last executing test programs: 2.58259753s ago: executing program 1 (id=508): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003fdc23be3ac055e3395e1e4154b5018ee4faf1d63947527e5babd610a7f53fb38dc8db3637e5c34affcffffffffffffffbfed2546ffa7a51528108678bc6028"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x372, &(0x7f0000000500)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000ad000000ad00000002000000040000000200000f3d5be655d4d48bd403000000010000007f00000001000000010000000000020000020000c04e19080000000000001102000000050000000b0000000110000f01000000020000000700000006000000c30e0000000000001102000000030000000d0000000500000604000000000002000000c8060000050000000700000010000000050000000900000001000000060000000100000f010000000500000008000000000000004000"/210], 0x0, 0xca, 0x0, 0x0, 0x80000000, 0x10000}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000060000000000050000000800090002000000180001801400020073697430000000000000000000000000050007"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) fadvise64(r5, 0x0, 0x0, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000200)="4efbb4b758df0038fd0773cf821d9322201edd58dddc983f45425090d4df681498ae269c8978125a5cf2cb8fda2a56a1f55551c60bcfd564e937d2cffc37f4f7b9d66c91ff18de95d37ba880d4dd4fd648ecfe06be7e1ec5bb7cc8e23e2cdb0bf26f0e09bc4d0dbd70c3fa54c7efe6890850e2162de08a26df61b309d2ef6a06eeffb953ba1c84d8ead6c96f4d7e31f5063ec5afee627e87d7a69e87cc9e855a72", 0xa1}, {&(0x7f0000000880)="59b7ac6833e5f66060e044bbc343e2ec63c668c369437b42c00eb244079e16ddbee52a2aec79f45963681050e1b15236d86d36d8e6058e170a41934b24bf729fd3af4a16cd12c5c786a6e4d2f76dc09bd727076beae47368b33a6e8650a1c4e4c471b56f356e71602666e765b09ec022e9f94f55d22777694ab309def960be2868fc3fb14ef7c44ebd", 0x89}, {&(0x7f0000000480)="cf54cabd4727a7934f6074ad46", 0xd}, {&(0x7f0000000940)="9bdaf006c7e61f1f1be59bfa9ecc91fd4deb1ac42e6d0daae94777b70d55e5f07ed6f4402b0eccacae75a2134d3d7f8e732472080ce91a", 0x37}, {&(0x7f0000000980)="0b771881175dcee9314d7924feee800098b68fe627019830acb27284daac583bc98c84e789126ddad95b33f48ca54507104c81f50a27e6941baf25dc04cfb00617104ec2", 0x44}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1100}}], 0x1, 0x8001) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0000ee000a0002"], 0x28}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000005b34108f00000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000ffbfa400000000000007040000f0ffff", @ANYRES8, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020b85c6f314dd4454020640500000000002020207b1af8ff00000000bfa10000000000000701000040f8ffffffb702000008000000b703000000000000a5000000080000e9"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 2.417404292s ago: executing program 3 (id=512): syz_emit_ethernet(0x86, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff0180c22500000800"], 0x0) 2.355691353s ago: executing program 3 (id=514): pipe(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) 2.225558485s ago: executing program 1 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r1}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 2.141781667s ago: executing program 0 (id=518): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) unshare(0x68040200) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.100955177s ago: executing program 3 (id=519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000200)) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_clone3(&(0x7f0000001f40)={0x804800, &(0x7f0000000500), &(0x7f00000005c0)=0x0, &(0x7f0000000e80), {0x2}, &(0x7f0000000ec0)=""/4096, 0x1000, &(0x7f0000001ec0), &(0x7f0000001f00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) setresuid(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setregid(r11, r12) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x400400, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r14, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r14, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r14, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmsg$netlink(r0, &(0x7f0000002140)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000002c0)={0xbc, 0x27, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x23, 0xd5, 0x0, 0x1, [@generic="b79edbff43f77303773ff53c8612b2ac1bdcfe5b08490a", @typed={0x8, 0x143, 0x0, 0x0, @pid=r4}]}, @generic="0de5f771ad4e2814a320f9448020a71120e257baa1c11ca9269d673c85759e18d6f980cdc70d6c52db2ada3f4adae614a041490aeeb5952275a34dc83a195e9399f1c93637af5fd109ebeb69eb26932ef136908abf6baedf8117b39c5c498e35bbc2528781fe34d125692b5385e8c0b79dfe6bd9007d442c962fe9e7ae4bbd53eb281c158fd10043"]}, 0xbc}, {&(0x7f0000000380)={0xe0, 0x1b, 0x8, 0xffff, 0x25dfdbff, "", [@nested={0xcd, 0x87, 0x0, 0x1, [@generic="e8b6c9eeaae9276f6aad8bd3cd1379e7c0267abb7df83a6656f569061029b02c1b85fcba117c86713c498be646da8983805c25ba3ff9a62c267ed3154318a2588fa86e35ce878c0ef82e1b4cc131658ba0aaf5c094105174926d86ec5efab964182bb7277b971b2410f02b26f29c351ba16d993623c03ed89e27fcd7816691cc8cb6c7bb0bda77cdaffa830595ae0aace639cea3ac9ddbbf01d0d55d7e0b64edd93351237a38fc915a1bd9ffc17ccdc3f6cdb4582d50b916e0", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xfddf}, @generic, @typed={0x6, 0x142, 0x0, 0x0, @str='.\x00'}]}]}, 0xe0}, {&(0x7f0000000680)={0x444, 0x1d, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x11e, 0x13b, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r5}, @generic="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", @nested={0x4, 0xe2}]}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@empty}, @nested={0x92, 0xfb, 0x0, 0x1, [@generic="b4a35f0a5a20b5b1edbdbaf46deae84e5c83f79de4ae90397dac420eedf1f82526be20c15586b05ab3b64de57f778d94b0533c64b8da2572e5c220b2e99192e1793c62721c43c24dcbda38f33d3b33946019f8b95d05f2f52a3327c3c41db9fe59e065dc1e8fdf684107b24d683058c46493ad4394f76fb2b44d78586c1e9c14560b0bf0934734eb2e0a40c41c40"]}, @nested={0x153, 0x25, 0x0, 0x1, [@generic="6bb97e82bfc66dc2f95918f1eb971e1601c194e1f0674435851686eb12088e7d0c3f0c3fef4a9ea45c3cec18318d58f3e38f22530d11f32929e5179ba6c8716526b31fcbb2ce71a7ed2857f426b4618787f8fb0b87c2d53671f7458f1aa6cdae5536bb3a5f830e7c210ca0f9b5c8df839aae", @generic="ff0bc0abeb78733f7e486c88b650265ce017479f33817fd9a84c7688f0ea6ae2b4e9651e5f372c16b111fcf5c3d674e4a5566931c387184133a649936a242c54062b5833a2ebab675a04a6889b08c057250465b4da29", @generic, @generic="4b8dc6fe4458e1e74973164082ff6ea3043fb337c218b4036513f55dda00e8ac2a4145ae7b7061bb0b8c3a57b1c42caead900460d50dda003f119e584d94f75c7ffedbe0bdcb4a190db447d322b8087518b9c007af9b343a80dafe8d62c19788790cda1e5584a358c096b3cc94632cadf7879dcfcd9abd", @typed={0x8, 0x93, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x143}, @nested={0x4, 0x1f}]}, @nested={0x123, 0xfc, 0x0, 0x1, [@typed={0xcb, 0x7a, 0x0, 0x0, @binary="13f5dd4b446a9023c4ab7801c154abb0202a3fc082568ec832cef332514030c83715f3ea80b6af839f25b0a1e63806deefcc25c7ca84ca8cdbb356fe11bc4c6a6ff1d0edaa52f052513878732d8651155b98fc74805465c73e3d140c25d583358902cbaac9c3b0aee0f20a1f01b9f53fedeb71c76987e974951badb328de5ada91f9a1ca3599e55216a470ab9a8fdddaddbfa985c8374af28056a84262e066d52b02c8914604e920514565e7eabfce1f637abf425b0f70f35a3ee58fd8b7ef2a8347772d96c9c3"}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x6}, @typed={0xb, 0x128, 0x0, 0x0, @str='batadv\x00'}, @generic="94ee35381f79d574b0b2d7869c3da0657213f0fc53d4df9f31bab956f831b4fa12d5f7c13045ab3f4d8cbbcfc4583b", @nested={0x4, 0x66}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r6}]}]}, 0x444}, {&(0x7f0000000c00)={0xec, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xba, 0x11a, 0x0, 0x1, [@generic="8f0613f6f2f30dc7cc3a003ce7690ca5710487c689d44732fd75f8cf77fddc7cc141768bf2c8d51ff14a96c0c02609e1d002d90bde20b9c9c7d69ee6d06ac45ba56ae92d7124a22df60473c474586e33436ad9a09b54c58c26a8072b7eb73d57e2638cd2b55a95dc92bfd2c1ac67f5b4f9d800642325d469909cad936cedee1ef14844a5ae5f21da0103c4396f15c933c5823b6dfd29bfb1a4f2c144be32aaa3c8e8380b4c28425626c5cc7103eef54872fd", @nested={0x4, 0x5e}]}, @typed={0xb, 0x135, 0x0, 0x0, @str='batadv\x00'}, @nested={0x14, 0xfd, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x87}, @nested={0x4, 0xf6}]}]}, 0xec}, {&(0x7f0000000d00)={0x164, 0x3a, 0x100, 0x7, 0x25dfdbfb, "", [@generic="0ab62d50f1367ba535dc50654b21af764faa47938be68ac4499f45af5dfffd3b1606a6860f95e0ec63928b874dc7c374e45c5e5f291a5d956a977eeee85a8f06215b22c4b33195f68fc2bf8e5a422327e9f2714167af75041ba4ca09c54103103816d93ed68f26ee66af9586cde4b152d608b0176408281e63351174b794adfa590c7d7165f044a0ed486eb56cf5dabd5c6c6eeee510245b2d1b0d72f456198f80b5dfc48577c390da80ef88ff3882e2ffe7838f197fb550eb8cf3fb435439", @typed={0x26, 0x124, 0x0, 0x0, @binary="b9623fc8441f73967aac26db02aa899adac000e61d5a210bdc932cba907c4eec3aae"}, @nested={0x10, 0x2f, 0x0, 0x1, [@typed={0x4, 0x109}, @nested={0x4, 0xfe}, @nested={0x4, 0x5d}]}, @generic="48db5fcf9b55c07caa0030a0a60e44df3a89a54347953be57603ea7054521c282562a497bad55166347825e3e94e8879c7f304ba8f05581ea0e92b68fd332f8494f5653b8bc9ec4ae4e03af0e51df648f0b63c4e7c5737a80cf840f2de"]}, 0x164}], 0x5, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r7, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r1, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xd8, 0x20000080}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.066776748s ago: executing program 1 (id=520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000004c0)='ns/time_for_children\x00') r2 = dup(0xffffffffffffffff) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) syz_usb_disconnect(0xffffffffffffffff) 1.313993969s ago: executing program 2 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.203421961s ago: executing program 1 (id=527): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2fd, &(0x7f00000007c0)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 1.179828092s ago: executing program 3 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x5, 0x3, 0x5, r2, 0xfffffff4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fd01000900000000060015000600000014001680100003"], 0x38}}, 0x0) 1.142837522s ago: executing program 2 (id=529): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x4040015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x84, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1.122982932s ago: executing program 0 (id=530): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1.085953143s ago: executing program 2 (id=532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000004c0)=0x7, 0x4) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x7fffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x1, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000002000000070000000300000000800000", @ANYRES32=r0, @ANYBLOB="31000000000000000000000000000000000000009e79f15bc54a1f0e15ffb598008ded6dcb6525034efe1f86b44acc03e004097fcaef874cd7cf676c77c0e1b83aa963484292ac8d8defae276cee53576f78d5ce1333bff488161380ddc13babacdaa6520b55f1124c9131d5ce25c8c2d439e2a136888655d1292fe84dbcf62a2db0bc1bfeee7084e79ffc143bc794486afb947d1f50e23cef5143e98abf88c39d6c4d3ad71d965e0ddca5294e5ce8d5e318c4676747dbf08f5304f787966484edd6e044d307", @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000002000000010000000400000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) memfd_secret(0x0) 1.075347863s ago: executing program 3 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 860.694156ms ago: executing program 2 (id=536): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = syz_open_procfs(0x0, 0x0) getdents(r0, 0xffffffffffffffff, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) 767.453138ms ago: executing program 2 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000004c0)='ns/time_for_children\x00') r2 = dup(0xffffffffffffffff) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) syz_usb_disconnect(0xffffffffffffffff) 569.582541ms ago: executing program 4 (id=538): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003fdc23be3ac055e3395e1e4154b5018ee4faf1d63947527e5babd610a7f53fb38dc8db3637e5c34affcffffffffffffffbfed2546ffa7a51528108678bc6028"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x372, &(0x7f0000000500)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000ad000000ad00000002000000040000000200000f3d5be655d4d48bd403000000010000007f00000001000000010000000000020000020000c04e19080000000000001102000000050000000b0000000110000f01000000020000000700000006000000c30e0000000000001102000000030000000d0000000500000604000000000002000000c8060000050000000700000010000000050000000900000001000000060000000100000f010000000500000008000000000000004000"/210], 0x0, 0xca, 0x0, 0x0, 0x80000000, 0x10000}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000060000000000050000000800090002000000180001801400020073697430000000000000000000000000050007"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) fadvise64(r5, 0x0, 0x0, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'macvtap0\x00'}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000200)="4efbb4b758df0038fd0773cf821d9322201edd58dddc983f45425090d4df681498ae269c8978125a5cf2cb8fda2a56a1f55551c60bcfd564e937d2cffc37f4f7b9d66c91ff18de95d37ba880d4dd4fd648ecfe06be7e1ec5bb7cc8e23e2cdb0bf26f0e09bc4d0dbd70c3fa54c7efe6890850e2162de08a26df61b309d2ef6a06eeffb953ba1c84d8ead6c96f4d7e31f5063ec5afee627e87d7a69e87cc9e855a72", 0xa1}, {&(0x7f0000000880)="59b7ac6833e5f66060e044bbc343e2ec63c668c369437b42c00eb244079e16ddbee52a2aec79f45963681050e1b15236d86d36d8e6058e170a41934b24bf729fd3af4a16cd12c5c786a6e4d2f76dc09bd727076beae47368b33a6e8650a1c4e4c471b56f356e71602666e765b09ec022e9f94f55d22777694ab309def960be2868fc3fb14ef7c44ebd", 0x89}, {&(0x7f0000000480)="cf54cabd4727a7934f6074ad46", 0xd}, {&(0x7f0000000940)="9bdaf006c7e61f1f1be59bfa9ecc91fd4deb1ac42e6d0daae94777b70d55e5f07ed6f4402b0eccacae75a2134d3d7f8e732472080ce91a", 0x37}, {&(0x7f0000000980)="0b771881175dcee9314d7924feee800098b68fe627019830acb27284daac583bc98c84e789126ddad95b33f48ca54507104c81f50a27e6941baf25dc04cfb00617104ec2", 0x44}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="101000000000000001000000090000000c4814f5744928e506602afe21cadf3563a19ffb44df567a1b9e513cd2569299c2b2354a734fefbb66d1abe31844e7975fd5ec3e252284f88e9ffcedf754bfa639c9494e6c71bbf6a15af359f19145a1d4c96ebd52a3d7bd81d45a87111feef2c76191b8e2ae3d538c93502352df6768e0d496bc9f35a763f3cbec6ab27ceca0039015c1fe3efefcf274c378238a5ca4755e9d6de0f801a373a32ea60ab15c17fad4a078060e5b2ed21cc44e11eefe0577f2b551173d9ac0fc811e4376beb5d3e5a26e220db220af3d1d4e89e82652d095ed84dee0d705c2abcb5019ae2700bc9d6ad3bed2fe6ce197da51b947210de94f795c00fd97f59dd8fc339a7492aa5adf00354b33ee81bded8177102461c92f99fbb31ae473037b9f22e402e8f8944f83e2d3940282a406687d1cd91479f5196561388fbde78979151e7d1416fe3b47f73f19a8016905715b5508c0563bd00267487c8e560b8799b586851e466a869e053ddabf9e04f60e95ee0b336d16ad05fc09f5dcdda220dc273cdd67f165a42eee87b969b40df6423a1bd3585497ef54543efe9c129f03e3c1632932ad92fbbdcadc46031d7fb9248c6df284783129c662adde7e7167cd8497cf5c769c08b34dc372fdc3216b0857082429b293d63262197ef1a5bde7a22676243c6ea5cec14d6f617f812bccf2c9f019d8fa03f69eb7c9f350c33ca9f3ad0ca6a6fd68bcc420378df8eb74210afdaac216ff84b89d2273601792191c20cf361280659025fa7fbf7f22b4b31520b5ee24fd905a24c121d36b6ce502dd5b00395c09c21e1b8a429b5a6b5f755103389ff1224dc41d164c96b96ab747a82aa65e459909d57c01dc4a7b3df0d77ef18ef9df84a6e926a0ea3fa4391e9ff57e11ace72bdd8affaf70b83254682bcc5e87aed220f5acd9fc0303dbc5df8c390585e23708caad143e291e9d8c6b0dcd96a43db4bd1bc4f234d087399998a6f53c3af9e7f403a36624f128f365c12dafba5a17e8f3af55047093225a2e9df9c8cffb23f58edc2e7f7736f22f3fefe4bce3949a3a9c60f8017337ac0cce5f7a2d6f656d1fbfe3ac5f0d988c696b56d297d7c6c9d0f5b8ec67c23b12edde10280ee1067ec8068dbd398b83c4e182244539cb5ded859c698ce3f5906d435e038cb9d7cb803e3eacb75ae05f8ca7293ee46ebef3da8b1651e32c05d9bcf85b68f66aefdb35d28c97df6f78f54ccc049da5c9661828d555be6b9eac9ad8fe962164dafa91b0dde16d9e7d7524cc12383ba044fce68ec8c03f57801914d1f0c11150b44673a62be636f4e720f3431d83c74891ab60daebf85e057d16a5719a2be37795664b2bc3d303864a91390d62f9389d9c03d228041a6219506c21fa1dcf42634e8ce197f550e414fa325f1adbc3e3aaef0b0916f64de3731ed4cb74f1cc528ee79fa5f8c46d49f3f4bf3d14f20fecde3352fcd360a33815d6256f466ae8ddbd9f1b6f95264792c19fb585ad10b0007c3065ea2aa87b9964f09ca501b686400be86042812af341374e3164f1ecc589cf7e83c8e4593941a25612aa52dc6a65e7d81ccb9981887e0ea84c3d66b5e4d08900689a9e4bd210507d91eb55645f1eb9c6989d2aa93be6e3651e6b1afab24a378490e8b5ae6e3c92609f498f38f83a18fb443643988adf5be1c2b56f3d50376353ede565c979aa530a33b7adadd5cb6f733809a674f4cedb075a6121af8b03616823602ab069bc2a2634d1dd4680992d1baeafba54e2a562c9c024534e85fb0fc2d63ab4b7eafcbd10fe363be0ba501caf74ed411fc1fbf7b148f369