last executing test programs: 4.093597405s ago: executing program 4 (id=583): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x8000}, 0x18) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 3.480178833s ago: executing program 4 (id=591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000eb4024a8970000000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r10, &(0x7f0000000200)='~', 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20004054}, 0x408c014) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x200, 0x2, 0x1}, 0x18) fspick(r12, &(0x7f00000007c0)='./bus\x00', 0x1) r13 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x80) write$tcp_congestion(r13, 0x0, 0x0) close(r13) 2.909489471s ago: executing program 2 (id=595): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0008257000fc02e0a980000800060008000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mlockall(0x3) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 2.578230205s ago: executing program 3 (id=602): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r0}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 2.514056866s ago: executing program 4 (id=603): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}}], 0x1, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='kfree\x00', r6, 0x0, 0x7}, 0x18) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.375942008s ago: executing program 1 (id=604): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}}], 0x1, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='kfree\x00', r7, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.282826139s ago: executing program 0 (id=605): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x4, 0x1, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x2b, @multicast2, 0x4e23, 0x2, 'sh\x00', 0x30, 0x4, 0x65}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001c0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000c40)) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) 2.282124069s ago: executing program 3 (id=606): r0 = syz_socket_connect_nvme_tcp() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000740)=0xffffffff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) write$qrtrtun(r1, &(0x7f0000001880)="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", 0x45b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x68, 0x66, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x2, 0x0, 0x0, {[@md5sig={0x13, 0x12, "60b2550ebb2899fb6ab7e311dd882349"}, @timestamp={0x8, 0xa, 0x6, 0x5}, @exp_fastopen={0xfe, 0x11, 0xf989, "d1932b2572ce7088f1644a02db"}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0xa, 0xad92, 0x400}]}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xa7, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000680)="7392c26845604262771cd89124a8a81a3a2ef3c163a861fc06b9d84db460d6f3d7dd4dbe8342815fed3399ed9f4330fdbdefb33ac2b90824730c0307d22eecb28a9710ff1f3cc87397092ad4e1371fe5a8b29a7a474a20e2a860ce8ec2b2bc065309888d2276fb69c807632f5c0c18e8d6f767b20ab945a596a51c864e883a28da", 0x81}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="4d53b3f2c241586591f7f439697caea3c74cc578f2c65f449712465ab8bbb9bd241f2c5089e2eded5923362cd4b7b4f744c8536b41eb350ecc984dc8a52aea52361261f13b851021f2985852ba0516f05dc09a579b358029639d73b4c6c309ad39cfb1ee758ff7acbf9b064e9228d64736204894b3a6e23d2a5f7fec3db99d4d3a0116ee99518d790bd659c8c28e15a95505130ae16c5e", 0x97}], 0x3, 0x81, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') alarm(0x6) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000001d00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8012, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x272, &(0x7f0000000c80)="$eJzs3T9olGccB/Dfe3+SpgklbZdC6R8opbSBkA6FQpd2aSFQSiil0AoRESdJhJjglnNycdBZJZNLEDejo7gEF8E1aoa4OBgcDA46nNy9F7lcLuaSS+7Vu88HLu89eZ73eZ6D+z7vBfI+F0DPGo6IXyMiHxEjEVGMiKS+wdfpY7hWXBhYnowol/9+llTbpeXU5nmDEVGKiJ8jCpt1c0v/r71Y+eO787PFb68u/TfQqddXb31t9c+NK3+duzH+41yu9ruh2rH+dews2fOYzc4oJBGf7Lmn90dSyHoGtGLizPUHldx/GhHfVPNfjFwtshdm+u4U44fLO5178en9zzs5V+DglcvFyjWwVAZ6Tq76GTjJjUZE+jyXGx1NP8M/zCdxcnrm9MiJ6dmp41mvVMABSErp372rv9/qvznYkP8n+TT/LfnpkGcKHIpK/v+ZWHxUeb6Rz3o2QEd8kR4q+R85Ov99yD90lb4W2sg/9C75h94l/9AF9pld+YfeJf/Q3YpvqWs7//7HG95db8Jfalrt+g+9az/5d8mH7tCQ/0zuxwWyUZ9/AKC3lPuzvgMZyErW6w8AAAAAAAAAAAAAAAAAALDdwsDy5OajU2PevRSx/lu6sWD9+P3V2nz1+4gjPqj+/PB5smX/weQA9iM88lWbHbTpWsZ3X3/0ONvx7315OP2e3VrccW+7+amIUqXxWKGw/f2f1N5/+/fxLvXFY20OsEdJQ/mXfzs7fqNXi9mOP74Scbuy/ow1W/9y8Vn12Hz9Gdplf/VWnHrZZgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0zOsAAAD//9m0atw=") syz_clone(0x66000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fedbdf2501000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000001e00)={&(0x7f0000000600), 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) add_key$keyring(&(0x7f0000001d40), &(0x7f0000001840)={'syz', 0x2}, 0x0, 0x0, r3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @void}, 0x10) iopl(0xa) 2.22013947s ago: executing program 2 (id=607): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x4, 0x1, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x2b, @multicast2, 0x4e23, 0x2, 'sh\x00', 0x30, 0x4, 0x65}, 0x2c) r5 = epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001c0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000c40)) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) 2.127107421s ago: executing program 4 (id=608): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000480)='mem_connect\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1}) connect$llc(r0, &(0x7f0000000600)={0x1a, 0x33a, 0x10, 0x6, 0x6, 0x7, @random="c7676d86128b"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) socket(0x10, 0x3, 0x0) 1.883534664s ago: executing program 1 (id=609): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x793, &(0x7f0000000880)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}]}, @NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x3f0, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "a797d6c7a498d778534332599cdf2e2ca3fa17af5d9ae3147c9864ee23b0b9e2a945f9d3785357035b1c76d3f3638e7cc051638b2678f95340a7f693aa42d78950b57aba5381d079f7b589b2fd1ceee27738c06f6263c65d53ee42c4325f878b35640b818d4c4c"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "97a3fd3dbdceeb13350491f5c4dcea8a941273fdba6fb51cd45f9d159b2723add71a4a370136b25d24ae9fdf1206d2c97a601aaf4c8b67ee0210419e286979a05e0adfd5e0208001192c54389f51f1fb9c4ea86f4d2ef2215b4dab9a3190f7f66de990fa9b698a4c2aa3cb0d3043263d484c7e40a26fd1cfa7e22fc6763d6c793b690e8a46eb71305615e01f33b10beb22f0c2f561"}]}, @NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x64, 0x1, "da051d1c1dfc85fac1560e04df3fafb7114842f7c9cbcf9a35748ae164a63e479376334394021d931cf8c989a49655beb3419c6bbfbb0607e76bfa5bee26e688842cd7ec194e887cff750b0901501777b2fd3b4aba1b562d711d12a36f4fbe87"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "6fcab027e5efde5f7bebdd948517306999d5c4f807745caf9cc35cadaf62dd5bd89868b37af3e714536bc39b48137e3ff75b78ec23d066890ae05b9a4dd564f3ee45f12e7aa26069b21eca4e335bc00ffa9d7c7b9231d771407292793916860cf89af3ffb86e0688e194f2ac97a293e81b5a84308551ecd2836444e086cb99358e28d8094e6626425c0d9f71addbb695aea0adcf0c810998aa047aa7818a48545866d011"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x2c, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x18, 0x4, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0xb200bb14a755cf77, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xbf, 0x8, "5828e36be723f06075b77ee231dae74fd63f96f98e6c6b4a9b8c1cafafeecaeae35a82ff989933abaf7d000bc978b8b01b2f831879188d9b2ee4671a05a14ceb85ba9ab032bf05891550946c7cb4816afafd258ee3e3b5d870dc791e044d38352c9ae5717093ff1ca3d7d54f59cf598ca625b035d2fbcc250bf22de05782a53a43065ca0e15041f566fbe6f7258d033e18ba5e35a26d09cf095e053794d078753edfe952915df00e2ba8d5e637bc1a3cece741463fc59d9bc89896"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7b0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.817053875s