T24191] loop3: detected capacity change from 0 to 512 [ 578.028446][T24191] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 578.047869][T24191] EXT4-fs (loop3): orphan cleanup on readonly fs [ 578.061479][T24191] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 578.097524][T24191] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 578.128064][T24193] batadv1: entered promiscuous mode [ 578.133340][T24193] batadv1: entered allmulticast mode [ 578.140258][T24191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6875: bg 0: block 40: padding at end of block bitmap is not set [ 578.158259][T24191] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 578.171530][T24191] EXT4-fs (loop3): 1 truncate cleaned up [ 578.230570][T24206] loop1: detected capacity change from 0 to 1024 [ 578.241670][T24206] EXT4-fs: Ignoring removed bh option [ 578.248546][T24206] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 578.297941][T24213] loop5: detected capacity change from 0 to 1024 [ 578.318375][T24210] loop2: detected capacity change from 0 to 512 [ 578.330787][T24213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.341304][T24215] netlink: 'syz.4.6884': attribute type 4 has an invalid length. [ 578.380118][T24210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 578.409401][T24210] EXT4-fs (loop2): 1 truncate cleaned up [ 578.473283][T24224] loop4: detected capacity change from 0 to 512 [ 578.538875][T24224] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 578.556050][T24224] EXT4-fs (loop4): orphan cleanup on readonly fs [ 578.571314][T24224] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6887: corrupted inode contents [ 578.584055][T24224] EXT4-fs (loop4): Remounting filesystem read-only [ 578.591232][T24224] EXT4-fs (loop4): 1 truncate cleaned up [ 578.598671][ T9515] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 578.609324][ T9515] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 578.628270][ T9515] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 578.713669][T24236] loop4: detected capacity change from 0 to 512 [ 578.727524][T24236] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 578.765994][T24236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 578.796937][T24236] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 578.834362][T24236] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 578.856386][T24236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6891: bg 0: block 40: padding at end of block bitmap is not set [ 578.905832][T24236] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 578.940772][T24236] EXT4-fs (loop4): 1 truncate cleaned up [ 579.214930][T24249] __nla_validate_parse: 15 callbacks suppressed [ 579.214954][T24249] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6893'. [ 579.352661][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6895'. [ 579.546841][T24257] loop4: detected capacity change from 0 to 512 [ 579.680050][T24261] netlink: 'syz.2.6898': attribute type 4 has an invalid length. [ 579.687984][T24261] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6898'. [ 579.705663][T24257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 579.722638][T24249] batadv1: entered promiscuous mode [ 579.727990][T24249] batadv1: entered allmulticast mode [ 579.744252][T24257] EXT4-fs (loop4): 1 truncate cleaned up [ 579.767149][T24261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6898'. [ 580.026257][T24273] loop5: detected capacity change from 0 to 512 [ 580.087464][T24273] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 580.105133][T24273] EXT4-fs (loop5): orphan cleanup on readonly fs [ 580.171219][T24273] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.6902: corrupted inode contents [ 580.194389][T24273] EXT4-fs (loop5): Remounting filesystem read-only [ 580.201373][T24273] EXT4-fs (loop5): 1 truncate cleaned up [ 580.274116][T24284] loop2: detected capacity change from 0 to 128 [ 580.286434][T24281] siw: device registration error -23 [ 580.468002][ T6578] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 580.478702][ T6578] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 580.491159][ T6578] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 580.527910][T24289] loop4: detected capacity change from 0 to 2048 [ 580.564883][T24294] loop5: detected capacity change from 0 to 512 [ 580.564946][T24289] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.581869][T24294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 580.593524][T24294] EXT4-fs (loop5): 1 truncate cleaned up [ 580.650182][T24302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6907: bg 0: block 345: padding at end of block bitmap is not set [ 580.672170][T24302] EXT4-fs (loop4): Remounting filesystem read-only [ 580.688834][T24300] loop5: detected capacity change from 0 to 512 [ 580.706113][T24305] loop1: detected capacity change from 0 to 512 [ 580.715877][T24300] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 580.734424][T24305] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 580.742878][T24300] EXT4-fs (loop5): orphan cleanup on readonly fs [ 580.751000][T24300] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 580.758553][T24305] EXT4-fs (loop1): orphan cleanup on readonly fs [ 580.766859][T24300] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 580.774369][T24305] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6911: corrupted inode contents [ 580.791228][T24305] EXT4-fs (loop1): Remounting filesystem read-only [ 580.791894][T24300] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6910: bg 0: block 40: padding at end of block bitmap is not set [ 580.798054][T24305] EXT4-fs (loop1): 1 truncate cleaned up [ 