015cda1f258cdd5ab5df313c27c44677ad8bb6e11b6d4be3c864469f3ac74d63ab2c168c78fa335888d59c963133d7dfdcaea9c94b2c88dfb984a919db268fd541a66bfcef7dfb7c1e8bec43aa86de71c04c3fb73fe4f0e7a43de6a0b0ef9f14be323dfdbf9ee69c8f3975e6d1e45f2a45c50cde6b07e763a4d98f4adc0056ccd888a55885238522c712c7cad8f58baf78fd3e030e501126f35a269672bf2bf0b976dca9d7ef1fc159ea6e0b61bb7fadcaa646a1532f22b8f1605819cbff7f84b14b7b94d68b60defb325f6d87a2325fb7d1efdd5cf9d43d0b1e083a9f4b01e3168221dd2a023d787b9339257bdd92151460d6af55357c669aeedee4de044154bea703e2c7104ed9397ec7790e57b98d95e4d46f8670b8a02db9657bce61d1a871e62953e4ee964ffe2a7e960c5bc16b32ee9065185a9228a96dea96c8914db3a3bf5898d454437f2c9cf7c8eea79a80a29334529b9576bfe9687ee002e89ad081ad2b72093bb7508add53bcc620350afc9cf0dd192f330ce321fa149b569170db45423d4455328fde3e3d7fe682020d5318948db8c8a5b016084916fb3de7787402cdbc86d6346a6034fd7ca91d12075b1f5eb4c5a289a14ad8f817589e2135919a304709edcd6e8a01b0d6abb654e3e3d005412c73b6091ae215c58bf3bc2d120108746e44af82ac47b068d9e9db39dc519b1d216046d6035aee1ae8314cd0654bc3299c3b9b46df4541e81795b1ef298a17761ad0b6c3cd0759ced36f78691898463c92e79a690aeae38cb09f3f17290a14440194a8ea31a38c475730af10f12dfd523b530e4913a52afb94ffcd2d6df4dc070dc29663402893a910e1119cdd7cb35ade79f02b9f1ba4a6a44960485c378e47e0541f7fb4d07d8d831483e136132869d74c87bce27fb72c4772366e1e850f8d6acd35eb13885718a6755744b3be14840bb344c43b024bf49cd9afa7c5b4ba0ca177bed9a846d5ad6c4831d13a991c1e53ab3e18dabfbec9fbb8c967fb9e799b4ff05072471a4c8cd702832c6c89288b65b2967d1ce2aceebb17a2352b500517c47f6ba2ddd2de232804da94b0b8fa720c41219fc072664fd568de1776abed1658bff38ca6375f0de8971a633aa41eed027bafb2f52d75e07106cf303a0876a2366725a687122483d8b18355994ae73e473e0d237e6bc90825ea45c470c7dd5388b8b9a937f18a09ffd6538cd571d6a4185c9bcfe107a1a200c96ea680b1eb3aca97191ee50596720775f2d12e858b733577a41daa336789e9457fb6cfc67841c36a743029cd1680be9525da2e761ee3e2ae4c62870b5045c040f6fad8e811b01a81732e2cb9e24edc36aa3054f027c34858c848b6fb039ccda1522e6d2b76364d86b82239d5d359208d28a5ad3ddcbdf181802eb08499320ed90fd7450117e1530b62ac8666f8a82ba38f1738f80d8bedf9eacbd7da4f87403b0c36b40f6dc01595e26c78b989beeef79d70b2a6f3f704262d7d8e570d0bc33c7bfd3340e54b61b885ca940bf300d42d33e131427ce5e6e5e9d1ee387bfd6cb3eb5fa73568099e8d14107e6c85b23971baaa1033f07a8e23fe98ee79daa29fb1c57c16ece7f175ce1f69d73ad674117932873fc7ee7e2164002308c9914712478d1bdc42ca8c08de61d5c1377abfb9985570e3cd19b494d2b387d654c8ab7f8bc393ce0b7e2ba678118d8a1bb46026d1ddd3768b42f0290aad1249d16086973d7e0668e338071767d87d19338986b05182894196944e82d5439aa1f1021acc57fb472abcca468b266d93b6079d3fa8661ec2955986229498cf9daed25a9482db4a55cbf205af02acd29212ad88bbd0710c46cfd02dc06c54adbd2b36838476b85f980f2b4242e854987497dae4e40d4769e8875ccb4bfef736a1ac41f9ae1776635e32365941645287c7a3cc5ca40247479b18a1a7744bc02dd582e4bc5b1a18893056fd4a493981b0a5d04d86c23ab914002034daea6c248015974c1b477ae1a96d90b66924e5460a88362d4c69f9959c2766c48011cb1501e0408b3f9fa9ff5cc638c120a16c4d7beb79615ec881d3179804a4af97874248f2942bbdb52a95785e8562c50c8743289318e04468fc890eac8cf3576d7ebc8583b081bd72cb3007514fb9d858b8f7066d68b772c1aff2312abe48a0acf5d788f59e074d5d809e60f6aaa70aa0a408c6fb57912037cb2c0b9f46f2b54d08cbf4898e1549565c239f7a7145077a472476e793ff90a4119f5d0cd5ece933c4688348f8310df3be1d1eaeea9e3d1e5661a3bd07a4e92551a78d9c5740c2473a4e1d5fa1f2549ddf0e7dfbab8562bd0a2d2ca58e0ba3ab52b7893cd64af54e7066ff3ffdde584affb6b7484106803ba2f1ee15208a4def75aec2dbaf0d9b5009cf17f8c0b22ab91de4f4435ccece1f9fe026804cc63d791164aa6cfa293caec56be669655403fd79474f2e84ec952465a6ac202d6b9fcf2f5d1db82573e0e7708767315ca92856af89a5ebee567f604be09147ba2a41770a21a1eb1f686e6c2a6c7fddc13063f24d728500353d744625066513105267732f5e71d781ec9734aa521b10ccb717b874493373837efacdb4e0480ebc179cfaa7dface110069389508abf17d995195dfb0de688c8a032745a31fb3a509571b559dcdfb40870c0d2b625ff528f62396c009cfc598e5cefc5f30ce1300c29ae250eec544cccd846ce1138b0e79a828fa08de7f4d5e1b8ea58dc11901963b24f9967198cdda308db9619e1c36591689e3ea50c517f32d9939b5619396566d90df512094e00a29196bbc51c562d0065800ce5034319dfccb5a864092157919a94016a447276307511b6b7eb173db68e4870635fd60248e6bc436c48b21ab0d8caad6e8e97c62d7b0f9e5ea91321eb4cb00baf6f684b754dc0d2d2fac9eb7666e7d9ad3f0adabaa557f83e20f8e4c5640b8aa4e4d4fb886df8f93ece089109a7bcf73947f81f77d3e533f0101f134183f6c067dbec79893964f8907a8a682aaf31fb9be95e4c8056f827cf4c57c94f2d38a5d0684c284ce3269a419df3f253bad28a5b121065db7d2156e3af9904990c3c424c44a9f790e8957045567f0b48ae66c691d3538ef387a07d576db5a2b9c1be2585514c50462751d4c827d48183b01788dce32ba7e0d6969a40403f8a0cf4756435d551884fbff038ae1ab9363b7d602c9248c04e460c7244b407b5740e1bd66b4b5f93e3dc2fb40e950f3617f36ed68976e39a79f437fbdccdba3827c973b47aba0adea1964574d05089633106e0900cda7e8e072b9bcd0d980f73da4f21d3e202e9eecf46a10fbc4d411d712b159290763a093aa2348d2665de9d37ef2660e16a1a2e69a7df0542dd1966cf9de66ee516e73b37591b801e22d1f19489cb9a5064095588b80033ba57323ea43cd52d6de245af722eb1f636eda9112350c5925477f346bbb7f68dee0efb670d4ecd80c0c146125ed8d8f75288e15027eaf49077cc255da318b29f791371cab1b0a04987c5b7c6a7814261a26939dc2e5e62641ff89db6e2cddf2925fc79ac3f27094d03c1249a459430f0fd625c3fc82290ca2d04d917d20631644f56452119265eb43e84d73d37ebb8c6ceef5875c87f92ac7b96c862cd5287d352f6061f9e00d668c684080a80322c003aeda7b6649687ec75101e976ed4e1443217ba670575e4223d26755f1f455758c6a8647ed4ff7385f5ef4c3d52205e78fa6e17f94e10b9d4ce6f02e15ce5b67e63ebf13a521b4df21e547f32b1851aee5318ecbc67fb71a547906ee4102e0ff872da50170409485fd252b64038df27ab3505f53a1bca0cbccc9b7012be8e9c297efe2e0fa990448de79badbf9c983cd187cc12497ad61cef2b602a71defa11da6ec66a3b1adee8451af012df128ba8dca33f5d2b2fe831ecc03109029160ef360cd5967e464c644c99486a1c2a2e2aa13553e267877789575b0158670a59a6afbcbd0be7dbdae583f0000000000000000701000000000100f878971b895fc17043a4e922139335912b92763b9d9bd59059402365ae54a7ddf2e2f7b37fbed16cde7a4725f839cc2f76204c4f6d9cba583c4ffa66edd6de7c7242d6fdfbd989c531891c3b46b5a73fc2c1c4348ed94ea377a15987ceec4f224132ab5acc9ce2875e4c532886628bc70c88ce53a7317e3d2ab13dcc46b3f7c243199bd8d50d5bf0e36d6d4d1013a32d29412bed26e6cad9b99e93de069765fdac90fe29a4ced7e519b7195af358bda6d346716c5434b6b329de2ecb32a1050e78ef0c56285f9f840ec482dfc94c51807cf47b85"], 0x1100}}], 0x1, 0x8001) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0000ee000a0002"], 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 520.042511ms ago: executing program 0 (id=539): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000004c0)=0x7, 0x4) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x7fffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x1, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000002000000070000000300000000800000", @ANYRES32=r0, @ANYBLOB="31000000000000000000000000000000000000009e79f15bc54a1f0e15ffb598008ded6dcb6525034efe1f86b44acc03e004097fcaef874cd7cf676c77c0e1b83aa963484292ac8d8defae276cee53576f78d5ce1333bff488161380ddc13babacdaa6520b55f1124c9131d5ce25c8c2d439e2a136888655d1292fe84dbcf62a2db0bc1bfeee7084e79ffc143bc794486afb947d1f50e23cef5143e98abf88c39d6c4d3ad71d965e0ddca5294e5ce8d5e318c4676747dbf08f5304f787966484edd6e044d307283f1a", @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000002000000010000000400000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) memfd_secret(0x0) 501.145871ms ago: executing program 3 (id=540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 326.697814ms ago: executing program 0 (id=541): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2fd, &(0x7f00000007c0)="$eJzs3E1rE0EYwPEnL02TlDY9iKIgHfSil6WNnrVBWhADltqIVRC2dqMha1KyIRIR682r+CE8lB57K2i/QC/eFMSLt14ED/YgRpLsNk2yfctrbf8/KDvdmWfnme62PBOabD149zydtLSknhdvUIlHRGRbZFS84vDYR2+lHZDd3sjVoV9fLt6bf3gnFo9PzSo1HZu7FlVKjYx9fPEqZA9bH5TN0cdbP6M/Ns9unt/6O/csZamUpTLZvNLVQvZ7Xl8wDbWYstKaUjOmoVuGSmUsI1ftz1b7k2Z2aamo9MzicHgpZ1iW0jNFlTaKKp9V+VxR+Z7qqYzSNE0NhwUHSazMzuqxFoOfdDgZdEkuF9N9IhJq6kms9CUhAADQV431v1dUJ+v/1Usb+aH7ayN2/b8ecKv/r3+tXquu/g+KiGv978zvWv/rR6v/myui06Wt+h/Hw1ig6ZSn1ix35mJ62P79rfY+Wh2vtKj/AQAAAAAAAAAAAAAAAAAAAAD4H2yXSpFSqRRxjs7XoIgERcT53iXUJyI3+5AyOqiN+48ToPbGPf+IiPm2kCgkqkd7wIaImGLIuETkT+V5sJXbzjuPVNmofDKX7fjlQsJX6YklJVWJn5DIgDTGl0rTt+NTE6qqPn5AwuVH0ImPSkTOyLzfJT7aFD+4XEgE5MrlXfNrEpHPwW9ZMWWxkkct/vWEUrfuxhvmD1XGAQAAAABwEmhqh+v+XdP26q/G7+yvG18f8NX21+Ou+3u/XPD3d+0AAAAAAJwWVvFlWjdNI7dPIyQHj2m94e/SlZ0VHjbK+V+G7q10n4YzeV1X0D7Z+pW9zXdZ7I+HbTNnrxxqsKc++bHyalS7PzHnZaO9xsjMZO/uYF0a595/+N25KW6sBQ9YaesN3/4PwEBP/vgAAAAA6Kla0e+cmTxKuLcrSQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMr04mPS+r1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Lj4FwAA//+gdv7y") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 302.658425ms ago: executing program 4 (id=542): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x4040015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x84, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 271.983746ms ago: executing program 1 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000d40)=[{r2}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0xf, @void}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 227.021266ms ago: executing program 0 (id=544): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4040015) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 224.618266ms ago: executing program 4 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 178.263427ms ago: executing program 4 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv2(r1, &(0x7f0000001400)=[{&(0x7f0000001140)=""/216, 0xd8}], 0x1, 0x7, 0xceb0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 138.212447ms ago: executing program 4 (id=547): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents(r0, 0xffffffffffffffff, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) 123.879497ms ago: executing program 1 (id=548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xfdef) 105.478238ms ago: executing program 4 (id=549): pipe(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) 29.228439ms ago: executing program 2 (id=550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 0s ago: executing program 0 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") kernel console output (not intermixed with test programs): d { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.417012][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.431530][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.438788][ T3475] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 40.446860][ T3475] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.458153][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.471657][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.494370][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.503308][ T3311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.512121][ T3311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.521466][ T3311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.548719][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.558126][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.566896][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.575820][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.691615][ T3493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.895085][ T3506] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 40.902750][ T3506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9'. [ 41.362657][ T3532] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 41.433977][ T3534] loop0: detected capacity change from 0 to 1024 [ 41.445683][ T3534] EXT4-fs: Ignoring removed orlov option [ 41.484189][ T3536] loop1: detected capacity change from 0 to 512 [ 41.495722][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.512027][ T3536] ======================================================= [ 41.512027][ T3536] WARNING: The mand mount option has been deprecated and [ 41.512027][ T3536] and is ignored by this kernel. Remove the mand [ 41.512027][ T3536] option from the mount to silence this warning. [ 41.512027][ T3536] ======================================================= [ 41.567882][ T3536] EXT4-fs: Ignoring removed orlov option [ 41.572012][ T3543] Zero length message leads to an empty skb [ 41.592173][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.601807][ T3536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.624712][ T3545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21'. [ 41.646228][ T3536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.655350][ T3536] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.18: bg 0: block 248: padding at end of block bitmap is not set [ 41.672598][ T3536] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.18: Failed to acquire dquot type 1 [ 41.687432][ T3536] EXT4-fs (loop1): 1 truncate cleaned up [ 41.700412][ T3536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.765940][ T3536] syz.1.18 (3536) used greatest stack depth: 9304 bytes left [ 41.839472][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.930214][ T3565] loop1: detected capacity change from 0 to 512 [ 41.941701][ T3565] EXT4-fs: Ignoring removed orlov option [ 41.960395][ T3565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.962539][ T3564] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 41.988019][ T3565] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.026966][ T3569] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.062127][ T3565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.28: bg 0: block 248: padding at end of block bitmap is not set [ 42.081506][ T3569] wg2: entered promiscuous mode [ 42.086483][ T3569] wg2: entered allmulticast mode [ 42.097789][ T3571] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 42.112792][ T3565] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.28: Failed to acquire dquot type 1 [ 42.126490][ T3565] EXT4-fs (loop1): 1 truncate cleaned up [ 42.133118][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.146919][ T3565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.213117][ T3577] loop3: detected capacity change from 0 to 512 [ 42.223668][ T3577] EXT4-fs: Ignoring removed orlov option [ 42.239373][ T3578] loop4: detected capacity change from 0 to 512 [ 42.256046][ T3577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.280344][ T3578] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.286830][ T3578] EXT4-fs: Ignoring removed bh option [ 42.307185][ T3578] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.320472][ T3578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.330342][ T3578] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 42.344143][ T3577] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.371140][ T3577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.33: bg 0: block 248: padding at end of block bitmap is not set [ 42.388737][ T3577] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.33: Failed to acquire dquot type 1 [ 42.401947][ T3581] netlink: 'syz.2.34': attribute type 29 has an invalid length. [ 42.409738][ T3581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 42.537593][ T3577] EXT4-fs (loop3): 1 truncate cleaned up [ 42.546580][ T3577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.585669][ T3577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.842681][ T3591] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.854524][ T3581] loop2: detected capacity change from 0 to 8192 [ 42.896964][ T3581] vfat: Unknown parameter 'xœìÜÏ‹eðÇmkëÖý¡Öj Ò½èeèîÁ‹‚' [ 42.915921][ T3593] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 43.127628][ T3595] loop3: detected capacity change from 0 to 512 [ 43.165022][ T3597] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 43.180703][ T3595] EXT4-fs: Ignoring removed orlov option [ 43.224084][ T3595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.263237][ T3595] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.296578][ T3595] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37: bg 0: block 248: padding at end of block bitmap is not set [ 43.334139][ T3603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40'. [ 43.367037][ T3595] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.37: Failed to acquire dquot type 1 [ 43.427305][ T3607] loop2: detected capacity change from 0 to 512 [ 43.442236][ T3595] EXT4-fs (loop3): 1 truncate cleaned up [ 43.471448][ T3595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.500430][ T3609] loop4: detected capacity change from 0 to 512 [ 43.510727][ T3607] EXT4-fs: Ignoring removed orlov option [ 43.540591][ T3595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.550281][ T3609] EXT4-fs: Ignoring removed orlov