ago: executing program 0 (id=610): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.origin\x00') sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x2000004) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_continue}]}, 0xfc, 0x49e, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x57) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x40000000000}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22018002, &(0x7f0000000300)={[], [{@dont_measure}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r9, 0xfffffffffffffff9, 0x1) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x0, 0xe, 0x4, 0x1, 0x48, 0x2, &(0x7f0000000700)="c99b8b14c6190c364bde510f74671f2069c7d97c49df316bab10a1c36b103c3ebd27e0347ad0b72e87824a264a86969b6c3a3542843c08e29ad4802592f9679616681bcda666b281"}) sendmsg$unix(r6, &(0x7f0000000340)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfe42, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r6, r6, r6, r6, r6, r6, r6]}}], 0x30, 0x4048015}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 1.794941406s ago: executing program 3 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = epoll_create(0xa60c) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x4) 1.742215506s ago: executing program 1 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = epoll_create(0xa60c) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x4) 1.725213137s ago: executing program 3 (id=613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000eb4024a8970000000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r10, &(0x7f0000000200)='~', 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20004054}, 0x408c014) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x200, 0x2, 0x1}, 0x18) fspick(r12, &(0x7f00000007c0)='./bus\x00', 0x1) r13 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x80) write$tcp_congestion(r13, 0x0, 0x0) close(r13) 1.637247328s ago: executing program 1 (id=614): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000480)='mem_connect\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1}) connect$llc(r1, &(0x7f0000000600)={0x1a, 0x33a, 0x10, 0x6, 0x6, 0x7, @random="c7676d86128b"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x1}, 0x18) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.613941188s ago: executing program 0 (id=615): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x8000}, 0x18) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 1.569431949s ago: executing program 2 (id=616): r0 = io_uring_setup(0x669, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600", 0x82}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402", 0x66}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4", 0x2b}, {&(0x7f0000000740)="c8605474ee573ad5ad5acedf22046d983c7964dad745eb7c8eb102c0d2b166382d3f325806513b1eb3fe7b135bfef85013c74b374f5892a7254e3405ebe8d6125ace8414fc44456c1c521ce19dae4a7f37f08f5e7b686c02967dfb02fa1ec528de641f95606c3be81b643b62d206a8aadea3d766", 0x74}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1f9}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8", 0x50}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) 1.542587969s ago: executing program 2 (id=617): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}}], 0x1, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='kfree\x00', r7, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.344458142s ago: executing program 0 (id=618): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0008257000fc02e0a980000800060008000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mlockall(0x3) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 733.21147ms ago: executing program 1 (id=619): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}}], 0x1, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, 0x0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 726.24194ms ago: executing program 4 (id=620): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$eJzs3c9vG1kdAPDvTOJukmZxFjgsK7Gs2EVJBHWSDd2NOCwgITitBCz3EhI3iuLEVeLsNtEKUvUPQEIIkLjAiQsSfwAI9cQZIVWCOwIEQtDCgUNhkO1xmho7cVX/QM7nI73OD9v5fl/ceZ733sQTwKX1SkQsRESWZdliRBTz/Wle4qRZ6s97+OD9jXpJIsve+VsSSXPfTOtnPZcvr+Yvm4qIr34p4hvJ/8Y9ODreWa9Uyvv59lJtN3mUZcfXtnfXt8pb5b3V1ZU31t5cu7623Jd6zkXEW1/40/e+/ZMvvvXLT733+xt/Wfhms4JN9Xr1JVCbZtULjd9Fy2RE7A8i2IhMNmrYdH3EuQAAcL76+f4HI+LjEbEYxZhonM0BAAAA4yT77Gw8SprzfwAAAMB4SiNiNpK01LyMM2YjTUul5jW8H46ZtFI9qH0yK56OF8xFIb25XSkv59cOzEUhqW+v5NfYtrZfb9tejYgXIuK7xenGdmmjWtkc5cAHAAAAXCJXH/f/G38O+89is/8PAAAAjJm5UScAAAAADJz+PwAAAIw//X8AAAAYa19+++16yVr3v9589+hwp/rutc3ywU5p93CjtFHdv1Xaqla3Gt/Zt3vRz6tUq7c+HXuHt5dq5YPa0sHR8Y3d6uFe7cb2E7fABgAAAIbohY/d+10SESefmU5b+67ky0JENnH2yZNDTw8YoLR9x3mjdH8cbC7AcE2MOgFgZJ76lP5XvxhMIsDQFUadADByF7UDXYcFft3/XAAAgMGY/8jp/H+jxJn5/2SkmQGDls//J451uHzM/8Pl1cv83+LdISQCDF3hvDMAnQIYe2kPh/qzz/9n2VMlBQAA9N1soyRpKe8HzEaalkoRzzduC1BIbm5XyssR8YGI+G2x8Fx9e6XxysTwAAAAAAAAAAAAAAAAAAAAAAAAAAD0KMuSyAAAAICxFpH+Ocnv/zVffG22fXzgSvKvYmMZEe/98J3v316v1fZX6vv/frq/9oN8/+ujGMEAAAAA2rX66a1+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD008MH72+0yjDj/vXzETHXKf5kTDWWU1GIiJl/JDF55nVJREz0If7JnYh4sVP8pJ5WzOVZtMdPI2J6xPGv9iE+XGb36u3P5zodf2m80lh2Pv4m8/Ksurd/6Wn7N9Gl/Xu+xxgv3f/ZUtf4dyJemuzc/rTiJ13iv9pj/K9/7fi422PZjyPmO37+JE/EWqrt3lo6ODq+tr27vlXeKu+trq68sfbm2vW15aWb25Vy/m/HGN/56M//c179Z7rEn7ug/q/1WP9/37/94EPN1ULbQ4X4UZYtvNr5/X+x+RtqOBu/9dn3ifxzoL4931o/aa6f9fJPf/PyefXf7FL/i97/hR7rv/iVu3/o8akAwBAcHB3vrFcq5f1xW7ny/5GGlfrKdAwx6Hp0fijN/8sPre7fygMOI9ZU32ONqEECAAAG5vFJfz6BAAAAAAAAAAAAAAAAAAAAAAzdRV8DFn34OrH2mCejqSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLn+GwAA//+6zNbf") sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}}], 0x1, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='kfree\x00', r7, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 642.766471ms ago: executing program 2 (id=621): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x4, 0x1, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x2b, @multicast2, 0x4e23, 0x2, 'sh\x00', 0x30, 0x4, 0x65}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001c0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000c40)) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) 635.712791ms ago: executing program 3 (id=622): r0 = syz_socket_connect_nvme_tcp() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000740)=0xffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000001880)="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", 0x45b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x68, 0x66, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x2, 0x0, 0x0, {[@md5sig={0x13, 0x12, "60b2550ebb2899fb6ab7e311dd882349"}, @timestamp={0x8, 0xa, 0x6, 0x5}, @exp_fastopen={0xfe, 0x11, 0xf989, "d1932b2572ce7088f1644a02db"}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0xa, 0xad92, 0x400}]}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xa7, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000680)="7392c26845604262771cd89124a8a81a3a2ef3c163a861fc06b9d84db460d6f3d7dd4dbe8342815fed3399ed9f4330fdbdefb33ac2b90824730c0307d22eecb28a9710ff1f3cc87397092ad4e1371fe5a8b29a7a474a20e2a860ce8ec2b2bc065309888d2276fb69c807632f5c0c18e8d6f767b20ab945a596a51c864e883a28da", 0x81}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="4d53b3f2c241586591f7f439697caea3c74cc578f2c65f449712465ab8bbb9bd241f2c5089e2eded5923362cd4b7b4f744c8536b41eb350ecc984dc8a52aea52361261f13b851021f2985852ba0516f05dc09a579b358029639d73b4c6c309ad39cfb1ee758ff7acbf9b064e9228d64736204894b3a6e23d2a5f7fec3db99d4d3a0116ee99518d790bd659c8c28e15a95505130ae16c5e", 0x97}], 0x3, 