580.820090][ T9604] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 580.830702][ T9604] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 580.841688][T24300] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 580.850968][T24300] EXT4-fs (loop5): 1 truncate cleaned up [ 580.857582][ T9604] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 580.858156][T24311] netlink: 'syz.4.6912': attribute type 4 has an invalid length. [ 580.875767][T24311] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6912'. [ 581.053261][T24318] loop2: detected capacity change from 0 to 512 [ 581.083986][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6917'. [ 581.086756][T24318] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 581.112881][T24318] EXT4-fs (loop2): orphan cleanup on readonly fs [ 581.127713][T24318] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 581.184890][T24318] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 581.259137][T24318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6915: bg 0: block 40: padding at end of block bitmap is not set [ 581.296267][T24318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 581.297231][T24334] loop5: detected capacity change from 0 to 512 [ 581.316726][T24318] EXT4-fs (loop2): 1 truncate cleaned up [ 581.326861][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6915'. [ 581.347564][T24334] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 581.355652][T24334] EXT4-fs (loop5): orphan cleanup on readonly fs [ 581.368059][T24334] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.6920: corrupted inode contents [ 581.420668][T24334] EXT4-fs (loop5): Remounting filesystem read-only [ 581.428365][T24334] EXT4-fs (loop5): 1 truncate cleaned up [ 581.434725][ T9607] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 581.445340][ T9607] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 581.462406][T24338] loop3: detected capacity change from 0 to 512 [ 581.475199][T24338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 581.507631][ T9607] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 581.545237][T24338] EXT4-fs (loop3): 1 truncate cleaned up [ 581.647800][T24346] loop3: detected capacity change from 0 to 512 [ 581.677353][T24346] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 581.706503][T24346] EXT4-fs (loop3): orphan cleanup on readonly fs [ 581.723065][T24346] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.6924: corrupted inode contents [ 581.744755][T24350] loop1: detected capacity change from 0 to 512 [ 581.757119][T24354] netlink: 'syz.5.6926': attribute type 4 has an invalid length. [ 581.764881][T24354] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6926'. [ 581.787743][T24346] EXT4-fs (loop3): Remounting filesystem read-only [ 581.794435][T24346] EXT4-fs (loop3): 1 truncate cleaned up [ 581.800423][ T9641] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 581.811693][ T9641] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 581.831814][T24350] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 581.856472][T24350] EXT4-fs (loop1): orphan cleanup on readonly fs [ 581.869675][ T9641] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 581.886160][T24350] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 581.915320][T24350] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 581.922717][T24350] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6925: bg 0: block 40: padding at end of block bitmap is not set [ 581.937598][T24350] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 581.950403][T24350] EXT4-fs (loop1): 1 truncate cleaned up [ 582.014103][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6929'. [ 582.024816][T24367] loop4: detected capacity change from 0 to 128 [ 582.071258][T24369] loop1: detected capacity change from 0 to 1024 [ 582.075936][T24371] loop2: detected capacity change from 0 to 1024 [ 582.084610][T24371] EXT4-fs: Ignoring removed nobh option [ 582.090255][T24371] EXT4-fs: Ignoring removed bh option [ 582.101192][T24369] EXT4-fs: Ignoring removed bh option [ 582.116897][T24369] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 582.225293][T24384] siw: device registration error -23 [ 582.248385][T24382] loop1: detected capacity change from 0 to 512 [ 582.277456][T24382] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 582.285540][T24382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 582.292212][T24382] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 582.307109][T24382] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 582.314172][T24382] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6933: bg 0: block 40: padding at end of block bitmap is not set [ 582.329736][T24382] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 582.339104][T24382] EXT4-fs (loop1): 1 truncate cleaned up [ 582.348389][T24382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 582.374097][T24390] loop3: detected capacity change from 0 to 512 [ 582.392401][T24390] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 582.395474][T24392] loop1: detected capacity change from 0 to 512 [ 582.409711][T24392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 582.442360][T24392] EXT4-fs (loop1): 1 truncate cleaned up [ 582.457908][T24390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 582.475417][T24390] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.6934: corrupted inode contents [ 582.487757][T24390] EXT4-fs (loop3): Remounting filesystem read-only [ 582.487832][T24390] EXT4-fs (loop3): 1 truncate cleaned up [ 582.487976][ T565] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 582.510891][ T565] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 582.521545][ T565] __quota_error: 200 callbacks suppressed [ 582.521560][ T565] Quota error (device loop3): write_blk: dquota write failed [ 582.534733][ T565] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 582.547378][ T565] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 582.557505][ T565] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 582.566338][ T565] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 582.598141][ T29] audit: type=1326 audit(1760900088.090:21368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.5.