option [ 43.561980][ T3607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.596246][ T3609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.630507][ T3607] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.660462][ T3609] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.676821][ T3607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.42: bg 0: block 248: padding at end of block bitmap is not set [ 43.702448][ T3609] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.43: bg 0: block 248: padding at end of block bitmap is not set [ 43.740274][ T3607] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.42: Failed to acquire dquot type 1 [ 43.772242][ T3609] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.43: Failed to acquire dquot type 1 [ 43.784779][ T3615] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 43.792411][ T3615] netlink: 224 bytes leftover after parsing attributes in process `syz.3.45'. [ 43.826063][ T3607] EXT4-fs (loop2): 1 truncate cleaned up [ 43.833817][ T3609] EXT4-fs (loop4): 1 truncate cleaned up [ 43.850933][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.867431][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.915521][ T3609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.945704][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.170434][ T3630] loop2: detected capacity change from 0 to 256 [ 44.185401][ T3630] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.201035][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.210030][ T3631] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 44.225620][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.519918][ T3641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.54'. [ 44.644636][ T3647] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 44.659134][ T3647] loop2: detected capacity change from 0 to 512 [ 44.681229][ T3647] EXT4-fs (loop2): 1 orphan inode deleted [ 44.687465][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.700319][ T1811] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 44.701217][ T3647] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.742134][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.895791][ T3659] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 44.913013][ T3659] loop1: detected capacity change from 0 to 512 [ 44.931694][ T3659] EXT4-fs (loop1): 1 orphan inode deleted [ 44.939049][ T3659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.956062][ T3664] loop0: detected capacity change from 0 to 128 [ 44.962566][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 44.975205][ T3659] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.994309][ T29] kauditd_printk_skb: 804 callbacks suppressed [ 44.994346][ T29] audit: type=1326 audit(1751050490.557:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d25ad290 code=0x7ffc0000 [ 45.023928][ T29] audit: type=1326 audit(1751050490.557:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f45d25ad677 code=0x7ffc0000 [ 45.046825][ T29] audit: type=1326 audit(1751050490.557:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d25ad290 code=0x7ffc0000 [ 45.080735][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.108630][ T29] audit: type=1326 audit(1751050490.557:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.132064][ T29] audit: type=1326 audit(1751050490.567:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.155346][ T29] audit: type=1326 audit(1751050490.567:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.178282][ T29] audit: type=1326 audit(1751050490.567:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.187800][ T3670] loop3: detected capacity change from 0 to 128 [ 45.201519][ T29] audit: type=1326 audit(1751050490.567:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.201555][ T29] audit: type=1326 audit(1751050490.567:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.254816][ T29] audit: type=1326 audit(1751050490.567:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 45.329421][ T3677] process 'syz.1.64' launched './file1' with NULL argv: empty string added [ 45.350846][ T3675] loop2: detected capacity change from 0 to 512 [ 45.356722][ T3672] syz.0.61: attempt to access beyond end of device [ 45.356722][ T3672] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 45.380713][ T3677] unsupported nla_type 52263 [ 45.385751][ T3675] EXT4-fs: Ignoring removed orlov option [ 45.415667][ T3675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.466864][ T3672] syz.0.61: attempt to access beyond end of device [ 45.466864][ T3672] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 45.467464][ T3684] loop4: detected capacity change from 0 to 128 [ 45.480466][ T3672] syz.0.61: attempt to access beyond end of device [ 45.480466][ T3672] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 45.500189][ T3672] syz.0.61: attempt to access beyond end of device [ 45.500189][ T3672] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 45.500784][ T3675] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.513753][ T3672] syz.0.61: attempt to access beyond end of device [ 45.513753][ T3672] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 45.534135][ T3672] syz.0.61: attempt to access beyond end of device [ 45.534135][ T3672] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 45.547501][ T3672] syz.0.61: attempt to access beyond end of device [ 45.547501][ T3672] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 45.560978][ T3672] syz.0.61: attempt to access beyond end of device [ 45.560978][ T3672] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 45.574397][ T3672] syz.0.61: attempt to access beyond end of device [ 45.574397][ T3672] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 45.587912][ T3672] syz.0.61: attempt to access beyond end of device [ 45.587912][ T3672] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 45.605845][ T3675] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.65: bg 0: block 248: padding at end of block bitmap is not set [ 45.631727][ T3675] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.65: Failed to acquire dquot type 1 [ 45.680045][ T3675] EXT4-fs (loop2): 1 truncate cleaned up [ 45.698815][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.742430][ T3675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.756648][ T3692] loop1: detected capacity change from 0 to 512 [ 45.780650][ T3692] EXT4-fs: Ignoring removed orlov option [ 45.824243][ T3692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.858934][ T3692] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.898700][ T3692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.71: bg 0: block 248: padding at end of block bitmap is not set [ 45.918384][ T3694] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.953842][ T3699] netlink: 'syz.2.73': attribute type 13 has an invalid length. [ 46.019820][ T3692] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.71: Failed to acquire dquot type 1 [ 46.047829][ T3700] loop2: detected capacity change from 0 to 1024 [ 46.067684][ T3692] EXT4-fs (loop1): 1 truncate cleaned up [ 46.098937][ T3692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.128347][ T3692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.272336][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.279622][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.341552][ T3700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.510904][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.544463][ T3712] SELinux: syz.0.77 (3712) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.555652][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.572743][ T3707] loop1: detected capacity change from 0 to 8192 [ 46.636653][ T3699] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.646249][ T3699] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.655369][ T3699] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.664506][ T3699] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.744418][ T3722] loop0: detected capacity change from 0 to 512 [ 46.764171][ T3722] EXT4-fs: Ignoring removed orlov option [ 46.772101][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.785697][ T3722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.792638][ T3724] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.795207][ T3722] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.809902][ T3722] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.82: bg 0: block 248: padding at end of block bitmap is not set [ 46.824490][ T3722] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.82: Failed to acquire dquot type 1 [ 46.837442][ T3722] EXT4-fs (loop0): 1 truncate cleaned up [ 46.844088][ T3722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.867588][ T3722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.890208][ T3724] wg2: entered promiscuous mode [ 46.895231][ T3724] wg2: entered allmulticast mode [ 47.021790][ T3737] syz.3.88: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 47.036340][ T3737] CPU: 0 UID: 0 PID: 3737 Comm: syz.3.88 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 47.036419][ T3737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.036436][ T3737] Call Trace: [ 47.036442][ T3737] [ 47.036448][ T3737] __dump_stack+0x1d/0x30 [ 47.036473][ T3737] dump_stack_lvl+0xe8/0x140 [ 47.036492][ T3737] dump_stack+0x15/0x1b [ 47.036550][ T3737] warn_alloc+0x12b/0x1a0 [ 47.036600][ T3737] __vmalloc_node_range_noprof+0x9c/0xe00 [ 47.036641][ T3737] ? __futex_wait+0x1ff/0x260 [ 47.036702][ T3737] ? __pfx_futex_wake_mark+0x10/0x10 [ 47.036768][ T3737] ? __rcu_read_unlock+0x4f/0x70 [ 47.036797][ T3737] ? avc_has_perm_noaudit+0x1b1/0x200 [ 47.036833][ T3737] ? should_fail_ex+0x30/0x280 [ 47.036872][ T3737] ? xskq_create+0x36/0xe0 [ 47.036952][ T3737] vmalloc_user_noprof+0x7d/0xb0 [ 47.036987][ T3737] ? xskq_create+0x80/0xe0 [ 47.037016][ T3737] xskq_create+0x80/0xe0 [ 47.037072][ T3737] xsk_init_queue+0x95/0xf0 [ 47.037100][ T3737] xsk_setsockopt+0x35c/0x510 [ 47.037141][ T3737] ? __pfx_xsk_setsockopt+0x10/0x10 [ 47.037161][ T3737] __sys_setsockopt+0x181/0x200 [ 47.037218][ T3737] __x64_sys_setsockopt+0x64/0x80 [ 47.037318][ T3737] x64_sys_call+0x2bd5/0x2fb0 [ 47.037345][ T3737] do_syscall_64+0xd2/0x200 [ 47.037421][ T3737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.037456][ T3737] ? clear_bhb_loop+0x40/0x90 [ 47.037485][ T3737] ? clear_bhb_loop+0x40/0x90 [ 47.037521][ T3737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.037580][ T3737] RIP: 0033:0x7f81274ce929 [ 47.037644][ T3737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.037666][ T3737] RSP: 002b:00007f8125b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 47.037690][ T3737] RAX: ffffffffffffffda RBX: 00007f81276f5fa0 RCX: 00007f81274ce929 [ 47.037705][ T3737] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 47.037717][ T3737] RBP: 00007f8127550b39 R08: 0000000000000004 R09: 0000000000000000 [ 47.037728][ T3737] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.037739][ T3737] R13: 0000000000000000 R14: 00007f81276f5fa0 R15: 00007ffc5dfa1f78 [ 47.037772][ T3737] [ 47.265742][ T3737] Mem-Info: [ 47.269159][ T3737] active_anon:5655 inactive_anon:0 isolated_anon:0 [ 47.269159][ T3737] active_file:6117 inactive_file:2195 isolated_file:0 [ 47.269159][ T3737] unevictable:0 dirty:1549 writeback:0 [ 47.269159][ T3737] slab_reclaimable:2904 slab_unreclaimable:30025 [ 47.269159][ T3737] mapped:29349 shmem:186 pagetables:1092 [ 47.269159][ T3737] sec_pagetables:0 bounce:0 [ 47.269159][ T3737] kernel_misc_reclaimable:0 [ 47.269159][ T3737] free:1892883 free_pcp:6083 free_cma:0 [ 47.315883][ T3737] Node 0 active_anon:22620kB inactive_anon:0kB active_file:24468kB inactive_file:8780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117396kB dirty:6196kB writeback:0kB shmem:744kB writeback_tmp:0kB kernel_stack:3248kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 47.345048][ T3737] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 47.373952][ T3737] lowmem_reserve[]: 0 2882 7860 7860 [ 47.379353][ T3737] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 47.410329][ T3737] lowmem_reserve[]: 0 0 4978 4978 [ 47.415478][ T3737] Node 0 Normal free:4608344kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22852kB inactive_anon:0kB active_file:24468kB inactive_file:8780kB unevictable:0kB writepending:6196kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:20528kB local_pcp:2992kB free_cma:0kB [ 47.438496][ T3739] loop1: detected capacity change from 0 to 512 [ 47.447822][ T3737] lowmem_reserve[]: 0 0 0 0 [ 47.458839][ T3737] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 47.471046][ T3739] EXT4-fs: Ignoring removed orlov option [ 47.471906][ T3737] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 47.494090][ T3737] Node 0 Normal: 536*4kB (UME) 162*8kB (UME) 45*16kB (UME) 42*32kB (UME) 38*64kB (UME) 32*128kB (UME) 22*256kB (UME) 15*512kB (UME) 5*1024kB (UM) 3*2048kB (UE) 1116*4096kB (M) = 4607744kB [ 47.513568][ T3737] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 47.516160][ T3739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.523473][ T3737] 8552 total pagecache pages [ 47.523487][ T3737] 0 pages in swap cache [ 47.523495][ T3737] Free swap = 124996kB [ 47.523503][ T3737] Total swap = 124996kB [ 47.523512][ T3737] 2097051 pages RAM [ 47.541564][ T3739] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.545105][ T3737] 0 pages HighMem/MovableOnly [ 47.545116][ T3737] 80812 pages reserved [ 47.581557][ T3739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.89: bg 0: block 248: padding at end of block bitmap is not set [ 47.607570][ T3739] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.89: Failed to acquire dquot type 1 [ 47.639528][ T3739] EXT4-fs (loop1): 1 truncate cleaned up [ 47.645893][ T3739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.664274][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.849428][ T3760] loop0: detected capacity change from 0 to 512 [ 47.867349][ T3758] loop2: detected capacity change from 0 to 512 [ 47.876450][ T3758] EXT4-fs: Ignoring removed orlov option [ 47.888264][ T3760] EXT4-fs: Ignoring removed orlov option [ 47.905495][ T3760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.916232][ T3750] loop4: detected capacity change from 0 to 32768 [ 47.937270][ T3758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.952098][ T3762] loop1: detected capacity change from 0 to 512 [ 47.962555][ T3760] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.971168][ T3760] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.96: bg 0: block 248: padding at end of block bitmap is not set [ 47.987391][ T3539] loop4: p1 p2 p3 < > [ 47.998516][ T3762] EXT4-fs: Ignoring removed orlov option [ 48.004493][ T3539] loop4: p1 size 242222080 extends beyond EOD, truncated [ 48.010801][ T3758] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.021327][ T3762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.031914][ T3762] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.038610][ T3539] loop4: p2 start 4294967295 is beyond EOD, truncated [ 48.049826][ T3760] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.96: Failed to acquire dquot type 1 [ 48.061059][ T3762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.97: bg 0: block 248: padding at end of block bitmap is not set [ 48.067854][ T3758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.95: bg 0: block 248: padding at end of block bitmap is not set [ 48.092543][ T3760] EXT4-fs (loop0): 1 truncate cleaned up [ 48.100545][ T3750] loop4: p1 p2 p3 < > [ 48.104807][ T3750] loop4: p1 size 242222080 extends beyond EOD, truncated [ 48.112385][ T3758] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.95: Failed to acquire dquot type 1 [ 48.123989][ T3762] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.97: Failed to acquire dquot type 1 [ 48.124434][ T3750] loop4: p2 start 4294967295 is beyond EOD, truncated [ 48.144355][ T3760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.160272][ T3762] EXT4-fs (loop1): 1 truncate cleaned up [ 48.168619][ T3758] EXT4-fs (loop2): 1 truncate cleaned up [ 48.183776][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.197174][ T3758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.216572][ T3758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.226535][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.237383][ T3762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.330230][ T3776] FAULT_INJECTION: forcing a failure. [ 48.330230][ T3776] name failslab, interval 1, probability 0, space 0, times 1 [ 48.343181][ T3776] CPU: 0 UID: 0 PID: 3776 Comm: syz.3.101 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 48.343278][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.343292][ T3776] Call Trace: [ 48.343376][ T3776] [ 48.343383][ T3776] __dump_stack+0x1d/0x30 [ 48.343452][ T3776] dump_stack_lvl+0xe8/0x140 [ 48.343474][ T3776] dump_stack+0x15/0x1b [ 48.343493][ T3776] should_fail_ex+0x265/0x280 [ 48.343569][ T3776] should_failslab+0x8c/0xb0 [ 48.343667][ T3776] kmem_cache_alloc_noprof+0x50/0x310 [ 48.343696][ T3776] ? audit_log_start+0x365/0x6c0 [ 48.343731][ T3776] audit_log_start+0x365/0x6c0 [ 48.343823][ T3776] audit_seccomp+0x48/0x100 [ 48.343852][ T3776] ? __seccomp_filter+0x68c/0x10d0 [ 48.343882][ T3776] __seccomp_filter+0x69d/0x10d0 [ 48.343908][ T3776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.344063][ T3776] ? vfs_write+0x75e/0x8e0 [ 48.344094][ T3776] ? __rcu_read_unlock+0x4f/0x70 [ 48.344120][ T3776] ? __fget_files+0x184/0x1c0 [ 48.344149][ T3776] __secure_computing+0x82/0x150 [ 48.344238][ T3776] syscall_trace_enter+0xcf/0x1e0 [ 48.344292][ T3776] do_syscall_64+0xac/0x200 [ 48.344315][ T3776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.344478][ T3776] ? clear_bhb_loop+0x40/0x90 [ 48.344570][ T3776] ? clear_bhb_loop+0x40/0x90 [ 48.344598][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.344703][ T3776] RIP: 0033:0x7f81274ce929 [ 48.344722][ T3776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.344744][ T3776] RSP: 002b:00007f8125b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 48.344766][ T3776] RAX: ffffffffffffffda RBX: 00007f81276f5fa0 RCX: 00007f81274ce929 [ 48.344827][ T3776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 48.344842][ T3776] RBP: 00007f8125b37090 R08: 0000000000000000 R09: 0000000000000000 [ 48.344856][ T3776] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001 [ 48.344870][ T3776] R13: 0000000000000000 R14: 00007f81276f5fa0 R15: 00007ffc5dfa1f78 [ 48.344943][ T3776] [ 48.677303][ T3785] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.731525][ T3785] wg2: left promiscuous mode [ 48.736308][ T3785] wg2: left allmulticast mode [ 48.745033][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 48.763832][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 48.922869][ T3785] wg2: entered promiscuous mode [ 48.927893][ T3785] wg2: entered allmulticast mode [ 49.256698][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.266925][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.344020][ T3809] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 49.351886][ T3809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.112'. [ 49.359937][ T3803] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 49.378857][ T3803] loop3: detected capacity change from 0 to 512 [ 49.392064][ T3803] EXT4-fs (loop3): 1 orphan inode deleted [ 49.399570][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.412714][ T3443] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 49.414766][ T3803] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.444091][ T3815] loop2: detected capacity change from 0 to 512 [ 49.461476][ T3815] EXT4-fs: Ignoring removed orlov option [ 49.468864][ T3815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.469102][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.480742][ T3815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.493593][ T3815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.113: bg 0: block 248: padding at end of block bitmap is not set [ 49.513759][ T3815] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.113: Failed to acquire dquot type 1 [ 49.526361][ T3815] EXT4-fs (loop2): 1 truncate cleaned up [ 49.534966][ T3815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.550391][ T3815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.610658][ T3823] loop4: detected capacity change from 0 to 2048 [ 49.614126][ T3825] loop2: detected capacity change from 0 to 2048 [ 49.620230][ T3823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.631248][ T3825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.650360][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.669828][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.672179][ T3832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.689910][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.700821][ T3825] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 5: comm syz.2.117: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 49.700895][ T3823] EXT4-fs error (device loop4): empty_inline_dir:1786: inode #12: block 5: comm syz.4.116: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 49.720987][ T3832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.741412][ T3833] netlink: 14 bytes leftover after parsing attributes in process `syz.3.118'. [ 49.746492][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.758782][ T3823] EXT4-fs (loop4): Remounting filesystem read-only [ 49.766280][ T3825] EXT4-fs (loop2): Remounting filesystem read-only [ 49.770191][ T3823] EXT4-fs warning (device loop4): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 49.776728][ T3825] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 49.820133][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.821929][ T3833] hsr_slave_0: left promiscuous mode [ 49.835329][ T3833] hsr_slave_1: left promiscuous mode [ 49.835841][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.879833][ T3839] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 49.895751][ T3839] wg2: entered promiscuous mode [ 49.900774][ T3839] wg2: entered allmulticast mode [ 50.038169][ T3848] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 50.046141][ T3848] netlink: 224 bytes leftover after parsing attributes in process `syz.4.123'. [ 50.088113][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 50.088149][ T29] audit: type=1326 audit(1751050495.657:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8800e929 code=0x7ffc0000 [ 50.090735][ T3853] FAULT_INJECTION: forcing a failure. [ 50.090735][ T3853] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.095507][ T29] audit: type=1400 audit(1751050495.657:1310): avc: denied { create } for pid=3855 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.117906][ T3853] CPU: 0 UID: 0 PID: 3853 Comm: syz.3.125 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 50.117993][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.118011][ T3853] Call Trace: [ 50.118020][ T3853] [ 50.118030][ T3853] __dump_stack+0x1d/0x30 [ 50.118062][ T3853] dump_stack_lvl+0xe8/0x140 [ 50.118089][ T3853] dump_stack+0x15/0x1b [ 50.118113][ T3853] should_fail_ex+0x265/0x280 [ 50.118170][ T3853] should_fail+0xb/0x20 [ 50.118208][ T3853] should_fail_usercopy+0x1a/0x20 [ 50.118253][ T3853] _copy_to_user+0x20/0xa0 [ 50.118331][ T3853] simple_read_from_buffer+0xb5/0x130 [ 50.118376][ T3853] proc_fail_nth_read+0x100/0x140 [ 50.118462][ T3853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.118508][ T3853] vfs_read+0x1a0/0x6f0 [ 50.118551][ T3853] ? __rcu_read_unlock+0x4f/0x70 [ 50.118581][ T3853] ? __fget_files+0x184/0x1c0 [ 50.118664][ T3853] ksys_read+0xda/0x1a0 [ 50.118717][ T3853] __x64_sys_read+0x40/0x50 [ 50.118834][ T3853] x64_sys_call+0x2d77/0x2fb0 [ 50.118863][ T3853] do_syscall_64+0xd2/0x200 [ 50.118968][ T3853] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.119005][ T3853] ? clear_bhb_loop+0x40/0x90 [ 50.119036][ T3853] ? clear_bhb_loop+0x40/0x90 [ 50.119103][ T3853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.119134][ T3853] RIP: 0033:0x7f81274cd33c [ 50.119154][ T3853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.119179][ T3853] RSP: 002b:00007f8125b37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.119203][ T3853] RAX: ffffffffffffffda RBX: 00007f81276f5fa0 RCX: 00007f81274cd33c [ 50.119221][ T3853] RDX: 000000000000000f RSI: 00007f8125b370a0 RDI: 0000000000000007 [ 50.119297][ T3853] RBP: 00007f8125b37090 R08: 0000000000000000 R09: 0000000000000000 [ 50.119314][ T3853] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000001 [ 50.119331][ T3853] R13: 0000000000000000 R14: 00007f81276f5fa0 R15: 00007ffc5dfa1f78 [ 50.119355][ T3853] [ 50.259829][ T3860] loop0: detected capacity change from 0 to 128 [ 50.271201][ T3864] loop3: detected capacity change from 0 to 2048 [ 50.279173][ T3860] EXT4-fs: test_dummy_encryption option not supported [ 50.282895][ T29] audit: type=1400 audit(1751050495.687:1311): avc: denied { setopt } for pid=3855 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.337233][ T3860] Cannot find add_set index 0 as target [ 50.338503][ T29] audit: type=1400 audit(1751050495.687:1312): avc: denied { bind } for pid=3855 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.397282][ T3865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 50.402235][ T29] audit: type=1400 audit(1751050495.687:1313): avc: denied { name_bind } for pid=3855 comm="syz.2.127" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.452724][ T29] audit: type=1400 audit(1751050495.687:1314): avc: denied { node_bind } for pid=3855 comm="syz.2.127" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.452820][ T29] audit: type=1400 audit(1751050495.687:1315): avc: denied { write } for pid=3855 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.452843][ T29] audit: type=1400 audit(1751050495.687:1316): avc: denied { connect } for pid=3855 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.452931][ T29] audit: type=1400 audit(1751050495.687:1317): avc: denied { name_connect } for pid=3855 comm="syz.2.127" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.452966][ T29] audit: type=1326 audit(1751050495.687:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8800e929 code=0x7ffc0000 [ 50.475250][ T3866] loop4: detected capacity change from 0 to 512 [ 50.514787][ T3864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.583193][ T3871] loop1: detected capacity change from 0 to 2048 [ 50.603618][ T3871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.614970][ T3866] EXT4-fs (loop4): 1 orphan inode deleted [ 50.622608][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 50.622960][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.648168][ T3866] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.653880][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.672277][ T3871] FAULT_INJECTION: forcing a failure. [ 50.672277][ T3871] name failslab, interval 1, probability 0, space 0, times 0 [ 50.684984][ T3871] CPU: 0 UID: 0 PID: 3871 Comm: syz.1.131 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 50.685011][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.685023][ T3871] Call Trace: [ 50.685029][ T3871] [ 50.685035][ T3871] __dump_stack+0x1d/0x30 [ 50.685108][ T3871] dump_stack_lvl+0xe8/0x140 [ 50.685132][ T3871] dump_stack+0x15/0x1b [ 50.685153][ T3871] should_fail_ex+0x265/0x280 [ 50.685189][ T3871] should_failslab+0x8c/0xb0 [ 50.685253][ T3871] kmem_cache_alloc_noprof+0x50/0x310 [ 50.685280][ T3871] ? copy_net_ns+0x10f/0x690 [ 50.685306][ T3871] copy_net_ns+0x10f/0x690 [ 50.685376][ T3871] create_new_namespaces+0x20e/0x3d0 [ 50.685418][ T3871] unshare_nsproxy_namespaces+0xe8/0x120 [ 50.685457][ T3871] ksys_unshare+0x3d0/0x6d0 [ 50.685485][ T3871] ? ksys_write+0x192/0x1a0 [ 50.685534][ T3871] __x64_sys_unshare+0x1f/0x30 [ 50.685615][ T3871] x64_sys_call+0x2d4b/0x2fb0 [ 50.685677][ T3871] do_syscall_64+0xd2/0x200 [ 50.685770][ T3871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.685796][ T3871] ? clear_bhb_loop+0x40/0x90 [ 50.685818][ T3871] ? clear_bhb_loop+0x40/0x90 [ 50.685929][ T3871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.685956][ T3871] RIP: 0033:0x7f45d25ae929 [ 50.685975][ T3871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.685997][ T3871] RSP: 002b:00007f45d0c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 50.686019][ T3871] RAX: ffffffffffffffda RBX: 00007f45d27d5fa0 RCX: 00007f45d25ae929 [ 50.686034][ T3871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 50.686048][ T3871] RBP: 00007f45d0c17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.686096][ T3871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.686107][ T3871] R13: 0000000000000000 R14: 00007f45d27d5fa0 R15: 00007ffce0348268 [ 50.686129][ T3871] [ 50.927041][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.966075][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.007047][ T3887] loop0: detected capacity change from 0 to 512 [ 51.014870][ T3887] EXT4-fs: Ignoring removed orlov option [ 51.048783][ T3887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.061424][ T3895] loop2: detected capacity change from 0 to 128 [ 51.076683][ T3896] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 51.084568][ T3896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.137'. [ 51.104955][ T3887] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.125466][ T3887] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.139: bg 0: block 248: padding at end of block bitmap is not set [ 51.158174][ T3887] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.139: Failed to acquire dquot type 1 [ 51.183538][ T3887] EXT4-fs (loop0): 1 truncate cleaned up [ 51.193873][ T3899] loop3: detected capacity change from 0 to 8192 [ 51.197327][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.236676][ T3907] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.261900][ T3903] bio_check_eod: 172 callbacks suppressed [ 51.261921][ T3903] syz.2.140: attempt to access beyond end of device [ 51.261921][ T3903] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 51.292114][ T3909] loop1: detected capacity change from 0 to 512 [ 51.295005][ T3903] syz.2.140: attempt to access beyond end of device [ 51.295005][ T3903] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 51.313362][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.339678][ T3909] EXT4-fs: Ignoring removed orlov option [ 51.344530][ T3903] syz.2.140: attempt to access beyond end of device [ 51.344530][ T3903] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 51.372064][ T3903] syz.2.140: attempt to access beyond end of device [ 51.372064][ T3903] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 51.382338][ T3914] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.395180][ T3899] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 51.398546][ T3903] syz.2.140: attempt to access beyond end of device [ 51.398546][ T3903] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 51.404133][ T3899] FAT-fs (loop3): Filesystem has been set read-only [ 51.426801][ T3909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.431685][ T3903] syz.2.140: attempt to access beyond end of device [ 51.431685][ T3903] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 51.452013][ T3917] loop4: detected capacity change from 0 to 512 [ 51.465165][ T3903] syz.2.140: attempt to access beyond end of device [ 51.465165][ T3903] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 51.483136][ T3903] syz.2.140: attempt to access beyond end of device [ 51.483136][ T3903] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 51.499207][ T3903] syz.2.140: attempt to access beyond end of device [ 51.499207][ T3903] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 51.499661][ T3909] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.513238][ T3903] syz.2.140: attempt to access beyond end of device [ 51.513238][ T3903] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 51.552194][ T3917] EXT4-fs (loop4): 1 orphan inode deleted [ 51.567947][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 51.589090][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.598443][ T3909] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.145: bg 0: block 248: padding at end of block bitmap is not set [ 51.620814][ T3917] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.650640][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.669742][ T3909] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.145: Failed to acquire dquot type 1 [ 51.718655][ T3909] EXT4-fs (loop1): 1 truncate cleaned up [ 51.738031][ T3909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.782997][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.790510][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.799940][ T3909] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.824817][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.832441][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.859139][ T3937] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 51.866885][ T3937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.155'. [ 51.889124][ T3939] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.899713][ T3935] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 52.995783][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.003649][ T3989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.029648][ T3990] loop2: detected capacity change from 0 to 1024 [ 53.041755][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.049553][ T3989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.072795][ T3990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.092877][ T3990] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 53.239182][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.261535][ T4023] loop2: detected capacity change from 0 to 164 [ 53.284826][ T4023] Unable to read rock-ridge attributes [ 53.305238][ T4027] loop4: detected capacity change from 0 to 512 [ 53.317854][ T4023] Unable to read rock-ridge attributes [ 53.329291][ T4027] EXT4-fs: Ignoring removed orlov option [ 53.344048][ T4027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.353493][ T4027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.363324][ T4027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.177: bg 0: block 248: padding at end of block bitmap is not set [ 53.379718][ T4027] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.177: Failed to acquire dquot type 1 [ 53.399079][ T4027] EXT4-fs (loop4): 1 truncate cleaned up [ 53.406955][ T4037] loop2: detected capacity change from 0 to 512 [ 53.414907][ T4037] EXT4-fs: Ignoring removed orlov option [ 53.423406][ T4027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.438992][ T4027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.450237][ T4037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.481644][ T4037] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.491934][ T4037] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.179: bg 0: block 248: padding at end of block bitmap is not set [ 53.506953][ T4037] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.179: Failed to acquire dquot type 1 [ 53.521452][ T4037] EXT4-fs (loop2): 1 truncate cleaned up [ 53.532382][ T4037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.564265][ T4051] netlink: 'syz.4.181': attribute type 39 has an invalid length. [ 53.573151][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.585190][ T4050] loop1: detected capacity change from 0 to 512 [ 53.616943][ T4050] EXT4-fs: Ignoring removed orlov option [ 53.632995][ T4057] loop4: detected capacity change from 0 to 1024 [ 53.642900][ T4050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.654771][ T4057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.669954][ T4050] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.678307][ T4050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.182: bg 0: block 248: padding at end of block bitmap is not set [ 53.694362][ T4050] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.182: Failed to acquire dquot type 1 [ 53.711215][ T4050] EXT4-fs (loop1): 1 truncate cleaned up [ 53.717621][ T4050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.743811][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.850897][ T4078] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 53.858770][ T4078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.184'. [ 53.998328][ T4093] loop1: detected capacity change from 0 to 512 [ 54.008326][ T4093] EXT4-fs: Ignoring removed orlov option [ 54.017064][ T4093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.068725][ T4093] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.075656][ T4093] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.188: bg 0: block 248: padding at end of block bitmap is not set [ 54.094943][ T4093] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.188: Failed to acquire dquot type 1 [ 54.107630][ T4093] EXT4-fs (loop1): 1 truncate cleaned up [ 54.114512][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.215415][ T4113] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.230904][ T4113] wg2: entered promiscuous mode [ 54.235854][ T4113] wg2: entered allmulticast mode [ 54.303029][ T4123] loop1: detected capacity change from 0 to 512 [ 54.336923][ T4123] EXT4-fs: Ignoring removed orlov option [ 54.363699][ T4127] loop0: detected capacity change from 0 to 512 [ 54.380379][ T4123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.391939][ T4127] EXT4-fs: Ignoring removed orlov option [ 54.450003][ T4123] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.459503][ T4127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.471757][ T4123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.192: bg 0: block 248: padding at end of block bitmap is not set [ 54.507466][ T4142] loop4: detected capacity change from 0 to 512 [ 54.514276][ T4127] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.522295][ T4123] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.192: Failed to acquire dquot type 1 [ 54.525953][ T4127] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.193: bg 0: block 248: padding at end of block bitmap is not set [ 54.536815][ T4142] EXT4-fs: Ignoring removed orlov option [ 54.554888][ T4127] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.193: Failed to acquire dquot type 1 [ 54.557584][ T4123] EXT4-fs (loop1): 1 truncate cleaned up [ 54.575529][ T4142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.584973][ T4127] EXT4-fs (loop0): 1 truncate cleaned up [ 54.594238][ T4142] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.632939][ T4142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.194: bg 0: block 248: padding at end of block bitmap is not set [ 54.672067][ T4142] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.194: Failed to acquire dquot type 1 [ 54.694407][ T4142] EXT4-fs (loop4): 1 truncate cleaned up [ 54.848466][ T4176] loop1: detected capacity change from 0 to 512 [ 54.865688][ T4176] EXT4-fs: Ignoring removed orlov option [ 54.894689][ T4176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.924447][ T4176] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.927804][ T4185] loop0: detected capacity change from 0 to 164 [ 54.939986][ T4176] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.201: bg 0: block 248: padding at end of block bitmap is not set [ 54.954726][ T4176] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.201: Failed to acquire dquot type 1 [ 54.967253][ T4176] EXT4-fs (loop1): 1 truncate cleaned up [ 54.973461][ T4185] Unable to read rock-ridge attributes [ 55.019055][ T4194] loop1: detected capacity change from 0 to 512 [ 55.026948][ T4194] EXT4-fs: Ignoring removed orlov option [ 55.036094][ T4194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.049690][ T4194] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.056860][ T4194] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.205: bg 0: block 248: padding at end of block bitmap is not set [ 55.060547][ T4197] Unable to read rock-ridge attributes [ 55.081734][ T4194] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.205: Failed to acquire dquot type 1 [ 55.094491][ T4194] EXT4-fs (loop1): 1 truncate cleaned up [ 55.141458][ T4197] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 55.223908][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 55.223942][ T29] audit: type=1326 audit(1751050500.787:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 55.270780][ T29] audit: type=1326 audit(1751050500.787:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 55.294327][ T29] audit: type=1326 audit(1751050500.787:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 55.316600][ T4229] loop2: detected capacity change from 0 to 164 [ 55.317882][ T29] audit: type=1326 audit(1751050500.787:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 55.348164][ T29] audit: type=1326 audit(1751050500.787:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 55.351064][ T4229] Unable to read rock-ridge attributes [ 55.371733][ T29] audit: type=1326 audit(1751050500.827:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81274ce929 code=0x7ffc0000 [ 55.400709][ T29] audit: type=1326 audit(1751050500.827:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f81274ce929 code=0x7ffc0000 [ 55.424224][ T29] audit: type=1326 audit(1751050500.827:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81274ce929 code=0x7ffc0000 [ 55.447778][ T29] audit: type=1326 audit(1751050500.827:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81274ce929 code=0x7ffc0000 [ 55.471617][ T29] audit: type=1326 audit(1751050500.827:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81274ce929 code=0x7ffc0000 [ 55.483780][ T4231] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 55.510547][ T4229] Unable to read rock-ridge attributes [ 55.569968][ T4221] loop1: detected capacity change from 0 to 512 [ 55.620486][ T4221] EXT4-fs (loop1): 1 orphan inode deleted [ 55.627879][ T4221] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.648153][ T1811] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 55.704882][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 55.752179][ T4257] loop1: detected capacity change from 0 to 2048 [ 55.876900][ T4276] loop1: detected capacity change from 0 to 1024 [ 55.945889][ T4286] loop1: detected capacity change from 0 to 512 [ 55.952649][ T4286] EXT4-fs: Ignoring removed orlov option [ 55.966949][ T4286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.977035][ T4286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.988230][ T4286] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.234: bg 0: block 248: padding at end of block bitmap is not set [ 56.003309][ T4286] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.234: Failed to acquire dquot type 1 [ 56.018893][ T4286] EXT4-fs (loop1): 1 truncate cleaned up [ 56.624646][ T4297] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 56.632474][ T4297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.238'. [ 56.695269][ T4307] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.805028][ T4318] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 56.818712][ T4318] loop3: detected capacity change from 0 to 512 [ 56.839180][ T4322] loop1: detected capacity change from 0 to 512 [ 56.845899][ T4322] EXT4-fs: Ignoring removed orlov option [ 56.854172][ T4322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.863994][ T4322] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.865053][ T4318] EXT4-fs (loop3): 1 orphan inode deleted [ 56.874315][ T4322] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.248: bg 0: block 248: padding at end of block bitmap is not set [ 56.876829][ T4318] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.901020][ T1811] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 56.922994][ T4322] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.248: Failed to acquire dquot type 1 [ 56.956365][ T4322] EXT4-fs (loop1): 1 truncate cleaned up [ 56.969112][ T4327] loop0: detected capacity change from 0 to 512 [ 56.976704][ T4327] EXT4-fs: Ignoring removed orlov option [ 56.987836][ T4327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.004659][ T4327] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.015661][ T4327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.249: bg 0: block 248: padding at end of block bitmap is not set [ 57.052653][ T4327] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.249: Failed to acquire dquot type 1 [ 57.090407][ T4327] EXT4-fs (loop0): 1 truncate cleaned up [ 57.100427][ T4344] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 57.118295][ T4344] loop1: detected capacity change from 0 to 512 [ 57.147993][ T4344] EXT4-fs (loop1): 1 orphan inode deleted [ 57.154771][ T4344] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.165673][ T4352] loop0: detected capacity change from 0 to 512 [ 57.174584][ T4352] EXT4-fs: Ignoring removed orlov option [ 57.183428][ T4352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.193589][ T4352] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.200894][ T4352] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.257: bg 0: block 248: padding at end of block bitmap is not set [ 57.215691][ T4352] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.257: Failed to acquire dquot type 1 [ 57.229634][ T4352] EXT4-fs (loop0): 1 truncate cleaned up [ 57.781621][ T4374] loop4: detected capacity change from 0 to 512 [ 57.793372][ T4374] EXT4-fs: Ignoring removed orlov option [ 57.822206][ T4374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.840332][ T4374] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.851282][ T4374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.262: bg 0: block 248: padding at end of block bitmap is not set [ 57.881316][ T4374] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.262: Failed to acquire dquot type 1 [ 57.969188][ T4374] EXT4-fs (loop4): 1 truncate cleaned up [ 57.985050][ T4378] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.994280][ T4378] wg2: left promiscuous mode [ 57.999209][ T4378] wg2: left allmulticast mode [ 58.000868][ T4379] loop2: detected capacity change from 0 to 1024 [ 58.011908][ T4378] wg2: entered promiscuous mode [ 58.016938][ T4378] wg2: entered allmulticast mode [ 58.087287][ T4387] netlink: 'syz.4.267': attribute type 8 has an invalid length. [ 58.108975][ T4388] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 58.116711][ T4388] netlink: 224 bytes leftover after parsing attributes in process `syz.2.266'. [ 58.130882][ T4390] loop1: detected capacity change from 0 to 128 [ 58.145126][ T4387] loop4: detected capacity change from 0 to 512 [ 58.184895][ T4392] loop3: detected capacity change from 0 to 512 [ 58.213660][ T4387] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.244305][ T4390] bio_check_eod: 17 callbacks suppressed [ 58.244339][ T4390] syz.1.268: attempt to access beyond end of device [ 58.244339][ T4390] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 58.270478][ T4387] EXT4-fs (loop4): mount failed [ 58.284333][ T4398] loop2: detected capacity change from 0 to 128 [ 58.292698][ T4390] syz.1.268: attempt to access beyond end of device [ 58.292698][ T4390] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 58.294175][ T4392] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.306670][ T4390] syz.1.268: attempt to access beyond end of device [ 58.306670][ T4390] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.330285][ T4390] syz.1.268: attempt to access beyond end of device [ 58.330285][ T4390] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.344346][ T4390] syz.1.268: attempt to access beyond end of device [ 58.344346][ T4390] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 58.357908][ T4390] syz.1.268: attempt to access beyond end of device [ 58.357908][ T4390] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 58.371645][ T4390] syz.1.268: attempt to access beyond end of device [ 58.371645][ T4390] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.385206][ T4390] syz.1.268: attempt to access beyond end of device [ 58.385206][ T4390] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.398859][ T4390] syz.1.268: attempt to access beyond end of device [ 58.398859][ T4390] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.421028][ T4390] syz.1.268: attempt to access beyond end of device [ 58.421028][ T4390] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 58.439549][ T4408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.271'. [ 58.450022][ T4387] loop4: detected capacity change from 0 to 1024 [ 58.457896][ T4387] EXT4-fs: Ignoring removed orlov option [ 58.463654][ T4387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.504836][ T4392] netlink: '+}[@': attribute type 12 has an invalid length. [ 58.649055][ T4425] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 58.723847][ T4430] loop1: detected capacity change from 0 to 164 [ 58.733882][ T4430] Unable to read rock-ridge attributes [ 58.744683][ T4430] Unable to read rock-ridge attributes [ 58.852142][ T4439] loop4: detected capacity change