0x81, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') alarm(0x6) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000001d00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8012, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x272, &(0x7f0000000c80)="$eJzs3T9olGccB/Dfe3+SpgklbZdC6R8opbSBkA6FQpd2aSFQSiil0AoRESdJhJjglnNycdBZJZNLEDejo7gEF8E1aoa4OBgcDA46nNy9F7lcLuaSS+7Vu88HLu89eZ73eZ6D+z7vBfI+F0DPGo6IXyMiHxEjEVGMiKS+wdfpY7hWXBhYnowol/9+llTbpeXU5nmDEVGKiJ8jCpt1c0v/r71Y+eO787PFb68u/TfQqddXb31t9c+NK3+duzH+41yu9ruh2rH+dews2fOYzc4oJBGf7Lmn90dSyHoGtGLizPUHldx/GhHfVPNfjFwtshdm+u4U44fLO5178en9zzs5V+DglcvFyjWwVAZ6Tq76GTjJjUZE+jyXGx1NP8M/zCdxcnrm9MiJ6dmp41mvVMABSErp372rv9/qvznYkP8n+TT/LfnpkGcKHIpK/v+ZWHxUeb6Rz3o2QEd8kR4q+R85Ov99yD90lb4W2sg/9C75h94l/9AF9pld+YfeJf/Q3YpvqWs7//7HG95db8Jfalrt+g+9az/5d8mH7tCQ/0zuxwWyUZ9/AKC3lPuzvgMZyErW6w8AAAAAAAAAAAAAAAAAALDdwsDy5OajU2PevRSx/lu6sWD9+P3V2nz1+4gjPqj+/PB5smX/weQA9iM88lWbHbTpWsZ3X3/0ONvx7315OP2e3VrccW+7+amIUqXxWKGw/f2f1N5/+/fxLvXFY20OsEdJQ/mXfzs7fqNXi9mOP74Scbuy/ow1W/9y8Vn12Hz9Gdplf/VWnHrZZgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0zOsAAAD//9m0atw=") syz_clone(0x66000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fedbdf2501000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000600), 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) add_key$keyring(&(0x7f0000001d40), &(0x7f0000001840)={'syz', 0x2}, 0x0, 0x0, r3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x30, 0xe1515f8735398fb, @void}, 0x10) iopl(0xa) 143.838998ms ago: executing program 1 (id=623): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x793, &(0x7f0000000880)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}]}, @NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x3f0, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "a797d6c7a498d778534332599cdf2e2ca3fa17af5d9ae3147c9864ee23b0b9e2a945f9d3785357035b1c76d3f3638e7cc051638b2678f95340a7f693aa42d78950b57aba5381d079f7b589b2fd1ceee27738c06f6263c65d53ee42c4325f878b35640b818d4c4c"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "97a3fd3dbdceeb13350491f5c4dcea8a941273fdba6fb51cd45f9d159b2723add71a4a370136b25d24ae9fdf1206d2c97a601aaf4c8b67ee0210419e286979a05e0adfd5e0208001192c54389f51f1fb9c4ea86f4d2ef2215b4dab9a3190f7f66de990fa9b698a4c2aa3cb0d3043263d484c7e40a26fd1cfa7e22fc6763d6c793b690e8a46eb71305615e01f33b10beb22f0c2f561"}]}, @NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x64, 0x1, "da051d1c1dfc85fac1560e04df3fafb7114842f7c9cbcf9a35748ae164a63e479376334394021d931cf8c989a49655beb3419c6bbfbb0607e76bfa5bee26e688842cd7ec194e887cff750b0901501777b2fd3b4aba1b562d711d12a36f4fbe87"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "6fcab027e5efde5f7bebdd948517306999d5c4f807745caf9cc35cadaf62dd5bd89868b37af3e714536bc39b48137e3ff75b78ec23d066890ae05b9a4dd564f3ee45f12e7aa26069b21eca4e335bc00ffa9d7c7b9231d771407292793916860cf89af3ffb86e0688e194f2ac97a293e81b5a84308551ecd2836444e086cb99358e28d8094e6626425c0d9f71addbb695aea0adcf0c810998aa047aa7818a48545866d011"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x2c, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x18, 0x4, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0xb200bb14a755cf77, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xbf, 0x8, "5828e36be723f06075b77ee231dae74fd63f96f98e6c6b4a9b8c1cafafeecaeae35a82ff989933abaf7d000bc978b8b01b2f831879188d9b2ee4671a05a14ceb85ba9ab032bf05891550946c7cb4816afafd258ee3e3b5d870dc791e044d38352c9ae5717093ff1ca3d7d54f59cf598ca625b035d2fbcc250bf22de05782a53a43065ca0e15041f566fbe6f7258d033e18ba5e35a26d09cf095e053794d078753edfe952915df00e2ba8d5e637bc1a3cece741463fc59d9bc89896"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7b0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 127.618888ms ago: executing program 0 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = epoll_create(0xa60c) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x4) 67.418769ms ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = epoll_create(0xa60c) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x4) 60.774119ms ago: executing program 2 (id=626): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.origin\x00') sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x2000004) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_continue}]}, 0xfc, 0x49e, &(0x7f0000000b00)="$eJzs3MtvG8UfAPDvbpw+f78mlPJoqUSgICIeSZO20AMcQCBxAAkEh3IMiVuVug1qgkSrClKEyhFV4o44IvEXcOKEgBMSFw5wR5UqqJD6uGC09m5qGzs0rRM7+PORnMx4xzvzzezY4xk7AQyssexHEvG/iPglIkbq2eYCY/Vf166cm71+5dxsEtXqG78ntXJXr5ybLYoWj9ueZ8bTiPTjJK+k2cKZsydmKpXy6Tw/uXjy3cmFM2efOn5y5lj5WPnU9OHDBw9MPfP09KGmxx26zTiz+K7u+WB+7+6X37r46uyRi29//1XW3jQ/3hhHt4xlgf9RrWk99mi3K+uxv6o340xK2c8bbaKm3wxFRNZdw7XxPxJDtVzdSLz0UU8bB6yp7Dl7c+fDS1XgPyyJXrcA6I3ihT57/5vfhtdp6tEXLj9ffwOUxX4tv9WPlJbXBtbyDzIWEUeWbnye3aJlHaLqHTQAsAa+yeY/TzbN//L5Rxr3NpTbke8NjUbEXRGxMyLujohdEXFPRK3sfRFx/yrrb90a+uc+THopWvekuiib/z2b7201z/+K2V+MDuW5/9fiH06OHq+U9+d/k/EY3pzlp9qdvDjFiz992qn+xvlfdsvqL+aC+UkulTY3xz83szjTrUnp5fMRe0rt4k+WdwKyundHxJ7VnXpHkTj++Jd7OxX69/hXUFpdg9qpfhHxWL3/l6Il/kKy8v7k5JaolPdP1q+KoTZ1/PDjhdc61X9H8XdB1v/bmq//lhIjfyaN+7ULq6/jwq+fdNxbLd3i9d8ou/43JW/W9nQ35fe9P7O4eHoqYlPySi3fdP/0zccW+aJ8Fv/4vvbjf2f+mCz+ByJib8TPxbB7MO+7hyLi4YjYt0L8373wyDudjvVD/8+1ff5bvv5Hm/t/9YmhE99+3an+1viTPH+zRNb/B2up8fye2vNfbmuH83Zuzpa8xO1ezQAAALDxpLXPxifpxHI6TScm6p/h3xXb0sr8wuITR+ffOzVX/wz9aAynxfrnSMN66FSylJ+xnp/O14qL4wfydePPhrYmSVTKE7Pzlbkexw6DbnuH8Z/5rd1idkQ8t64tBNZUF/bRgA2qdfynPWoHsP68/sPgMv5hcBn/MLiK8f96w30ftpTpsBcAbHBe/2FwGf8wuJbH//netgNYf17/YSC1+5J88T8O7uAr/3eUKK3w7f0+TRSro/3SnhNJRKxtFZH2R6QdE5H/E4t+aU/TFX5LvXO9eptVlFYY3bea6M3zEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLf9HQAA//9H8ud7") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x57) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x40000000000}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22018002, &(0x7f0000000300)={[], [{@dont_measure}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r9, 0xfffffffffffffff9, 0x1) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x0, 0xe, 0x4, 0x1, 0x48, 0x2, &(0x7f0000000700)="c99b8b14c6190c364bde510f74671f2069c7d97c49df316bab10a1c36b103c3ebd27e0347ad0b72e87824a264a86969b6c3a3542843c08e29ad4802592f9679616681bcda666b281"}) sendmsg$unix(r6, &(0x7f0000000340)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfe42, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r6, r6, r6, r6, r6, r6, r6]}}], 0x30, 0x4048015}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 692.63µs ago: executing program 0 (id=627): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x4, 0x1, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x2b, @multicast2, 0x4e23, 0x2, 'sh\x00', 0x30, 0x4, 0x65}, 0x2c) r5 = epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001c0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000c40)) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) 0s ago: executing program 4 (id=628): r0 = io_uring_setup(0x669, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600", 0x82}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402", 0x66}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4", 0x2b}, {&(0x7f0000000740)="c8605474ee573ad5ad5acedf22046d983c7964dad745eb7c8eb102c0d2b166382d3f325806513b1eb3fe7b135bfef85013c74b374f5892a7254e3405ebe8d6125ace8414fc44456c1c521ce19dae4a7f37f08f5e7b686c02967dfb02fa1ec528de641f95606c3be81b643b62d206a8aadea3d766", 0x74}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1f9}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8", 0x50}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): loop1): orphan cleanup on readonly fs [ 58.405594][ T4031] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.420659][ T4026] ext2 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.430627][ T4033] Cannot find add_set index 0 as target [ 58.465363][ T4050] loop3: detected capacity change from 0 to 256 [ 58.485167][ T4031] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 58.485287][ T4050] FAT-fs (loop3): bogus logical sector size 0 [ 58.498238][ T4050] FAT-fs (loop3): Can't