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 582.621823][ T29] audit: type=1326 audit(1760900088.090:21369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.5.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 582.670185][ T29] audit: type=1326 audit(1760900088.150:21370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24399 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 582.693897][ T29] audit: type=1326 audit(1760900088.150:21371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24399 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7facedc6efc9 code=0x7ffc0000 [ 582.723659][T24404] loop5: detected capacity change from 0 to 512 [ 582.731975][T24407] loop3: detected capacity change from 0 to 128 [ 582.767292][T24404] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 582.775815][T24404] EXT4-fs (loop5): orphan cleanup on readonly fs [ 582.784238][T24404] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.6939: corrupted inode contents [ 582.818390][T24411] netlink: 'syz.4.6940': attribute type 4 has an invalid length. [ 582.829870][T24404] EXT4-fs (loop5): Remounting filesystem read-only [ 582.842018][T24404] EXT4-fs (loop5): 1 truncate cleaned up [ 582.848179][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 582.858939][T11547] Quota error (device loop5): write_blk: dquota write failed [ 582.866388][T11547] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 582.876473][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 582.891746][T11547] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 582.998638][T24414] loop5: detected capacity change from 0 to 512 [ 583.081852][T24414] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 583.090344][T24414] EXT4-fs (loop5): orphan cleanup on readonly fs [ 583.112617][T24414] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 583.146913][T24414] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 583.162033][T24414] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6942: bg 0: block 40: padding at end of block bitmap is not set [ 583.204727][T24414] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 583.226566][T24425] loop4: detected capacity change from 0 to 1024 [ 583.233234][T24414] EXT4-fs (loop5): 1 truncate cleaned up [ 583.250800][T24425] EXT4-fs: Ignoring removed bh option [ 583.273687][T24425] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 583.370413][T24429] loop2: detected capacity change from 0 to 512 [ 583.390972][T24429] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 583.399219][T24429] EXT4-fs (loop2): orphan cleanup on readonly fs [ 583.415945][T24429] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 583.439476][T24440] loop4: detected capacity change from 0 to 512 [ 583.449607][T24440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 583.464344][T24441] siw: device registration error -23 [ 583.474792][T24429] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 583.503978][T24440] EXT4-fs (loop4): 1 truncate cleaned up [ 583.512598][T24429] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6946: bg 0: block 40: padding at end of block bitmap is not set [ 583.552297][T24446] loop1: detected capacity change from 0 to 512 [ 583.569696][T24429] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 583.579531][T24429] EXT4-fs (loop2): 1 truncate cleaned up [ 583.595277][T24446] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 583.603670][T24446] EXT4-fs (loop1): orphan cleanup on readonly fs [ 583.632919][T24446] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6949: corrupted inode contents [ 583.660985][T24446] EXT4-fs (loop1): Remounting filesystem read-only [ 583.694643][T24455] loop2: detected capacity change from 0 to 1024 [ 583.705496][T24446] EXT4-fs (loop1): 1 truncate cleaned up [ 583.712268][ T9636] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 583.713782][T24455] EXT4-fs: Ignoring removed nobh option [ 583.722881][ T9636] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 583.728485][T24455] EXT4-fs: Ignoring removed bh option [ 583.747765][T24457] loop4: detected capacity change from 0 to 128 [ 583.761545][ T9636] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 584.047508][T24467] batadv1: entered promiscuous mode [ 584.052779][T24467] batadv1: entered allmulticast mode [ 584.135947][T24475] loop5: detected capacity change from 0 to 2048 [ 584.162286][T24475] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.293648][T24480] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6957: bg 0: block 345: padding at end of block bitmap is not set [ 584.308627][T24480] EXT4-fs (loop5): Remounting filesystem read-only [ 584.348231][T24483] __nla_validate_parse: 6 callbacks suppressed [ 584.348253][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 584.489354][T24488] loop4: detected capacity change from 0 to 512 [ 584.502232][T24488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 584.526511][T24488] EXT4-fs (loop4): 1 truncate cleaned up [ 584.675192][T24499] siw: device registration error -23 [ 584.692202][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6965'. [ 584.710824][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6966'. [ 