from 0 to 164 [ 58.863867][ T4439] Unable to read rock-ridge attributes [ 58.872975][ T4439] FAULT_INJECTION: forcing a failure. [ 58.872975][ T4439] name failslab, interval 1, probability 0, space 0, times 0 [ 58.885904][ T4439] CPU: 0 UID: 0 PID: 4439 Comm: syz.4.284 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 58.885983][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.886006][ T4439] Call Trace: [ 58.886014][ T4439] [ 58.886023][ T4439] __dump_stack+0x1d/0x30 [ 58.886050][ T4439] dump_stack_lvl+0xe8/0x140 [ 58.886074][ T4439] dump_stack+0x15/0x1b [ 58.886095][ T4439] should_fail_ex+0x265/0x280 [ 58.886159][ T4439] should_failslab+0x8c/0xb0 [ 58.886212][ T4439] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 58.886247][ T4439] ? __d_alloc+0x3d/0x350 [ 58.886278][ T4439] __d_alloc+0x3d/0x350 [ 58.886309][ T4439] d_alloc_parallel+0x53/0xc40 [ 58.886409][ T4439] ? __rcu_read_unlock+0x4f/0x70 [ 58.886430][ T4439] ? __d_lookup+0x316/0x340 [ 58.886460][ T4439] ? try_to_unlazy+0x25e/0x3a0 [ 58.886497][ T4439] path_openat+0x6b5/0x2170 [ 58.886594][ T4439] do_filp_open+0x109/0x230 [ 58.886736][ T4439] do_sys_openat2+0xa6/0x110 [ 58.886834][ T4439] __x64_sys_openat+0xf2/0x120 [ 58.886872][ T4439] x64_sys_call+0x1af/0x2fb0 [ 58.886897][ T4439] do_syscall_64+0xd2/0x200 [ 58.886914][ T4439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.886947][ T4439] ? clear_bhb_loop+0x40/0x90 [ 58.887121][ T4439] ? clear_bhb_loop+0x40/0x90 [ 58.887166][ T4439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.887194][ T4439] RIP: 0033:0x7f2b8800e929 [ 58.887213][ T4439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.887233][ T4439] RSP: 002b:00007f2b86677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.887256][ T4439] RAX: ffffffffffffffda RBX: 00007f2b88235fa0 RCX: 00007f2b8800e929 [ 58.887323][ T4439] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 58.887336][ T4439] RBP: 00007f2b86677090 R08: 0000000000000000 R09: 0000000000000000 [ 58.887349][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.887398][ T4439] R13: 0000000000000000 R14: 00007f2b88235fa0 R15: 00007fff27c3bed8 [ 58.887421][ T4439] [ 59.119624][ T4441] loop1: detected capacity change from 0 to 512 [ 59.127187][ T4441] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.155342][ T4441] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 59.202557][ T4441] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.285: attempt to clear invalid blocks 2 len 1 [ 59.226458][ T4441] EXT4-fs (loop1): Remounting filesystem read-only [ 59.239056][ T4441] EXT4-fs (loop1): 1 truncate cleaned up [ 59.249892][ T4458] loop3: detected capacity change from 0 to 164 [ 59.260297][ T4458] Unable to read rock-ridge attributes [ 59.276519][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 59.289302][ T4441] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 59.306784][ T4458] Unable to read rock-ridge attributes [ 59.308009][ T4460] loop2: detected capacity change from 0 to 512 [ 59.319819][ T4460] EXT4-fs: Ignoring removed orlov option [ 59.326524][ T4458] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.353284][ T4460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.377718][ T4460] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.387480][ T4460] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.293: bg 0: block 248: padding at end of block bitmap is not set [ 59.426126][ T4460] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.293: Failed to acquire dquot type 1 [ 59.429786][ T4466] loop4: detected capacity change from 0 to 1024 [ 59.444379][ T4468] loop0: detected capacity change from 0 to 1024 [ 59.454510][ T4460] EXT4-fs (loop2): 1 truncate cleaned up [ 59.463172][ T4468] EXT4-fs: Ignoring removed nobh option [ 59.483853][ T4470] loop1: detected capacity change from 0 to 512 [ 59.492364][ T4468] EXT4-fs: Ignoring removed bh option [ 59.520938][ T4468] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 59.537597][ T4470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.554850][ T4470] EXT4-fs (loop1): 1 truncate cleaned up [ 59.564491][ T4470] FAULT_INJECTION: forcing a failure. [ 59.564491][ T4470] name failslab, interval 1, probability 0, space 0, times 0 [ 59.577323][ T4470] CPU: 0 UID: 0 PID: 4470 Comm: syz.1.295 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 59.577354][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.577368][ T4470] Call Trace: [ 59.577375][ T4470] [ 59.577383][ T4470] __dump_stack+0x1d/0x30 [ 59.577410][ T4470] dump_stack_lvl+0xe8/0x140 [ 59.577469][ T4470] dump_stack+0x15/0x1b [ 59.577490][ T4470] should_fail_ex+0x265/0x280 [ 59.577525][ T4470] should_failslab+0x8c/0xb0 [ 59.577551][ T4470] kmem_cache_alloc_noprof+0x50/0x310 [ 59.577584][ T4470] ? mb_cache_entry_create+0xf0/0x540 [ 59.577662][ T4470] ? check_xattrs+0x27d/0x7d0 [ 59.577748][ T4470] mb_cache_entry_create+0xf0/0x540 [ 59.577779][ T4470] ext4_xattr_get+0x298/0x470 [ 59.577948][ T4470] ext4_xattr_security_get+0x32/0x40 [ 59.578036][ T4470] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 59.578069][ T4470] __vfs_getxattr+0x2ad/0x2c0 [ 59.578112][ T4470] cap_inode_need_killpriv+0x2e/0x50 [ 59.578206][ T4470] security_inode_need_killpriv+0x36/0x70 [ 59.578242][ T4470] dentry_needs_remove_privs+0x61/0xb0 [ 59.578305][ T4470] do_truncate+0xaf/0x180 [ 59.578325][ T4470] path_openat+0x1d8c/0x2170 [ 59.578387][ T4470] ? _parse_integer_limit+0x170/0x190 [ 59.578429][ T4470] do_filp_open+0x109/0x230 [ 59.578464][ T4470] do_sys_openat2+0xa6/0x110 [ 59.578575][ T4470] __x64_sys_open+0xe6/0x110 [ 59.578603][ T4470] x64_sys_call+0x14d4/0x2fb0 [ 59.578625][ T4470] do_syscall_64+0xd2/0x200 [ 59.578647][ T4470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.578756][ T4470] ? clear_bhb_loop+0x40/0x90 [ 59.578781][ T4470] ? clear_bhb_loop+0x40/0x90 [ 59.578850][ T4470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.578933][ T4470] RIP: 0033:0x7f45d25ae929 [ 59.578950][ T4470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.578972][ T4470] RSP: 002b:00007f45d0c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 59.578995][ T4470] RAX: ffffffffffffffda RBX: 00007f45d27d5fa0 RCX: 00007f45d25ae929 [ 59.579010][ T4470] RDX: 0000000000000021 RSI: 0000000000000280 RDI: 0000200000000640 [ 59.579025][ T4470] RBP: 00007f45d0c17090 R08: 0000000000000000 R09: 0000000000000000 [ 59.579040][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.579054][ T4470] R13: 0000000000000000 R14: 00007f45d27d5fa0 R15: 00007ffce0348268 [ 59.579145][ T4470] [ 59.825761][ T4481] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 59.843714][ T4483] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 59.868672][ T4477] loop2: detected capacity change from 0 to 128 [ 60.059761][ T4491] loop2: detected capacity change from 0 to 164 [ 60.073075][ T4491] Unable to read rock-ridge attributes [ 60.095749][ T4491] Unable to read rock-ridge attributes [ 60.224028][ T4499] loop2: detected capacity change from 0 to 128 [ 60.252139][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 60.252154][ T29] audit: type=1400 audit(1751050505.817:2293): avc: denied { read write } for pid=4498 comm="syz.2.306" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.282540][ T29] audit: type=1400 audit(1751050505.817:2294): avc: denied { open } for pid=4498 comm="syz.2.306" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.466226][ T4505] loop3: detected capacity change from 0 to 164 [ 60.474907][ T29] audit: type=1400 audit(1751050505.887:2295): avc: denied { tracepoint } for pid=4498 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.494827][ T29] audit: type=1326 audit(1751050505.897:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.518261][ T29] audit: type=1326 audit(1751050505.897:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.541676][ T29] audit: type=1326 audit(1751050505.897:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.565294][ T29] audit: type=1326 audit(1751050505.897:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.591684][ T29] audit: type=1326 audit(1751050505.897:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.615122][ T29] audit: type=1326 audit(1751050505.897:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.638654][ T29] audit: type=1326 audit(1751050505.897:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037464e929 code=0x7ffc0000 [ 60.708616][ T4505] Unable to read rock-ridge attributes [ 60.752492][ T4505] Unable to read rock-ridge attributes [ 60.759017][ T4505] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 61.192603][ T4533] loop2: detected capacity change from 0 to 512 [ 61.241622][ T4533] EXT4-fs: Ignoring removed orlov option [ 61.264979][ T4533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.288663][ T4538] loop4: detected capacity change from 0 to 512 [ 61.305480][ T4538] EXT4-fs: Ignoring removed orlov option [ 61.475389][ T4533] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.482798][ T4533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.318: bg 0: block 248: padding at end of block bitmap is not set [ 61.499938][ T4533] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.318: Failed to acquire dquot type 1 [ 61.512008][ T4538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.674672][ T4533] EXT4-fs (loop2): 1 truncate cleaned up [ 62.442683][ T4538] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.517993][ T4538] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.320: bg 0: block 248: padding at end of block bitmap is not set [ 62.542143][ T4538] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.320: Failed to acquire dquot type 1 [ 62.556031][ T4538] EXT4-fs (loop4): 1 truncate cleaned up [ 62.828858][ T4574] loop3: detected capacity change from 0 to 1024 [ 62.841412][ T4574] EXT4-fs: Ignoring removed nobh option [ 62.877583][ T4574] EXT4-fs: Ignoring removed bh option [ 62.879401][ T4582] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 62.892851][ T4574] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 62.914102][ T4582] loop1: detected capacity change from 0 to 512 [ 63.027348][ T4582] EXT4-fs (loop1): 1 orphan inode deleted [ 63.032241][ T4597] loop4: detected capacity change from 0 to 128 [ 63.043374][ T4582] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.057710][ T3982] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 63.144502][ T4603] netlink: 60 bytes leftover after parsing attributes in process `syz.4.341'. [ 63.162041][ T4604] loop2: detected capacity change from 0 to 1024 [ 63.178001][ T4604] EXT4-fs: dax option not supported [ 63.296894][ T4613] loop1: detected capacity change from 0 to 512 [ 63.315056][ T4613] EXT4-fs: Ignoring removed orlov option [ 63.333952][ T31] bio_check_eod: 338 callbacks suppressed [ 63.333968][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.333968][ T31] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 63.362073][ T4613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.421595][ T4613] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.429353][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.429353][ T31] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 63.449881][ T4613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.348: bg 0: block 248: padding at end of block bitmap is not set [ 63.465267][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.465267][ T31] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 63.483058][ T4613] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.348: Failed to acquire dquot type 1 [ 63.495119][ T4613] EXT4-fs (loop1): 1 truncate cleaned up [ 63.504045][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.504045][ T31] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 63.532299][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.532299][ T31] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 63.548882][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.548882][ T31] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 63.583425][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.583425][ T31] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 63.600565][ T4622] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 63.616161][ T4624] loop1: detected capacity change from 0 to 512 [ 63.625926][ T4624] EXT4-fs: Ignoring removed orlov option [ 63.646457][ T4624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.666042][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.666042][ T31] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 63.682297][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.682297][ T31] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 63.703079][ T31] kworker/u8:1: attempt to access beyond end of device [ 63.703079][ T31] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 63.733668][ T4629] loop4: detected capacity change from 0 to 128 [ 63.748500][ T4624] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.767032][ T4624] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.352: bg 0: block 248: padding at end of block bitmap is not set [ 63.788174][ T4624] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.352: Failed to acquire dquot type 1 [ 63.858271][ T4624] EXT4-fs (loop1): 1 truncate cleaned up [ 64.057474][ T4638] loop1: detected capacity change from 0 to 512 [ 64.070684][ T4638] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.098665][ T4638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.283137][ T4638] EXT4-fs (loop1): 1 truncate cleaned up [ 64.321053][ T4647] xt_hashlimit: max too large, truncated to 1048576 [ 64.451274][ T4653] loop2: detected capacity change from 0 to 128 [ 64.524670][ T4655] loop1: detected capacity change from 0 to 1024 [ 64.557235][ T4658] netlink: 60 bytes leftover after parsing attributes in process `syz.2.359'. [ 64.764274][ T4665] loop0: detected capacity change from 0 to 512 [ 64.790019][ T4665] EXT4-fs: Ignoring removed orlov option [ 64.815775][ T4665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.831915][ T4671] loop4: detected capacity change from 0 to 512 [ 64.845999][ T4665] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.854761][ T4673] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.861708][ T4665] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.363: bg 0: block 248: padding at end of block bitmap is not set [ 64.870935][ T4671] EXT4-fs: Ignoring removed orlov option [ 64.898458][ T4665] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.363: Failed to acquire dquot type 1 [ 64.916614][ T4673] wg2: left promiscuous mode [ 64.921321][ T4673] wg2: left allmulticast mode [ 64.927482][ T4665] EXT4-fs (loop0): 1 truncate cleaned up [ 64.935325][ T4671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.950582][ T4673] wg2: entered promiscuous mode [ 64.955695][ T4673] wg2: entered allmulticast mode [ 64.995073][ T4671] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.006757][ T4671] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.365: bg 0: block 248: padding at end of block bitmap is not set [ 65.024819][ T4671] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.365: Failed to acquire dquot type 1 [ 65.072050][ T4671] EXT4-fs (loop4): 1 truncate cleaned up [ 65.260780][ T4692] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 65.289855][ T4692] loop4: detected capacity change from 0 to 512 [ 65.312463][ T4692] EXT4-fs (loop4): 1 orphan inode deleted [ 65.333380][ T4692] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.347946][ T3982] __quota_error: 352 callbacks suppressed [ 65.347963][ T3982] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.363537][ T3982] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 65.549028][ T29] audit: type=1326 audit(1751050511.117:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.580751][ T4705] loop4: detected capacity change from 0 to 512 [ 65.585648][ T29] audit: type=1326 audit(1751050511.137:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.610086][ T4705] EXT4-fs: Ignoring removed orlov option [ 65.610419][ T29] audit: type=1326 audit(1751050511.137:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.639650][ T29] audit: type=1326 audit(1751050511.137:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.655876][ T4705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.663011][ T29] audit: type=1326 audit(1751050511.137:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.683479][ T4705] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.695003][ T29] audit: type=1326 audit(1751050511.137:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.695040][ T29] audit: type=1326 audit(1751050511.137:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.695146][ T29] audit: type=1326 audit(1751050511.137:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d3e650847 code=0x7ffc0000 [ 65.771695][ T29] audit: type=1326 audit(1751050511.137:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 65.800996][ T4705] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.378: bg 0: block 248: padding at end of block bitmap is not set [ 65.822203][ T4705] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.378: Failed to acquire dquot type 1 [ 65.834310][ T4705] EXT4-fs (loop4): 1 truncate cleaned up [ 65.936071][ T4717] loop4: detected capacity change from 0 to 128 [ 65.994198][ T4719] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 66.001976][ T4719] netlink: 224 bytes leftover after parsing attributes in process `syz.1.385'. [ 66.249449][ T4741] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 66.257182][ T4741] netlink: 224 bytes leftover after parsing attributes in process `syz.4.393'. [ 66.273891][ T4743] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 66.381861][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 66.426455][ T4755] loop4: detected capacity change from 0 to 1024 [ 66.434657][ T4748] mmap: syz.2.396 (4748) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.480541][ T4759] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 66.488462][ T4759] netlink: 224 bytes leftover after parsing attributes in process `syz.3.401'. [ 66.488856][ T4748] loop2: detected capacity change from 0 to 1024 [ 66.506686][ T4748] EXT4-fs: Ignoring removed orlov option [ 66.513135][ T4748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.552120][ T4748] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.624471][ T4748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 66.632732][ T4748] System zones: 0-1, 3-12 [ 66.643068][ T4748] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.396: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.657532][ T4748] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.396: Failed to acquire dquot type 0 [ 66.670865][ T4770] loop3: detected capacity change from 0 to 1024 [ 66.677387][ T4748] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.396: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.682032][ T4770] EXT4-fs: Ignoring removed nobh option [ 66.696716][ T4748] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.396: Invalid inode bitmap blk 0 in block_group 0 [ 66.710215][ T4770] EXT4-fs: Ignoring removed bh option [ 66.716390][ T3982] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.731382][ T4748] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 66.740388][ T4748] EXT4-fs (loop2): 1 orphan inode deleted [ 66.745795][ T4770] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 66.756718][ T3982] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 66.961552][ T4780] FAULT_INJECTION: forcing a failure. [ 66.961552][ T4780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.974726][ T4780] CPU: 1 UID: 0 PID: 4780 Comm: syz.4.406 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 66.974762][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.974885][ T4780] Call Trace: [ 66.974937][ T4780] [ 66.974946][ T4780] __dump_stack+0x1d/0x30 [ 66.974966][ T4780] dump_stack_lvl+0xe8/0x140 [ 66.974986][ T4780] dump_stack+0x15/0x1b [ 66.975051][ T4780] should_fail_ex+0x265/0x280 [ 66.975091][ T4780] should_fail+0xb/0x20 [ 66.975127][ T4780] should_fail_usercopy+0x1a/0x20 [ 66.975202][ T4780] _copy_from_user+0x1c/0xb0 [ 66.975229][ T4780] __se_sys_move_pages+0xd2e/0x1340 [ 66.975261][ T4780] ? get_pid_task+0x96/0xd0 [ 66.975332][ T4780] ? fput+0x8f/0xc0 [ 66.975362][ T4780] ? ksys_write+0x192/0x1a0 [ 66.975440][ T4780] __x64_sys_move_pages+0x78/0x90 [ 66.975466][ T4780] x64_sys_call+0x2eab/0x2fb0 [ 66.975487][ T4780] do_syscall_64+0xd2/0x200 [ 66.975505][ T4780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.975538][ T4780] ? clear_bhb_loop+0x40/0x90 [ 66.975568][ T4780] ? clear_bhb_loop+0x40/0x90 [ 66.975597][ T4780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.975625][ T4780] RIP: 0033:0x7f2b8800e929 [ 66.975644][ T4780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.975680][ T4780] RSP: 002b:00007f2b86677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 66.975698][ T4780] RAX: ffffffffffffffda RBX: 00007f2b88235fa0 RCX: 00007f2b8800e929 [ 66.975710][ T4780] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 66.975724][ T4780] RBP: 00007f2b86677090 R08: 0000200000000040 R09: 0000000000000000 [ 66.975739][ T4780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.975832][ T4780] R13: 0000000000000000 R14: 00007f2b88235fa0 R15: 00007fff27c3bed8 [ 66.975850][ T4780] [ 67.241887][ T4783] loop4: detected capacity change from 0 to 164 [ 67.336658][ T4783] Unable to read rock-ridge attributes [ 67.357930][ T2995] udevd[2995]: worker [4340] terminated by signal 33 (Unknown signal 33) [ 67.459916][ T4783] Unable to read rock-ridge attributes [ 67.496206][ T2995] udevd[2995]: worker [4340] failed while handling '/devices/virtual/block/loop4' [ 67.546553][ T4795] loop4: detected capacity change from 0 to 512 [ 67.566905][ T4795] EXT4-fs: Ignoring removed orlov option [ 67.580793][ T4795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.621382][ T4795] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.662162][ T4795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.413: bg 0: block 248: padding at end of block bitmap is not set [ 67.687270][ T4795] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.413: Failed to acquire dquot type 1 [ 67.730765][ T4808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.416'. [ 67.749395][ T4795] EXT4-fs (loop4): 1 truncate cleaned up [ 67.789608][ T4810] loop2: detected capacity change from 0 to 128 [ 67.925942][ T4815] loop4: detected capacity change from 0 to 512 [ 67.967991][ T4815] EXT4-fs: Ignoring removed orlov option [ 67.979509][ T4815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.008105][ T4815] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.027457][ T4815] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.420: bg 0: block 248: padding at end of block bitmap is not set [ 68.073825][ T4815] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.420: Failed to acquire dquot type 1 [ 68.101278][ T4815] EXT4-fs (loop4): 1 truncate cleaned up [ 68.193378][ T4819] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 68.201268][ T4819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.421'. [ 68.433009][ T4828] loop0: detected capacity change from 0 to 164 [ 68.591023][ T4828] Unable to read rock-ridge attributes [ 68.615738][ T4828] Unable to read rock-ridge attributes [ 68.765141][ T51] bio_check_eod: 205 callbacks suppressed [ 68.765156][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.765156][ T51] loop2: rw=1, sector=353, nr_sectors = 120 limit=128 [ 68.789681][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.789681][ T51] loop2: rw=1, sector=481, nr_sectors = 8 limit=128 [ 68.828964][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.828964][ T51] loop2: rw=1, sector=497, nr_sectors = 8 limit=128 [ 68.848150][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.848150][ T51] loop2: rw=1, sector=513, nr_sectors = 8 limit=128 [ 68.861713][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.861713][ T51] loop2: rw=1, sector=529, nr_sectors = 8 limit=128 [ 68.884213][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.884213][ T51] loop2: rw=1, sector=545, nr_sectors = 8 limit=128 [ 68.930449][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.930449][ T51] loop2: rw=1, sector=561, nr_sectors = 8 limit=128 [ 68.940878][ T4846] loop4: detected capacity change from 0 to 512 [ 68.946846][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.946846][ T51] loop2: rw=1, sector=577, nr_sectors = 8 limit=128 [ 68.959586][ T4846] EXT4-fs: Ignoring removed orlov option [ 68.992817][ T4846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.992829][ T51] kworker/u8:3: attempt to access beyond end of device [ 68.992829][ T51] loop2: rw=1, sector=593, nr_sectors = 8 limit=128 [ 69.019393][ T4846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.026468][ T4846] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.433: bg 0: block 248: padding at end of block bitmap is not set [ 69.044775][ T4846] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.433: Failed to acquire dquot type 1 [ 69.073527][ T51] kworker/u8:3: attempt to access beyond end of device [ 69.073527][ T51] loop2: rw=1, sector=609, nr_sectors = 8 limit=128 [ 69.154050][ T4846] EXT4-fs (loop4): 1 truncate cleaned up [ 69.277805][ T4862] loop4: detected capacity change from 0 to 512 [ 69.289883][ T4862] EXT4-fs: Ignoring removed orlov option [ 69.305918][ T4862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.324515][ T4862] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.335023][ T4862] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.439: bg 0: block 248: padding at end of block bitmap is not set [ 69.353591][ T4862] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.439: Failed to acquire dquot type 1 [ 69.365683][ T4862] EXT4-fs (loop4): 1 truncate cleaned up [ 69.380831][ T4867] loop2: detected capacity change from 0 to 2048 [ 69.432724][ T4867] EXT4-fs (loop2): failed to initialize system zone (-117) [ 69.513311][ T4871] loop1: detected capacity change from 0 to 512 [ 69.523001][ T4867] EXT4-fs (loop2): mount failed [ 69.557441][ T4871] EXT4-fs: Ignoring removed orlov option [ 69.587015][ T4871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.600505][ T4871] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.634254][ T4871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.441: bg 0: block 248: padding at end of block bitmap is not set [ 69.666431][ T4882] loop3: detected capacity change from 0 to 512 [ 69.674256][ T4871] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.441: Failed to acquire dquot type 1 [ 69.691086][ T4871] EXT4-fs (loop1): 1 truncate cleaned up [ 69.695956][ T4882] EXT4-fs: Ignoring removed orlov option [ 69.702670][ T4884] loop2: detected capacity change from 0 to 128 [ 69.730036][ T4882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.763855][ T4882] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.784579][ T4882] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.445: bg 0: block 248: padding at end of block bitmap is not set [ 69.802516][ T4882] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.445: Failed to acquire dquot type 1 [ 69.817602][ T4889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.446'. [ 69.844638][ T4882] EXT4-fs (loop3): 1 truncate cleaned up [ 69.897806][ T4893] loop1: detected capacity change from 0 to 512 [ 69.918431][ T4893] EXT4-fs: Ignoring removed orlov option [ 69.944771][ T4893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.969525][ T4893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.983448][ T4893] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.449: bg 0: block 248: padding at end of block bitmap is not set [ 69.998035][ T4893] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.449: Failed to acquire dquot type 1 [ 70.012771][ T4902] loop4: detected capacity change from 0 to 512 [ 70.027168][ T4902] EXT4-fs (loop4): unable to read superblock [ 70.048595][ T4893] EXT4-fs (loop1): 1 truncate cleaned up [ 70.091276][ T4907] loop2: detected capacity change from 0 to 1024 [ 70.128480][ T4907] EXT4-fs: Ignoring removed nobh option [ 70.155188][ T4907] EXT4-fs: Ignoring removed bh option [ 70.190536][ T4907] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 70.202841][ T4916] loop0: detected capacity change from 0 to 1024 [ 70.275521][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.459'. [ 70.284547][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 70.360288][ T4920] openvswitch: netlink: Message has 6 unknown bytes. [ 70.609204][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 70.609218][ T29] audit: type=1326 audit(1751050516.177:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.794838][ T29] audit: type=1326 audit(1751050516.207:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.818432][ T29] audit: type=1326 audit(1751050516.227:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.841907][ T29] audit: type=1326 audit(1751050516.247:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.865493][ T29] audit: type=1326 audit(1751050516.247:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.889374][ T29] audit: type=1326 audit(1751050516.297:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.913052][ T29] audit: type=1326 audit(1751050516.297:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.936619][ T29] audit: type=1326 audit(1751050516.297:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.959982][ T29] audit: type=1326 audit(1751050516.297:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 70.983335][ T29] audit: type=1326 audit(1751050516.297:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e64e929 code=0x7ffc0000 [ 71.035048][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 71.133829][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.153466][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.180819][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 71.274901][ T4947] loop0: detected capacity change from 0 to 1024 [ 71.438780][ T4961] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 71.464406][ T4961] loop1: detected capacity change from 0 to 512 [ 71.518101][ T4961] EXT4-fs (loop1): 1 orphan inode deleted [ 71.524505][ T4961] EXT4-fs mount: 98 callbacks suppressed [ 71.524518][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.545561][ T3979] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 71.560002][ T4961] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.615204][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.658170][ T4975] loop1: detected capacity change from 0 to 1024 [ 71.668650][ T4975] EXT4-fs: Ignoring removed nobh option [ 71.674794][ T4975] EXT4-fs: Ignoring removed bh option [ 71.804303][ T4975] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 71.913008][ T4975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.042669][ T4981] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 72.050502][ T4981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.476'. [ 72.152001][ T4985] loop3: detected capacity change from 0 to 128 [ 72.232783][ T4973] loop0: detected capacity change from 0 to 1024 [ 72.246529][ T4973] ext4: Unknown parameter 'func' [ 72.363101][ T4973] loop0: detected capacity change from 0 to 512 [ 72.387822][ T4991] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 72.388362][ T4973] EXT4-fs: Ignoring removed orlov option [ 72.395556][ T4991] netlink: 224 bytes leftover after parsing attributes in process `syz.2.478'. [ 72.451770][ T4973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.483401][ T4973] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.514437][ T4973] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.475: bg 0: block 248: padding at end of block bitmap is not set [ 72.568122][ T4973] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.475: Failed to acquire dquot type 1 [ 72.592054][ T4973] EXT4-fs (loop0): 1 truncate cleaned up [ 72.618494][ T4973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.883484][ T5005] loop2: detected capacity change from 0 to 512 [ 72.904738][ T5005] EXT4-fs: Ignoring removed orlov option [ 72.941254][ T5005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.963221][ T5005] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.980293][ T5005] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.482: bg 0: block 248: padding at end of block bitmap is not set [ 73.049887][ T5005] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.482: Failed to acquire dquot type 1 [ 73.068276][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.105647][ T5009] loop4: detected capacity change from 0 to 512 [ 73.112670][ T5005] EXT4-fs (loop2): 1 truncate cleaned up [ 73.135880][ T5009] EXT4-fs: Ignoring removed orlov option [ 73.151702][ T5005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.174105][ T5009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.192256][ T5009] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.206764][ T5005] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.208283][ T5009] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.484: bg 0: block 248: padding at end of block bitmap is not set [ 73.234511][ T5009] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.484: Failed to acquire dquot type 1 [ 73.250771][ T5009] EXT4-fs (loop4): 1 truncate cleaned up [ 73.260545][ T5009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.339213][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.393250][ T5021] loop4: detected capacity change from 0 to 512 [ 73.408154][ T5021] EXT4-fs: Ignoring removed orlov option [ 73.430312][ T5023] loop0: detected capacity change from 0 to 128 [ 73.484168][ T5021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.518739][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.489'. [ 73.528407][ T5021] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.547268][ T5021] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.488: bg 0: block 248: padding at end of block bitmap is not set [ 73.595140][ T5021] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.488: Failed to acquire dquot type 1 [ 73.643809][ T5021] EXT4-fs (loop4): 1 truncate cleaned up [ 73.677020][ T5021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.695239][ T5034] loop0: detected capacity change from 0 to 128 [ 73.763769][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.826346][ T5037] bio_check_eod: 376 callbacks suppressed [ 73.826364][ T5037] syz.0.493: attempt to access beyond end of device [ 73.826364][ T5037] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 73.885405][ T5041] loop4: detected capacity change from 0 to 512 [ 73.892292][ T5041] EXT4-fs: Ignoring removed orlov option [ 73.907771][ T5037] syz.0.493: attempt to access beyond end of device [ 73.907771][ T5037] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 73.928414][ T5041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.947896][ T5037] syz.0.493: attempt to access beyond end of device [ 73.947896][ T5037] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 73.961636][ T5041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.980663][ T5041] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.496: bg 0: block 248: padding at end of block bitmap is not set [ 74.020347][ T5041] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.496: Failed to acquire dquot type 1 [ 74.032289][ T5037] syz.0.493: attempt to access beyond end of device [ 74.032289][ T5037] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 74.071706][ T5036] loop3: detected capacity change from 0 to 1024 [ 74.078981][ T5041] EXT4-fs (loop4): 1 truncate cleaned up [ 74.088608][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.108376][ T5036] ext4: Unknown parameter 'func' [ 74.113666][ T5037] syz.0.493: attempt to access beyond end of device [ 74.113666][ T5037] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 74.169765][ T5037] syz.0.493: attempt to access beyond end of device [ 74.169765][ T5037] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 74.205830][ T5045] loop2: detected capacity change from 0 to 512 [ 74.212774][ T5036] loop3: detected capacity change from 0 to 2048 [ 74.219758][ T5037] syz.0.493: attempt to access beyond end of device [ 74.219758][ T5037] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 74.234266][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.251049][ T5045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.253422][ T5036] Alternate GPT is invalid, using primary GPT. [ 74.268028][ T5036] loop3: p1 p2 p3 [ 74.280461][ T5037] syz.0.493: attempt to access beyond end of device [ 74.280461][ T5037] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 74.309542][ T5037] syz.0.493: attempt to access beyond end of device [ 74.309542][ T5037] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 74.323188][ T5037] syz.0.493: attempt to access beyond end of device [ 74.323188][ T5037] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 74.325387][ T5045] EXT4-fs (loop2): 1 truncate cleaned up [ 74.350181][ T2995] Alternate GPT is invalid, using primary GPT. [ 74.356550][ T2995] loop3: p1 p2 p3 [ 74.438137][ T5045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.469750][ T5051] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 74.668462][ T5060] loop0: detected capacity change from 0 to 512 [ 74.700832][ T5060] EXT4-fs: Ignoring removed orlov option [ 74.706205][ T3766] udevd[3766]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 74.711151][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 74.721250][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 74.737523][ T5060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.760406][ T5061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.502'. [ 74.769694][ T5060] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.791269][ T5060] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.500: bg 0: block 248: padding at end of block bitmap is not set [ 74.973362][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.982746][ T5060] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.500: Failed to acquire dquot type 1 [ 75.010364][ T5060] EXT4-fs (loop0): 1 truncate cleaned up [ 75.025374][ T5060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.063713][ T5060] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.074307][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 75.115690][ T5067] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 75.123579][ T5067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.504'. [ 75.201865][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.243117][ T5080] loop0: detected capacity change from 0 to 1024 [ 75.251330][ T5077] loop1: detected capacity change from 0 to 128 [ 75.282930][ T5080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.299690][ T5071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.506'. [ 75.333997][ T5086] loop2: detected capacity change from 0 to 128 [ 75.381183][ T5087] netlink: 60 bytes leftover after parsing attributes in process `syz.1.508'. [ 75.479272][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.491121][ T5091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 75.497794][ T5091] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.505550][ T5091] vhci_hcd vhci_hcd.0: Device attached [ 75.564431][ T5094] vhci_hcd: connection closed [ 75.565250][ T3979] vhci_hcd: stop threads [ 75.574351][ T3979] vhci_hcd: release socket [ 75.578837][ T3979] vhci_hcd: disconnect device [ 75.602145][ T5101] loop4: detected capacity change from 0 to 512 [ 75.610800][ T5101] EXT4-fs: Ignoring removed orlov option [ 75.621372][ T5101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.647177][ T5101] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.655407][ T5101] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.516: bg 0: block 248: padding at end of block bitmap is not set [ 75.670345][ T5107] loop0: detected capacity change from 0 to 1024 [ 75.685559][ T5107] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.709439][ T5101] __quota_error: 570 callbacks suppressed [ 75.709454][ T5101] Quota error (device loop4): write_blk: dquota write failed [ 75.722693][ T5101] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 75.730674][ T29] audit: type=1326 audit(1751050521.277:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 75.732648][ T5101] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.516: Failed to acquire dquot type 1 [ 75.756104][ T29] audit: type=1326 audit(1751050521.277:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 75.769882][ T5101] EXT4-fs (loop4): 1 truncate cleaned up [ 75.790920][ T29] audit: type=1326 audit(1751050521.277:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 75.802684][ T5107] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.518: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.820369][ T29] audit: type=1326 audit(1751050521.277:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 75.838172][ T5107] Quota error (device loop0): write_blk: dquota write failed [ 75.857985][ T29] audit: type=1326 audit(1751050521.277:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d25ae929 code=0x7ffc0000 [ 75.865464][ T5107] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 75.889018][ T29] audit: type=1326 audit(1751050521.277:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d25ad290 code=0x7ffc0000 [ 75.905906][ T5107] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.518: Failed to acquire dquot type 0 [ 75.929338][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.933793][ T5107] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.518: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.952133][ T5101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.962638][ T5107] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.518: Invalid inode bitmap blk 0 in block_group 0 [ 75.984208][ T3982] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.984556][ T3982] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 76.003526][ T5107] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 76.024883][ T5107] EXT4-fs (loop0): 1 orphan inode deleted [ 76.032490][ T5107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.057073][ T5107] futex_wake_op: syz.0.518 tries to shift op by -1; fix this program [ 76.532049][ T5128] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 76.539821][ T5128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.525'. [ 76.562894][ T5130] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.609174][ T5132] loop1: detected capacity change from 0 to 128 [ 76.670394][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.711147][ T5140] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.746597][ T5140] wg2: left promiscuous mode [ 76.751366][ T5140] wg2: left allmulticast mode [ 76.757095][ T5146] loop4: detected capacity change from 0 to 164 [ 76.763643][ T5142] loop3: detected capacity change from 0 to 512 [ 76.776625][ T5145] loop0: detected capacity change from 0 to 512 [ 76.788846][ T5146] Unable to read rock-ridge attributes [ 76.802914][ T5140] wg2: entered promiscuous mode [ 76.807883][ T5140] wg2: entered allmulticast mode [ 76.814998][ T5145] EXT4-fs: Ignoring removed orlov option [ 76.831327][ T5146] Unable to read rock-ridge attributes [ 76.837386][ T5142] EXT4-fs: Ignoring removed orlov option [ 76.858511][ T5145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.869002][ T5142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.901553][ T5145] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.928240][ T5142] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.958087][ T5142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.533: bg 0: block 248: padding at end of block bitmap is not set [ 76.975962][ T5145] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.530: bg 0: block 248: padding at end of block bitmap is not set [ 76.995735][ T5155] loop4: detected capacity change from 0 to 1024 [ 77.026077][ T5145] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.530: Failed to acquire dquot type 1 [ 77.045425][ T5142] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.533: Failed to acquire dquot type 1 [ 77.067594][ T5155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.088317][ T5145] EXT4-fs (loop0): 1 truncate cleaned up [ 77.094663][ T5142] EXT4-fs (loop3): 1 truncate cleaned up [ 77.109553][ T5145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.127205][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.160597][ T5145] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.171948][ T5142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.209387][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.284588][ T5165] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.292494][ T5163] loop4: detected capacity change from 0 to 128 [ 77.312081][ T5165] wg2: left promiscuous mode [ 77.316770][ T5165] wg2: left allmulticast mode [ 77.325086][ T5165] wg2: entered promiscuous mode [ 77.330028][ T5165] wg2: entered allmulticast mode [ 77.405584][ T5167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.538'. [ 77.486375][ T5169] loop0: detected capacity change from 0 to 128 [ 77.574796][ T5177] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.591222][ T5176] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 77.611915][ T5180] 9pnet_fd: Insufficient options for proto=fd [ 77.634210][ T5176] loop0: detected capacity change from 0 to 512 [ 77.665098][ T5176] EXT4-fs (loop0): 1 orphan inode deleted [ 77.674146][ T5176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.690293][ T3979] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 77.712447][ T5176] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.771606][ T5192] loop2: detected capacity change from 0 to 512 [ 77.778936][ T5192] EXT4-fs: Ignoring removed orlov option [ 77.786563][ T5192] ================================================================== [ 77.787218][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.794773][ T5192] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lrus_cpu [ 77.794834][ T5192] [ 77.794841][ T5192] write to 0xffff888237d26f10 of 8 bytes by task 36 on cpu 1: [ 77.794858][ T5192] invalidate_bh_lrus_cpu+0x89/0xc0 [ 77.828964][ T5192] lru_add_drain_per_cpu+0x55/0x70 [ 77.834122][ T5192] process_scheduled_works+0x4ce/0x9d0 [ 77.839612][ T5192] worker_thread+0x582/0x770 [ 77.844229][ T5192] kthread+0x486/0x510 [ 77.848401][ T5192] ret_from_fork+0xda/0x150 [ 77.852923][ T5192] ret_from_fork_asm+0x1a/0x30 [ 77.857817][ T5192] [ 77.860154][ T5192] read to 0xffff888237d26f10 of 8 bytes by task 5192 on cpu 0: [ 77.867711][ T5192] has_bh_in_lru+0x35/0x1f0 [ 77.872247][ T5192] smp_call_function_many_cond+0x389/0xbf0 [ 77.878070][ T5192] on_each_cpu_cond_mask+0x3c/0x80 [ 77.883198][ T5192] invalidate_bh_lrus+0x2a/0x30 [ 77.888083][ T5192] set_blocksize+0x24f/0x310 [ 77.892706][ T5192] sb_set_blocksize+0x7a/0x100 [ 77.897517][ T5192] ext4_fill_super+0x12ab/0x34e0 [ 77.902478][ T5192] get_tree_bdev_flags+0x291/0x300 [ 77.907618][ T5192] get_tree_bdev+0x1f/0x30 [ 77.912071][ T5192] ext4_get_tree+0x1c/0x30 [ 77.916518][ T5192] vfs_get_tree+0x54/0x1d0 [ 77.920978][ T5192] do_new_mount+0x207/0x680 [ 77.925511][ T5192] path_mount+0x4a4/0xb20 [ 77.929867][ T5192] __se_sys_mount+0x28f/0x2e0 [ 77.934558][ T5192] __x64_sys_mount+0x67/0x80 [ 77.939167][ T5192] x64_sys_call+0xd36/0x2fb0 [ 77.943803][ T5192] do_syscall_64+0xd2/0x200 [ 77.948322][ T5192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.954276][ T5192] [ 77.956747][ T5192] value changed: 0xffff888106be0b60 -> 0x0000000000000000 [ 77.963867][ T5192] [ 77.966198][ T5192] Reported by Kernel Concurrency Sanitizer on: [ 77.972370][ T5192] CPU: 0 UID: 0 PID: 5192 Comm: syz.2.550 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 77.984819][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.994904][ T5192] ================================================================== [ 78.007378][ T5192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.036257][ T5192] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.044203][ T5192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.550: bg 0: block 248: padding at end of block bitmap is not set [ 78.062132][ T5192] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.550: Failed to acquire dquot type 1 [ 78.074174][ T5192] EXT4-fs (loop2): 1 truncate cleaned up [ 78.101312][ T5192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.120803][ T5192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.158077][ T5197] loop0: detected capacity change from 0 to 512 [ 78.174938][ T5197] EXT4-fs: Ignoring removed orlov option [ 78.182049][ T5197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.191556][ T5197] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.199190][ T5197] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.551: bg 0: block 248: padding at end of block bitmap is not set [ 78.214165][ T5197] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.551: Failed to acquire dquot type 1 [ 78.226342][ T5197] EXT4-fs (loop0): 1 truncate cleaned up [ 78.232738][ T5197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.245699][ T5197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.