find a valid FAT filesystem [ 58.505715][ T4031] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.172: casefold flag without casefold feature [ 58.519900][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 58.530424][ T4031] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.172: couldn't read orphan inode 16 (err -117) [ 58.669449][ T4091] loop1: detected capacity change from 0 to 512 [ 58.691926][ T4093] loop0: detected capacity change from 0 to 128 [ 58.718700][ T4083] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 58.726747][ T4083] FAT-fs (loop0): Filesystem has been set read-only [ 59.522304][ T4083] bio_check_eod: 17 callbacks suppressed [ 59.522322][ T4083] syz.0.182: attempt to access beyond end of device [ 59.522322][ T4083] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.541959][ T4091] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.543068][ T4083] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.557828][ T4083] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.586708][ T4091] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.601593][ T4091] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.644519][ T4087] syz.0.182: attempt to access beyond end of device [ 59.644519][ T4087] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 59.657795][ T4087] Buffer I/O error on dev loop0, logical block 2065, async page read [ 59.666367][ T4091] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 59.673573][ T4091] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.184: casefold flag without casefold feature [ 59.689447][ T4091] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.184: couldn't read orphan inode 16 (err -117) [ 59.708300][ T4087] syz.0.182: attempt to access beyond end of device [ 59.708300][ T4087] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 59.721750][ T4087] Buffer I/O error on dev loop0, logical block 2066, async page read [ 59.756955][ T4087] syz.0.182: attempt to access beyond end of device [ 59.756955][ T4087] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 59.771110][ T4087] syz.0.182: attempt to access beyond end of device [ 59.771110][ T4087] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 59.786626][ T4087] syz.0.182: attempt to access beyond end of device [ 59.786626][ T4087] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 59.801652][ T4087] syz.0.182: attempt to access beyond end of device [ 59.801652][ T4087] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 59.816191][ T4087] syz.0.182: attempt to access beyond end of device [ 59.816191][ T4087] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 59.829721][ T4087] syz.0.182: attempt to access beyond end of device [ 59.829721][ T4087] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 59.843975][ T4087] syz.0.182: attempt to access beyond end of device [ 59.843975][ T4087] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 59.928224][ T4112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 60.235827][ T4119] loop1: detected capacity change from 0 to 1024 [ 60.243882][ T4119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.252613][ T4119] EXT4-fs: Ignoring removed bh option [ 60.523964][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 60.523983][ T29] audit: type=1400 audit(1746330518.455:5071): avc: denied { open } for pid=4154 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.549469][ T29] audit: type=1400 audit(1746330518.455:5072): avc: denied { kernel } for pid=4154 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.583681][ T4157] loop4: detected capacity change from 0 to 512 [ 60.591687][ T29] audit: type=1400 audit(1746330518.495:5073): avc: denied { create } for pid=4133 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.611291][ T29] audit: type=1400 audit(1746330518.495:5074): avc: denied { read } for pid=4133 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.630686][ T29] audit: type=1400 audit(1746330518.495:5075): avc: denied { write } for pid=4133 comm="syz.1.197" path="socket:[6376]" dev="sockfs" ino=6376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.653797][ T29] audit: type=1400 audit(1746330518.505:5076): avc: denied { create } for pid=4154 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.674479][ T29] audit: type=1400 audit(1746330518.505:5077): avc: denied { write } for pid=4154 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.695040][ T29] audit: type=1400 audit(1746330518.515:5078): avc: denied { mounton } for pid=4154 comm="syz.4.199" path="/31/bus" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.802468][ T29] audit: type=1400 audit(1746330518.725:5079): avc: denied { sqpoll } for pid=4158 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.861664][ T4161] loop3: detected capacity change from 0 to 512 [ 60.888235][ T4157] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #12: comm syz.4.199: corrupted in-inode xattr: invalid ea_ino [ 60.903434][ T4161] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 60.912729][ T4161] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.937629][ T4157] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.199: couldn't read orphan inode 12 (err -117) [ 60.950694][ T4161] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 61.050857][ T4161] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.068233][ T4161] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 61.075470][ T4161] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.200: casefold flag without casefold feature [ 61.089587][ T4161] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.200: couldn't read orphan inode 16 (err -117) [ 61.109397][ T4155] Cannot find add_set index 0 as target [ 61.270692][ C1] hrtimer: interrupt took 39832 ns [ 61.320573][ T4210] loop2: detected capacity change from 0 to 128 [ 61.331902][ T4210] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 61.343637][ T4210] ext2 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.444021][ T4221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 61.578210][ T4227] loop4: detected capacity change from 0 to 512 [ 61.588920][ T4227] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.597495][ T4227] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.605746][ T4227] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.621252][ T4227] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 61.631290][ T4227] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.215: casefold flag without casefold feature [ 61.645995][ T4227] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.215: couldn't read orphan inode 16 (err -117) [ 62.186092][ T4245] loop4: detected capacity change from 0 to 128 [ 62.202484][ T4245] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 62.216633][ T4245] ext2 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.309256][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 62.425985][ T4270] loop0: detected capacity change from 0 to 512 [ 62.445131][ T4270] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.453443][ T4270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.460005][ T4264] loop3: detected capacity change from 0 to 512 [ 62.459996][ T4270] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.460211][ T4270] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 62.488345][ T4270] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.226: casefold flag without casefold feature [ 62.505115][ T4275] SELinux: policydb version 0 does not match my version range 15-34 [ 62.505432][ T4270] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.226: couldn't read orphan inode 16 (err -117) [ 62.513483][ T4275] SELinux: failed to load policy [ 62.526624][ T4264] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.535655][ T4275] loop1: detected capacity change from 0 