584.813203][T24506] loop2: detected capacity change from 0 to 512 [ 584.835062][T24506] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 584.878361][T24506] EXT4-fs (loop2): orphan cleanup on readonly fs [ 584.926860][T24506] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.6967: corrupted inode contents [ 584.958090][T24506] EXT4-fs (loop2): Remounting filesystem read-only [ 584.967948][T24506] EXT4-fs (loop2): 1 truncate cleaned up [ 584.974019][ T9636] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 584.984606][ T9636] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 585.007162][ T9636] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 585.111875][T24513] loop3: detected capacity change from 0 to 1024 [ 585.119781][T24513] EXT4-fs: Ignoring removed nobh option [ 585.125446][T24513] EXT4-fs: Ignoring removed bh option [ 585.199047][T24519] loop4: detected capacity change from 0 to 512 [ 585.207869][T24514] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6968'. [ 585.232634][T24514] batadv1: entered promiscuous mode [ 585.238070][T24514] batadv1: entered allmulticast mode [ 585.248637][T24519] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 585.280514][T24519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 585.293978][T24519] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.6970: corrupted inode contents [ 585.307682][T24519] EXT4-fs (loop4): Remounting filesystem read-only [ 585.345680][T24519] EXT4-fs (loop4): 1 truncate cleaned up [ 585.351539][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 585.362334][T11547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 585.373603][T11547] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 585.426171][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6973'. [ 585.431111][T24530] loop5: detected capacity change from 0 to 512 [ 585.454868][T24530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 585.468797][T24530] EXT4-fs (loop5): 1 truncate cleaned up [ 585.556063][T24539] loop4: detected capacity change from 0 to 128 [ 585.700777][T24546] loop2: detected capacity change from 0 to 128 [ 585.800396][T24548] loop5: detected capacity change from 0 to 512 [ 585.817473][T24548] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 585.825571][T24548] EXT4-fs (loop5): orphan cleanup on readonly fs [ 585.833628][T24548] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.6979: corrupted inode contents [ 585.845896][T24548] EXT4-fs (loop5): Remounting filesystem read-only [ 585.852669][T24548] EXT4-fs (loop5): 1 truncate cleaned up [ 585.858445][ T9636] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 585.869114][ T9636] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 585.879682][ T9636] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 585.915165][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6980'. [ 585.977393][T24554] loop3: detected capacity change from 0 to 512 [ 586.008080][T24554] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 586.016155][T24554] EXT4-fs (loop3): orphan cleanup on readonly fs [ 586.023903][T24554] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.6981: corrupted inode contents [ 586.036019][T24554] EXT4-fs (loop3): Remounting filesystem read-only [ 586.044121][T24554] EXT4-fs (loop3): 1 truncate cleaned up [ 586.049934][ T9636] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 586.060795][ T9636] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 586.072972][ T9636] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 586.227940][T24564] loop3: detected capacity change from 0 to 512 [ 586.228429][T24562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6993'. [ 586.249482][T24564] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 586.257902][T24564] EXT4-fs (loop3): orphan cleanup on readonly fs [ 586.268538][T24564] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.6983: corrupted inode contents [ 586.284737][T24564] EXT4-fs (loop3): Remounting filesystem read-only [ 586.291472][T24564] EXT4-fs (loop3): 1 truncate cleaned up [ 586.301280][ T9636] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 586.311979][ T9636] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 586.362343][ T9636] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 586.435894][T24568] loop4: detected capacity change from 0 to 2048 [ 586.476714][T24568] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.553136][T24578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6984: bg 0: block 345: padding at end of block bitmap is not set [ 586.573666][T24578] EXT4-fs (loop4): Remounting filesystem read-only [ 586.576132][T24577] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6985'. [ 586.600271][T24577] batadv1: entered promiscuous mode [ 586.605528][T24577] batadv1: entered allmulticast mode [ 586.829177][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6988'. [ 587.089664][T24591] loop1: detected capacity change from 0 to 512 [ 587.189220][T24591] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 587.261257][T24591] EXT4-fs (loop1): orphan cleanup on readonly fs [ 587.290672][T24596] loop3: detected capacity change from 0 to 512 [ 587.368585][T24591] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 587.405061][T24596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 587.417411][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6994'. [ 587.427832][T24596] EXT4-fs (loop3): 1 truncate cleaned up [ 587.434335][T24591] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 587.453956][T24591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6990: bg 0: block 40: padding at end of block bitmap is not set [ 