to 512 [ 62.538233][ T4264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.552156][ T4275] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.571993][ T4264] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.633794][ T4275] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.642611][ T4280] syz.2.231 uses obsolete (PF_INET,SOCK_PACKET) [ 62.652545][ T4264] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 62.679294][ T4264] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.227: casefold flag without casefold feature [ 62.702114][ T4264] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.227: couldn't read orphan inode 16 (err -117) [ 62.716652][ T4275] EXT4-fs (loop1): 1 truncate cleaned up [ 62.772195][ T4288] loop0: detected capacity change from 0 to 128 [ 62.806534][ T4288] vfat: Unknown parameter 'shortn.' [ 62.830620][ T4295] loop2: detected capacity change from 0 to 128 [ 62.862890][ T4283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.870760][ T4283] FAT-fs (loop2): Filesystem has been set read-only [ 62.896312][ T4283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.904254][ T4283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.960490][ T4284] buffer_io_error: 14 callbacks suppressed [ 62.960505][ T4284] Buffer I/O error on dev loop2, logical block 2065, async page read [ 62.983375][ T4284] Buffer I/O error on dev loop2, logical block 2066, async page read [ 62.991735][ T4284] Buffer I/O error on dev loop2, logical block 2067, async page read [ 63.032596][ T4284] Buffer I/O error on dev loop2, logical block 2068, async page read [ 63.041019][ T4314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'. [ 63.043580][ T4284] Buffer I/O error on dev loop2, logical block 2069, async page read [ 63.072593][ T4284] Buffer I/O error on dev loop2, logical block 2070, async page read [ 63.090079][ T4284] Buffer I/O error on dev loop2, logical block 2071, async page read [ 63.101018][ T4314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.111139][ T4284] Buffer I/O error on dev loop2, logical block 2072, async page read [ 63.119452][ T4316] loop3: detected capacity change from 0 to 1024 [ 63.119728][ T4314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.127133][ T4316] EXT4-fs: Ignoring removed nobh option [ 63.135867][ T4284] Buffer I/O error on dev loop2, logical block 2065, async page read [ 63.140390][ T4316] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.148588][ T4314] FAULT_INJECTION: forcing a failure. [ 63.148588][ T4314] name failslab, interval 1, probability 0, space 0, times 0 [ 63.170434][ T4314] CPU: 0 UID: 0 PID: 4314 Comm: syz.4.241 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 63.170469][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.170551][ T4314] Call Trace: [ 63.170559][ T4314] [ 63.170569][ T4314] __dump_stack+0x1d/0x30 [ 63.170595][ T4314] dump_stack_lvl+0xe8/0x140 [ 63.170619][ T4314] dump_stack+0x15/0x1b [ 63.170639][ T4314] should_fail_ex+0x265/0x280 [ 63.170674][ T4314] should_failslab+0x8c/0xb0 [ 63.170782][ T4314] kmem_cache_alloc_noprof+0x50/0x310 [ 63.170816][ T4314] ? security_file_alloc+0x32/0x100 [ 63.170847][ T4314] security_file_alloc+0x32/0x100 [ 63.170874][ T4314] init_file+0x5c/0x1d0 [ 63.170952][ T4314] alloc_empty_file+0x8b/0x200 [ 63.170990][ T4314] alloc_file_pseudo+0xc6/0x160 [ 63.171008][ T4284] Buffer I/O error on dev loop2, logical block 2066, async page read [ 63.171034][ T4314] __shmem_file_setup+0x1b9/0x1f0 [ 63.171062][ T4314] shmem_file_setup+0x3b/0x50 [ 63.171192][ T4314] __se_sys_memfd_create+0x2c3/0x590 [ 63.171260][ T4314] __x64_sys_memfd_create+0x31/0x40 [ 63.171283][ T4314] x64_sys_call+0x122f/0x2fb0 [ 63.171311][ T4314] do_syscall_64+0xd0/0x1a0 [ 63.171407][ T4314] ? clear_bhb_loop+0x25/0x80 [ 63.171434][ T4314] ? clear_bhb_loop+0x25/0x80 [ 63.171480][ T4314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.171514][ T4314] RIP: 0033:0x7f72c963e969 [ 63.171566][ T4314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.171589][ T4314] RSP: 002b:00007f72c7ca6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 63.171675][ T4314] RAX: ffffffffffffffda RBX: 0000000000000539 RCX: 00007f72c963e969 [ 63.171691][ T4314] RDX: 00007f72c7ca6ef0 RSI: 0000000000000000 RDI: 00007f72c96c1444 [ 63.171707][ T4314] RBP: 0000200000001540 R08: 00007f72c7ca6bb7 R09: 00007f72c7ca6e40 [ 63.171722][ T4314] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 63.171749][ T4314] R13: 00007f72c7ca6ef0 R14: 00007f72c7ca6eb0 R15: 0000200000000680 [ 63.171774][ T4314] [ 63.240215][ T4314] loop4: detected capacity change from 0 to 1024 [ 63.246489][ T4316] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 63.253632][ T4314] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.419816][ T4316] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.242: couldn't read orphan inode 11 (err -117) [ 63.446559][ T4316] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.242: Invalid block bitmap block 0 in block_group 0 [ 63.461326][ T4316] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.242: Failed to acquire dquot type 0 [ 63.485513][ T4314] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.241: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 63.504846][ T4314] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.241: Bad quota inode: 3, type: 0 [ 63.516045][ T4314] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 63.531720][ T4314] EXT4-fs (loop4): mount failed [ 63.562215][ T4327] loop2: detected capacity change from 0 to 4096 [ 63.576354][ T4072] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm kworker/u8:29: Invalid inode table block 8589934593 in block_group 0 [ 63.604002][ T4330] loop0: detected capacity change from 0 to 512 [ 63.613856][ T4330] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 63.623333][ T4330] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.630374][ T4330] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.647338][ T4330] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 63.654412][ T4330] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.245: casefold flag without casefold feature [ 63.667283][ T4330] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.245: couldn't read orphan inode 16 (err -117) [ 63.723830][ T4339] loop0: detected capacity change from 0 to 128 [ 63.756621][ T4344] FAULT_INJECTION: forcing a failure. [ 63.756621][ T4344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.770042][ T4344] CPU: 1 UID: 0 PID: 4344 Comm: syz.3.252 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 63.770130][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.770144][ T4344] Call Trace: [ 63.770205][ T4344] [ 63.770212][ T4344] __dump_stack+0x1d/0x30 [ 63.770233][ T4344] dump_stack_lvl+0xe8/0x140 [ 63.770251][ T4344] dump_stack+0x15/0x1b [ 63.770273][ T4344] should_fail_ex+0x265/0x280 [ 63.770344][ T4344] should_fail_alloc_page+0xf2/0x100 [ 63.770414][ T4344] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.770448][ T4344] alloc_pages_mpol+0xb3/0x250 [ 63.770474][ T4344] alloc_pages_noprof+0x90/0x130 [ 63.770566][ T4344] __pmd_alloc+0x47/0x440 [ 63.770602][ T4344] handle_mm_fault+0x1b31/0x2ae0 [ 63.770647][ T4344] ? __rcu_read_unlock+0x4f/0x70 [ 63.770675][ T4344] do_user_addr_fault+0x3fe/0x1090 [ 63.770715][ T4344] exc_page_fault+0x54/0xc0 [ 63.770798][ T4344] asm_exc_page_fault+0x26/0x30 [ 63.770817][ T4344] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 63.770848][ T4344] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 63.770869][ T4344] RSP: 0018:ffffc90010b5fdf0 EFLAGS: 00050212 [ 63.770887][ T4344] RAX: ffff88810469dd18 RBX: 0000000000000010 RCX: 0000000000000010 [ 63.770901][ T4344] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: ffffc90010b5fe20 [ 63.770957][ T4344] RBP: 00002000000015c0 R08: 0000000000000766 R09: 0000000000000000 [ 63.770970][ T4344] R10: 0001c90010b5fe20 R11: 0001c90010b5fe2f R12: 0000000000000010 [ 63.770981][ T4344] R13: 0000000000000000 R14: ffffc90010b5fe20 R15: 00002000000015c0 [ 63.770998][ T4344] _copy_from_user+0x6f/0xb0 [ 63.771019][ T4344] __sys_bpf+0x178/0x790 [ 63.771055][ T4344] __x64_sys_bpf+0x41/0x50 [ 63.771120][ T4344] x64_sys_call+0x2478/0x2fb0 [ 63.771188][ T4344] do_syscall_64+0xd0/0x1a0 [ 63.771214][ T4344] ? clear_bhb_loop+0x25/0x80 [ 63.771239][ T4344] ? clear_bhb_loop+0x25/0x80 [ 63.771268][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.771287][ T4344] RIP: 0033:0x7fe2d238e969 [ 63.771340][ T4344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.771361][ T4344] RSP: 002b:00007fe2d09f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.771396][ T4344] RAX: ffffffffffffffda RBX: 00007fe2d25b5fa0 RCX: 00007fe2d238e969 [ 63.771407][ T4344] RDX: 0000000000000010 RSI: 00002000000015c0 RDI: 0000000000000008 [ 63.771418][ T4344] RBP: 00007fe2d09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.771429][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.771439][ T4344] R13: 0000000000000000 R14: 00007fe2d25b5fa0 R15: 00007fffc2aef048 [ 63.771459][ T4344] [ 64.127342][ T4354] loop2: detected capacity change from 0 to 512 [ 64.136762][ T4357] loop3: detected capacity change from 0 to 128 [ 64.138969][ T4358] loop1: detected capacity change from 0 to 128 [ 64.157250][ T4354] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #12: comm syz.2.255: corrupted in-inode xattr: invalid ea_ino [ 64.160582][ T4349] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.177592][ T4354] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.255: couldn't read orphan inode 12 (err -117) [ 64.178474][ T4349] FAT-fs (loop1): Filesystem has been set read-only [ 64.204517][ T4349] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.211169][ T4354] Cannot find add_set index 0 as target [ 64.212492][ T4349] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.312158][ T4368] loop0: detected capacity change from 0 to 512 [ 64.350415][ T4368] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 64.362774][ T4368] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.369282][ T4370] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 64.387962][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 64.396861][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 64.432424][ T4368] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.451948][ T4380] netlink: 'syz.4.265': attribute type 10 has an invalid length. [ 64.482676][ T4380] team0: left allmulticast mode [ 64.488026][ T4380] batman_adv: batadv0: Adding interface: team0 [ 64.494272][ T4380] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.519535][ T4380] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 64.540760][ T4368] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 64.569705][ T4387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 64.595725][ T4387] capability: warning: `syz.1.267' uses deprecated v2 capabilities in a way that may be insecure [ 64.613055][ T4368] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.260: casefold flag without casefold feature [ 64.638671][ T4368] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.260: couldn't read orphan inode 16 (err -117) [ 64.646950][ T4387] loop1: detected capacity change from 0 to 512 [ 64.695400][ T4387] EXT4-fs (loop1): too many log groups per flexible block group [ 64.703275][ T4387] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 64.710724][ T4399] loop4: detected capacity change from 0 to 512 [ 64.717522][ T4387] EXT4-fs (loop1): mount failed [ 64.738530][ T4399] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #12: comm syz.4.271: corrupted in-inode xattr: invalid ea_ino [ 64.758323][ T4399] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.271: couldn't read orphan inode 12 (err -117) [ 64.778572][ T4410] FAULT_INJECTION: forcing a failure. [ 64.778572][ T4410] name failslab, interval 1, probability 0, space 0, times 0 [ 64.784495][ T4399] Cannot find add_set index 0 as target [ 64.791355][ T4410] CPU: 0 UID: 0 PID: 4410 Comm: syz.1.275 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 64.791459][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.791477][ T4410] Call Trace: [ 64.791485][ T4410] [ 64.791550][ T4410] __dump_stack+0x1d/0x30 [ 64.791577][ T4410] dump_stack_lvl+0xe8/0x140 [ 64.791603][ T4410] dump_stack+0x15/0x1b [ 64.791623][ T4410] should_fail_ex+0x265/0x280 [ 64.791669][ T4410] should_failslab+0x8c/0xb0 [ 64.791757][ T4410] kmem_cache_alloc_noprof+0x50/0x310 [ 64.791799][ T4410] ? getname_flags+0x80/0x3b0 [ 64.791871][ T4410] getname_flags+0x80/0x3b0 [ 64.791909][ T4410] __x64_sys_renameat2+0x5f/0x90 [ 64.791945][ T4410] x64_sys_call+0x2bf6/0x2fb0 [ 64.791972][ T4410] do_syscall_64+0xd0/0x1a0 [ 64.792090][ T4410] ? clear_bhb_loop+0x25/0x80 [ 64.792248][ T4410] ? clear_bhb_loop+0x25/0x80 [ 64.792276][ T4410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.792303][ T4410] RIP: 0033:0x7f187d48e969 [ 64.792322][ T4410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.792372][ T4410] RSP: 002b:00007f187baf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 64.792396][ T4410] RAX: ffffffffffffffda RBX: 00007f187d6b5fa0 RCX: 00007f187d48e969 [ 64.792411][ T4410] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 64.792433][ T4410] RBP: 00007f187baf7090 R08: 0000000000000002 R09: 0000000000000000 [ 64.792448][ T4410] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 64.792499][ T4410] R13: 0000000000000000 R14: 00007f187d6b5fa0 R15: 00007ffda76c94f8 [ 64.792524][ T4410] [ 64.819815][ T4411] loop2: detected capacity change from 0 to 128 [ 64.866828][ T4415] loop1: detected capacity change from 0 to 128 [ 64.919014][ T4407] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.989974][ T4407] FAT-fs (loop2): Filesystem has been set read-only [ 64.997047][ T4407] bio_check_eod: 44 callbacks suppressed [ 64.997095][ T4407] syz.2.274: attempt to access beyond end of device [ 64.997095][ T4407] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 65.016683][ T4407] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 65.024658][ T4407] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 65.034111][ T4419] FAULT_INJECTION: forcing a failure. [ 65.034111][ T4419] name failslab, interval 1, probability 0, space 0, times 0 [ 65.046818][ T4419] CPU: 1 UID: 0 PID: 4419 Comm: syz.0.279 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 65.046854][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 65.046870][ T4419] Call Trace: [ 65.046877][ T4419] [ 65.046885][ T4419] __dump_stack+0x1d/0x30 [ 65.046906][ T4419] dump_stack_lvl+0xe8/0x140 [ 65.046924][ T4419] dump_stack+0x15/0x1b [ 65.047055][ T4419] should_fail_ex+0x265/0x280 [ 65.047156][ T4419] should_failslab+0x8c/0xb0 [ 65.047187][ T4419] kmem_cache_alloc_noprof+0x50/0x310 [ 65.047222][ T4419] ? security_inode_alloc+0x37/0x100 [ 65.047263][ T4419] security_inode_alloc+0x37/0x100 [ 65.047286][ T4419] inode_init_always_gfp+0x4b7/0x500 [ 65.047379][ T4419] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.047412][ T4419] alloc_inode+0x58/0x170 [ 65.047454][ T4419] do_accept+0xa0/0x3a0 [ 65.047560][ T4419] __sys_accept4+0xbf/0x140 [ 65.047610][ T4419] __x64_sys_accept4+0x51/0x60 [ 65.047664][ T4419] x64_sys_call+0x23d5/0x2fb0 [ 65.047735][ T4419] do_syscall_64+0xd0/0x1a0 [ 65.047756][ T4419] ? clear_bhb_loop+0x25/0x80 [ 65.047776][ T4419] ? clear_bhb_loop+0x25/0x80 [ 65.047797][ T4419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.047831][ T4419] RIP: 0033:0x7f465e7ce969 [ 65.047849][ T4419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.047872][ T4419] RSP: 002b:00007f465ce37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 