587.497202][T24591] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 587.516604][T24591] EXT4-fs (loop1): 1 truncate cleaned up [ 587.572593][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 587.572608][ T29] audit: type=1326 audit(1760900093.060:21527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 587.765657][ T29] audit: type=1326 audit(1760900093.100:21528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 587.852919][T24610] loop3: detected capacity change from 0 to 512 [ 587.889752][T24616] loop1: detected capacity change from 0 to 128 [ 587.922936][T24617] siw: device registration error -23 [ 587.938949][ T29] audit: type=1326 audit(1760900093.430:21529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 587.972607][ T29] audit: type=1326 audit(1760900093.450:21530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 587.996620][ T29] audit: type=1326 audit(1760900093.460:21531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 588.020340][ T29] audit: type=1326 audit(1760900093.460:21532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 588.043976][ T29] audit: type=1326 audit(1760900093.460:21533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 588.067655][ T29] audit: type=1326 audit(1760900093.460:21534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 588.091292][ T29] audit: type=1326 audit(1760900093.460:21535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 588.114897][ T29] audit: type=1326 audit(1760900093.460:21536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.5.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 588.151409][T24610] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 588.159668][T24610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 588.176211][T24610] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 588.204673][T24610] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 588.220693][T24610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6997: bg 0: block 40: padding at end of block bitmap is not set [ 588.259316][T24610] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 588.270045][T24610] EXT4-fs (loop3): 1 truncate cleaned up [ 588.288454][T24622] netlink: 'syz.2.6999': attribute type 4 has an invalid length. [ 588.371467][T24624] loop5: detected capacity change from 0 to 512 [ 588.387411][T24624] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 588.397031][T24624] EXT4-fs (loop5): orphan cleanup on readonly fs [ 588.410208][T24624] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.7000: corrupted inode contents [ 588.422430][T24624] EXT4-fs (loop5): Remounting filesystem read-only [ 588.429248][T24624] EXT4-fs (loop5): 1 truncate cleaned up [ 588.435400][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 588.446108][T11547] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 588.457845][T11547] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 588.490768][T24632] loop2: detected capacity change from 0 to 512 [ 588.511577][T24632] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 588.537055][T24632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 588.545673][T24632] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.7002: corrupted inode contents [ 588.560577][T24632] EXT4-fs (loop2): Remounting filesystem read-only [ 588.567727][T24632] EXT4-fs (loop2): 1 truncate cleaned up [ 588.573577][ T9604] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 588.584164][ T9604] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 588.607086][ T9604] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 588.711367][T24645] loop5: detected capacity change from 0 to 1024 [ 588.726958][T24645] EXT4-fs: Ignoring removed nobh option [ 588.732600][T24645] EXT4-fs: Ignoring removed bh option [ 588.939541][T24653] siw: device registration error -23 [ 589.201711][T24664] loop1: detected capacity change from 0 to 512 [ 589.280411][T24664] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 589.311013][T24664] EXT4-fs (loop1): orphan cleanup on readonly fs [ 589.341557][T24664] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 589.402858][T24664] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 589.431102][T24664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7010: bg 0: block 40: padding at end of block bitmap is not set [ 589.487447][T24664] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 589.527686][T24664] EXT4-fs (loop1): 1 truncate cleaned up [ 589.922342][T24677] loop1: detected capacity change from 0 to 512 [ 589.959210][T24677] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 589.993380][T24677] EXT4-fs (loop1): orphan cleanup on readonly fs [ 590.022528][T24681] loop5: detected capacity change from 0 to 512 [ 590.029869][T24677] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.7023: corrupted inode contents [ 590.047188][T24681] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 590.068016][T24677] EXT4-fs (loop1): Remounting filesystem read-only [ 590.074995][T24681] EXT4-fs (loop5): orphan cleanup on readonly fs [ 590.086189][T24686] tipc: Started in network mode [ 590.091158][T24686] tipc: Node identity ac14140f, cluster identity 4711 [ 590.101529][T24677] EXT4-fs (loop1): 1 truncate cleaned up [ 590.107488][ T9622] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.118135][ T9622] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.130468][T24681] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.7014: corrupted inode contents [ 590.143843][T24686] tipc: New replicast peer: 255.255.255.255 [ 590.150066][T24686] tipc: Enabled bearer , priority 10 [ 590.156894][T24681] EXT4-fs (loop5): Remounting filesystem read-only [ 590.163555][T24681] EXT4-fs (loop5): 1 truncate cleaned up [ 590.169670][ T9622] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 590.189676][ T9622] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.200436][ T9622] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.212980][ T9622] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 590.223739][T24677] EXT4-fs mount: 201 callbacks suppressed [ 590.223754][T24677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.242822][T24681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.256168][T24681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.266454][T24677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.376764][T24691] loop5: detected capacity change from 0 to 1024 [ 590.393383][T24691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 590.437101][T24691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.461334][T24697] loop4: detected capacity change from 0 to 512 [ 590.487874][T24697] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 590.505078][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.514542][T24697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 590.516073][T24693] loop1: detected capacity change from 0 to 2048 [ 590.525228][T24697] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.7019: corrupted inode contents [ 590.541667][T24697] EXT4-fs (loop4): Remounting filesystem read-only [ 590.552777][T24697] EXT4-fs (loop4): 1 truncate cleaned up [ 590.559065][ T9601] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.569819][ T9601] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.578510][T24703] __nla_validate_parse: 5 callbacks suppressed [ 590.578533][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7020'. [ 590.583711][ T9601] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 590.587192][T24693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.596562][T24697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.613316][T24693] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.664611][T21730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.720121][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7024'. [ 590.734578][T24708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7018: bg 0: block 345: padding at end of block bitmap is not set [ 590.750819][T24708] EXT4-fs (loop1): Remounting filesystem read-only [ 590.825911][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.841799][T24715] loop5: detected capacity change from 0 to 128 [ 590.858160][T24717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 590.970037][T24723] loop2: detected capacity change from 0 to 512 [ 590.988385][T24723] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 590.996741][T24723] EXT4-fs (loop2): orphan cleanup on readonly fs [ 591.003422][T24723] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 591.022038][T24723] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 591.029625][T24723] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7027: bg 0: block 40: padding at end of block bitmap is not set [ 591.044115][T24723] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 591.053440][T24723] EXT4-fs (loop2): 1 truncate cleaned up [ 591.059767][T24723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 591.075345][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7027'. [ 591.096171][T24723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.130796][T24731] loop2: detected capacity change from 0 to 512 [ 591.148376][T24731] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 591.156749][T24731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 591.165848][T24731] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.7028: corrupted inode contents [ 591.184802][T24731] EXT4-fs (loop2): Remounting filesystem read-only [ 591.191924][T24736] loop1: detected capacity change from 0 to 512 [ 591.192511][T24731] EXT4-fs (loop2): 1 truncate cleaned up [ 591.204156][ T9601] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 591.214852][ T9601] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 591.225475][ T9601] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 591.236181][T24731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 591.236947][T24736] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 591.249481][T24731] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.256873][T24736] EXT4-fs (loop1): orphan cleanup on readonly fs [ 591.266380][ T3521] tipc: Node number set to 2886997007 [ 591.273781][T24736] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.7030: corrupted inode contents [ 591.289775][T24736] EXT4-fs (loop1): Remounting filesystem read-only [ 591.304887][T24736] EXT4-fs (loop1): 1 truncate cleaned up [ 591.311471][T11545] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 591.322076][T11545] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 591.333469][T11545] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 591.349017][T24741] loop4: detected capacity change from 0 to 1024 [ 591.356822][T24736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 591.369455][T24741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 591.383603][T24741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.412675][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.432307][T24744] siw: device registration error -23 [ 591.449021][T24746] loop3: detected capacity change from 0 to 512 [ 591.478912][T24746] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 591.484249][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7034'. [ 591.487408][T24746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 591.504896][T24746] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.7033: corrupted inode contents [ 591.518197][T24746] EXT4-fs (loop3): Remounting filesystem read-only [ 591.524887][T24746] EXT4-fs (loop3): 1 truncate cleaned up [ 591.531261][ T9601] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 591.542264][ T9601] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 591.552940][ T9601] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 591.564044][T24746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 591.602693][T21199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.633954][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7035'. [ 591.647606][T24757] netlink: 'syz.2.7037': attribute type 4 has an invalid length. [ 591.655390][T24757] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7037'. [ 591.738541][T24761] loop3: detected capacity change from 0 to 2048 [ 591.769033][T24761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.782083][T24761] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.856603][T24767] loop2: detected capacity change from 0 to 512 [ 591.879348][T24767] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 591.883625][T24771] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7036: bg 0: block 345: padding at end of block bitmap is not set [ 591.887585][T24767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 591.903411][T24771] EXT4-fs (loop3): Remounting filesystem read-only [ 591.909072][T24767] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 591.935582][T24767] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 591.943176][T24767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7039: bg 0: block 40: padding at end of block bitmap is not set [ 591.966493][T24767] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 591.983489][T21730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.013296][T21199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.034651][T24767] EXT4-fs (loop2): 1 truncate cleaned up [ 592.058153][T24767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 592.070908][T24779] loop5: detected capacity change from 0 to 512 [ 592.086244][T24781] loop3: detected capacity change from 0 to 1024 [ 592.094822][T24781] EXT4-fs: Ignoring removed nobh option [ 592.100521][T24781] EXT4-fs: Ignoring removed bh option [ 592.118499][T24779] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 592.127962][T24779] EXT4-fs (loop5): orphan cleanup on readonly fs [ 592.135688][T24781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.149201][T24767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7039'. [ 592.155426][T24779] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.7043: corrupted inode contents [ 592.180637][T24767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.190662][T24779] EXT4-fs (loop5): Remounting filesystem read-only [ 592.203957][T24779] EXT4-fs (loop5): 1 truncate cleaned up [ 592.209822][ T9518] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 592.220518][ T9518] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 592.238742][ T9518] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 592.260740][T24779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 592.300492][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.322234][T24798] loop5: detected capacity change from 0 to 512 [ 592.340345][T24798] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 592.348845][T24798] EXT4-fs (loop5): orphan cleanup on readonly fs [ 592.366047][T24802] siw: device registration error -23 [ 592.369212][T24798] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.7048: corrupted inode contents [ 592.383785][T24798] EXT4-fs (loop5): Remounting filesystem read-only [ 592.390489][T24798] EXT4-fs (loop5): 1 truncate cleaned up [ 592.397263][ T9616] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 592.407887][ T9616] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 592.418721][T24803] loop4: detected capacity change from 0 to 128 [ 592.418721][ T9616] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 592.437726][T24798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 592.466979][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.492245][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7049'. [ 592.592757][T24812] loop2: detected capacity change from 0 to 128 [ 592.617207][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 592.617250][ T29] audit: type=1326 audit(1760900098.110:21881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.5.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 592.647101][ T29] audit: type=1326 audit(1760900098.110:21882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.5.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0613efc9 code=0x7ffc0000 [ 592.691668][ T29] audit: type=1400 audit(1760900098.180:21883): avc: denied { ioctl } for pid=24814 comm="syz.5.7052" path="socket:[82555]" dev="sockfs" ino=82555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.769314][T24818] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.782254][ T29] audit: type=1400 audit(1760900098.270:21884): avc: denied { watch watch_reads } for pid=24808 comm="syz.1.7051" path="/187" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 592.918878][T21199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.940698][ T29] audit: type=1326 audit(1760900098.430:21885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.3.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 592.965316][ T29] audit: type=1326 audit(1760900098.440:21886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.3.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 592.989078][ T29] audit: type=1326 audit(1760900098.440:21887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.3.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f982b76efc9 code=0x7ffc0000 [ 593.212079][ T29] audit: type=1400 audit(1760900098.700:21888): avc: denied { create } for pid=24823 comm="syz.4.7054" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 593.252140][ T29] audit: type=1400 audit(1760900098.720:21889): avc: denied { map } for pid=24823 comm="syz.4.7054" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 593.276691][ T29] audit: type=1400 audit(1760900098.720:21890): avc: denied { read write } for pid=24823 comm="syz.4.7054" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 593.316587][T24825] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7054'. [ 593.328596][T24825] batadv1: entered promiscuous mode [ 593.333840][T24825] batadv1: entered allmulticast mode [ 593.501235][T24829] loop1: detected capacity change from 0 to 2048 [ 593.518562][T24829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.550913][T24832] loop4: detected capacity change from 0 to 512 [ 593.592558][T24832] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 593.611123][T24829] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.652945][T24832] EXT4-fs (loop4): orphan cleanup on readonly fs [ 593.684547][T24832] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 593.732052][T24846] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7056: bg 0: block 345: padding at end of block bitmap is not set [ 593.748070][T24832] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 593.755114][T24847] loop5: detected capacity change from 0 to 512 [ 593.755383][T24832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7057: bg 0: block 40: padding at end of block bitmap is not set [ 593.793209][T24846] EXT4-fs (loop1): Remounting filesystem read-only [ 593.824268][T24847] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 593.836526][T24832] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 593.836556][T24847] EXT4-fs (loop5): orphan cleanup on readonly fs [ 593.845582][T24832] EXT4-fs (loop4): 1 truncate cleaned up [ 593.858769][T24847] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.7061: corrupted inode contents [ 593.871261][T24852] siw: device registration error -23 [ 593.872096][T24832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.889321][T24847] EXT4-fs (loop5): Remounting filesystem read-only [ 593.896983][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.908661][T24832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.919190][T24847] EXT4-fs (loop5): 1 truncate cleaned up [ 593.925032][ T565] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 593.935689][ T565] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 593.953956][T24856] 9pnet_virtio: no channels available for device 127.0.0.1 [ 593.970343][ T565] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 593.981843][T24847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 594.011389][T18739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.040053][T24864] netlink: 'syz.3.7068': attribute type 4 has an invalid length. [ 594.169106][ T9632] ================================================================== [ 594.177265][ T9632] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 594.185835][ T9632] [ 594.188168][ T9632] write to 0xffff888132945508 of 44 bytes by task 24873 on cpu 0: [ 594.196001][ T9632] tty_set_termios+0xc0/0x8c0 [ 594.200726][ T9632] set_termios+0x490/0x4d0 [ 594.205180][ T9632] tty_mode_ioctl+0x379/0x5c0 [ 594.209892][ T9632] n_tty_ioctl_helper+0x91/0x210 [ 594.214857][ T9632] n_tty_ioctl+0x101/0x200 [ 594.219304][ T9632] tty_ioctl+0x83f/0xb80 [ 594.223576][ T9632] __se_sys_ioctl+0xce/0x140 [ 594.228190][ T9632] __x64_sys_ioctl+0x43/0x50 [ 594.232805][ T9632] x64_sys_call+0x1816/0x3000 [ 594.237514][ T9632] do_syscall_64+0xd2/0x200 [ 594.242065][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.247992][ T9632] [ 594.250340][ T9632] read to 0xffff888132945522 of 1 bytes by task 9632 on cpu 1: [ 594.258003][ T9632] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 594.258055][ T9632] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 594.258094][ T9632] tty_port_default_lookahead_buf+0x91/0xc0 [ 594.258128][ T9632] flush_to_ldisc+0x288/0x340 [ 594.258156][ T9632] process_scheduled_works+0x4ce/0x9d0 [ 594.258195][ T9632] worker_thread+0x582/0x770 [ 594.258216][ T9632] kthread+0x489/0x510 [ 594.258243][ T9632] ret_from_fork+0x122/0x1b0 [ 594.258267][ T9632] ret_from_fork_asm+0x1a/0x30 [ 594.258293][ T9632] [ 594.258299][ T9632] value changed: 0x13 -> 0x31 [ 594.258311][ T9632] [ 594.258316][ T9632] Reported by Kernel Concurrency Sanitizer on: [ 594.258330][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: kworker/u8:46 Not tainted syzkaller #0 PREEMPT(voluntary) [ 594.258362][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.258382][ T9632] Workqueue: events_unbound flush_to_ldisc [ 594.258414][ T9632] ================================================================== [ 594.365513][T24875] loop1: detected capacity change from 0 to 512 [ 594.397819][T24875] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 594.406062][T24875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 594.413339][T24875] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 594.428296][T24875] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 594.435514][T24875] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7070: bg 0: block 40: padding at end of block bitmap is not set [ 594.450094][T24875] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 594.459176][T24875] EXT4-fs (loop1): 1 truncate cleaned up [ 594.465224][T24875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 594.509633][T21589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.