65.047894][ T4419] RAX: ffffffffffffffda RBX: 00007f465e9f5fa0 RCX: 00007f465e7ce969 [ 65.047906][ T4419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 65.047917][ T4419] RBP: 00007f465ce37090 R08: 0000000000000000 R09: 0000000000000000 [ 65.047974][ T4419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.047984][ T4419] R13: 0000000000000000 R14: 00007f465e9f5fa0 R15: 00007fff029a2158 [ 65.048003][ T4419] [ 65.090455][ T4420] syz.1.277: attempt to access beyond end of device [ 65.090455][ T4420] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 65.108012][ T4408] syz.2.274: attempt to access beyond end of device [ 65.108012][ T4408] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 65.156417][ T4420] syz.1.277: attempt to access beyond end of device [ 65.156417][ T4420] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 65.248901][ T4423] loop3: detected capacity change from 0 to 256 [ 65.285445][ T4408] syz.2.274: attempt to access beyond end of device [ 65.285445][ T4408] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 65.305606][ T4408] syz.2.274: attempt to access beyond end of device [ 65.305606][ T4408] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 65.319074][ T4420] syz.1.277: attempt to access beyond end of device [ 65.319074][ T4420] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 65.334110][ T4408] syz.2.274: attempt to access beyond end of device [ 65.334110][ T4408] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 65.353470][ T4408] syz.2.274: attempt to access beyond end of device [ 65.353470][ T4408] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 65.361110][ T4420] syz.1.277: attempt to access beyond end of device [ 65.361110][ T4420] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 65.439206][ T4438] loop4: detected capacity change from 0 to 512 [ 65.450586][ T4438] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.462240][ T4442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.475820][ T4438] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.484286][ T4438] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.508458][ T4438] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 65.517196][ T4448] loop2: detected capacity change from 0 to 128 [ 65.523814][ T4438] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.282: casefold flag without casefold feature [ 65.537023][ T4448] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 65.537911][ T4438] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.282: couldn't read orphan inode 16 (err -117) [ 65.559702][ T29] kauditd_printk_skb: 2713 callbacks suppressed [ 65.559717][ T29] audit: type=1400 audit(1746330523.475:7779): avc: denied { create } for pid=4433 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.564176][ T4449] hsr0: entered promiscuous mode [ 65.566028][ T29] audit: type=1400 audit(1746330523.475:7780): avc: denied { accept } for pid=4433 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.609981][ T29] audit: type=1400 audit(1746330523.475:7781): avc: denied { read } for pid=4440 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.643754][ T29] audit: type=1400 audit(1746330523.535:7782): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.666458][ T29] audit: type=1326 audit(1746330523.535:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 65.672123][ T4448] ext2 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.689866][ T29] audit: type=1326 audit(1746330523.555:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f187d42ab39 code=0x7ffc0000 [ 65.745303][ T29] audit: type=1326 audit(1746330523.555:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187d48e969 code=0x7ffc0000 [ 65.768777][ T29] audit: type=1326 audit(1746330523.555:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 65.792199][ T29] audit: type=1326 audit(1746330523.555:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f187d42ab39 code=0x7ffc0000 [ 65.816307][ T29] audit: type=1326 audit(1746330523.555:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f187d48e969 code=0x7ffc0000 [ 65.850787][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 65.879476][ T4462] loop1: detected capacity change from 0 to 512 [ 65.887646][ T4462] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #12: comm syz.1.292: corrupted in-inode xattr: invalid ea_ino [ 65.901247][ T4462] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.292: couldn't read orphan inode 12 (err -117) [ 65.925514][ T4462] Cannot find add_set index 0 as target [ 65.992437][ T4466] FAULT_INJECTION: forcing a failure. [ 65.992437][ T4466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.005883][ T4466] CPU: 1 UID: 0 PID: 4466 Comm: syz.1.293 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 66.005911][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.005925][ T4466] Call Trace: [ 66.005963][ T4466] [ 66.005973][ T4466] __dump_stack+0x1d/0x30 [ 66.006039][ T4466] dump_stack_lvl+0xe8/0x140 [ 66.006060][ T4466] dump_stack+0x15/0x1b [ 66.006076][ T4466] should_fail_ex+0x265/0x280 [ 66.006108][ T4466] should_fail+0xb/0x20 [ 66.006178][ T4466] should_fail_usercopy+0x1a/0x20 [ 66.006196][ T4466] _copy_from_user+0x1c/0xb0 [ 66.006218][ T4466] __se_sys_add_key+0x209/0x350 [ 66.006251][ T4466] __x64_sys_add_key+0x67/0x80 [ 66.006288][ T4466] x64_sys_call+0x1d0d/0x2fb0 [ 66.006324][ T4466] do_syscall_64+0xd0/0x1a0 [ 66.006397][ T4466] ? clear_bhb_loop+0x25/0x80 [ 66.006419][ T4466] ? clear_bhb_loop+0x25/0x80 [ 66.006442][ T4466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.006543][ T4466] RIP: 0033:0x7f187d48e969 [ 66.006558][ T4466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.006575][ T4466] RSP: 002b:00007f187baf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 66.006593][ T4466] RAX: ffffffffffffffda RBX: 00007f187d6b5fa0 RCX: 00007f187d48e969 [ 66.006605][ T4466] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 66.006617][ T4466] RBP: 00007f187baf7090 R08: ffffffffffffffff R09: 0000000000000000 [ 66.006628][ T4466] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 66.006718][ T4466] R13: 0000000000000001 R14: 00007f187d6b5fa0 R15: 00007ffda76c94f8 [ 66.006780][ T4466] [ 66.193109][ T4459] loop4: detected capacity change from 0 to 164 [ 66.204646][ T4459] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.222998][ T4459] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.291660][ T4481] loop0: detected capacity change from 0 to 128 [ 66.292172][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 66.305463][ T4468] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 66.307887][ T4480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'. [ 66.314693][ T4468] FAT-fs (loop0): Filesystem has been set read-only [ 66.325432][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 66.339752][ T4468] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 66.347693][ T4468] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 66.361111][ T4480] netlink: 'syz.1.300': attribute type 39 has an invalid length. [ 66.422284][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 66.434474][ T4486] hub 2-0:1.0: USB hub found [ 66.443241][ T4491] loop4: detected capacity change from 0 to 512 [ 66.450600][ T4486] hub 2-0:1.0: 8 ports detected [ 66.462524][ T4491] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.482535][ T4491] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.505819][ T4491] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.534950][ T4491] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 66.542039][ T4491] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.301: casefold flag without casefold feature [ 66.558427][ T4491] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.301: couldn't read orphan inode 16 (err -117) [ 66.615330][ T4504] loop4: detected capacity change from 0 to 128 [ 66.634298][ T4476] loop2: detected capacity change from 0 to 512 [ 66.646920][ T4504] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 66.676414][ T4504] ext2 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.738677][ T4514] loop1: detected capacity change from 0 to 8192 [ 66.752061][ T4518] block device autoloading is deprecated and will be removed. [ 66.807074][ T4522] FAULT_INJECTION: forcing a failure. [ 66.807074][ T4522] name failslab, interval 1, probability 0, space 0, times 0 [ 66.819905][ T4522] CPU: 0 UID: 0 PID: 4522 Comm: syz.3.312 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 66.819963][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.819979][ T4522] Call Trace: [ 66.819986][ T4522] [ 66.819995][ T4522] __dump_stack+0x1d/0x30 [ 66.820088][ T4522] dump_stack_lvl+0xe8/0x140 [ 66.820106][ T4522] dump_stack+0x15/0x1b [ 66.820173][ T4522] should_fail_ex+0x265/0x280 [ 66.820211][ T4522] ? rxrpc_lookup_local+0x2a3/0xc70 [ 66.820308][ T4522] should_failslab+0x8c/0xb0 [ 66.820345][ T4522] __kmalloc_cache_noprof+0x4c/0x320 [ 66.820363][ T4522] ? avc_has_perm_noaudit+0x1b1/0x200 [ 66.820474][ T4522] rxrpc_lookup_local+0x2a3/0xc70 [ 66.820512][ T4522] ? _raw_spin_unlock_bh+0x36/0x40 [ 66.820658][ T4522] ? lock_sock_nested+0x112/0x140 [ 66.820693][ T4522] rxrpc_sendmsg+0x2e0/0x540 [ 66.820725][ T4522] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 66.820759][ T4522] __sock_sendmsg+0x142/0x180 [ 66.820828][ T4522] ____sys_sendmsg+0x31e/0x4e0 [ 66.820855][ T4522] ___sys_sendmsg+0x17b/0x1d0 [ 66.820894][ T4522] __x64_sys_sendmsg+0xd4/0x160 [ 66.820950][ T4522] x64_sys_call+0x2999/0x2fb0 [ 66.820974][ T4522] do_syscall_64+0xd0/0x1a0 [ 66.820993][ T4522] ? clear_bhb_loop+0x25/0x80 [ 66.821014][ T4522] ? clear_bhb_loop+0x25/0x80 [ 66.821113][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.821201][ T4522] RIP: 0033:0x7fe2d238e969 [ 66.821228][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.821249][ T4522] RSP: 002b:00007fe2d09f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.821266][ T4522] RAX: ffffffffffffffda RBX: 00007fe2d25b5fa0 RCX: 00007fe2d238e969 [ 66.821366][ T4522] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.821381][ T4522] RBP: 00007fe2d09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.821392][ T4522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.821403][ T4522] R13: 0000000000000000 R14: 00007fe2d25b5fa0 R15: 00007fffc2aef048 [ 66.821498][ T4522] [ 67.042430][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 67.296951][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 67.359646][ T4542] loop3: detected capacity change from 0 to 128 [ 67.377528][ T4533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.377964][ T4544] loop4: detected capacity change from 0 to 512 [ 67.385606][ T4533] FAT-fs (loop3): Filesystem has been set read-only [ 67.408694][ T4533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.416899][ T4533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.437713][ T4545] loop0: detected capacity change from 0 to 512 [ 67.446586][ T4545] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.454858][ T4545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.461746][ T4545] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.478217][ T4545] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 67.531453][ T4545] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.318: casefold flag without casefold feature [ 67.569598][ T4544] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.614557][ T4545] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.318: couldn't read orphan inode 16 (err -117) [ 67.650082][ T4553] loop4: detected capacity change from 0 to 1024 [ 67.684045][ T4553] EXT4-fs: Ignoring removed bh option [ 67.693059][ T4553] EXT4-fs: inline encryption not supported [ 67.706973][ T4553] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.752836][ T4553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 67.762211][ T4561] capability: warning: `syz.3.324' uses 32-bit capabilities (legacy support in use) [ 67.781549][ T4553] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.321: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.796809][ T4553] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.321: Invalid inode bitmap blk 0 in block_group 0 [ 67.873677][ T4563] loop3: detected capacity change from 0 to 128 [ 67.882407][ T4563] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 67.903755][ T4553] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 67.922894][ T4553] EXT4-fs (loop4): 1 orphan inode deleted [ 67.952617][ T4563] ext2 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.222638][ T4582] FAULT_INJECTION: forcing a failure. [ 68.222638][ T4582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.235891][ T4582] CPU: 0 UID: 0 PID: 4582 Comm: syz.3.331 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 68.235971][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 68.235996][ T4582] Call Trace: [ 68.236002][ T4582] [ 68.236011][ T4582] __dump_stack+0x1d/0x30 [ 68.236117][ T4582] dump_stack_lvl+0xe8/0x140 [ 68.236142][ T4582] dump_stack+0x15/0x1b [ 68.236161][ T4582] should_fail_ex+0x265/0x280 [ 68.236198][ T4582] should_fail+0xb/0x20 [ 68.236246][ T4582] should_fail_usercopy+0x1a/0x20 [ 68.236268][ T4582] _copy_from_user+0x1c/0xb0 [ 68.236358][ T4582] bpf_test_init+0xdf/0x160 [ 68.236535][ T4582] bpf_prog_test_run_xdp+0x274/0x8f0 [ 68.236571][ T4582] ? kstrtouint+0x76/0xc0 [ 68.236600][ T4582] ? __rcu_read_unlock+0x4f/0x70 [ 68.236645][ T4582] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.236674][ T4582] bpf_prog_test_run+0x207/0x390 [ 68.236715][ T4582] __sys_bpf+0x3dc/0x790 [ 68.236758][ T4582] __x64_sys_bpf+0x41/0x50 [ 68.236838][ T4582] x64_sys_call+0x2478/0x2fb0 [ 68.236865][ T4582] do_syscall_64+0xd0/0x1a0 [ 68.236893][ T4582] ? clear_bhb_loop+0x25/0x80 [ 68.236946][ T4582] ? clear_bhb_loop+0x25/0x80 [ 68.236973][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.237000][ T4582] RIP: 0033:0x7fe2d238e969 [ 68.237018][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.237038][ T4582] RSP: 002b:00007fe2d09f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.237109][ T4582] RAX: ffffffffffffffda RBX: 00007fe2d25b5fa0 RCX: 00007fe2d238e969 [ 68.237124][ T4582] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 68.237139][ T4582] RBP: 00007fe2d09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.237152][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.237163][ T4582] R13: 0000000000000000 R14: 00007fe2d25b5fa0 R15: 00007fffc2aef048 [ 68.237239][ T4582] [ 69.340479][ T4606] loop4: detected capacity change from 0 to 2048 [ 69.398040][ T4612] FAULT_INJECTION: forcing a failure. [ 69.398040][ T4612] name failslab, interval 1, probability 0, space 0, times 0 [ 69.407453][ T4614] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.410733][ T4612] CPU: 1 UID: 0 PID: 4612 Comm: syz.1.342 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 69.410801][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.410818][ T4612] Call Trace: [ 69.410826][ T4612] [ 69.410835][ T4612] __dump_stack+0x1d/0x30 [ 69.410862][ T4612] dump_stack_lvl+0xe8/0x140 [ 69.410888][ T4612] dump_stack+0x15/0x1b [ 69.410951][ T4612] should_fail_ex+0x265/0x280 [ 69.411054][ T4612] ? __se_sys_mount+0xef/0x2e0 [ 69.411107][ T4612] should_failslab+0x8c/0xb0 [ 69.411145][ T4612] __kmalloc_cache_noprof+0x4c/0x320 [ 69.411172][ T4612] ? memdup_user+0x99/0xd0 [ 69.411196][ T4612] __se_sys_mount+0xef/0x2e0 [ 69.411275][ T4612] ? fput+0x8f/0xc0 [ 69.411297][ T4612] ? ksys_write+0x16e/0x1a0 [ 69.411329][ T4612] __x64_sys_mount+0x67/0x80 [ 69.411361][ T4612] x64_sys_call+0xd36/0x2fb0 [ 69.411450][ T4612] do_syscall_64+0xd0/0x1a0 [ 69.411487][ T4612] ? clear_bhb_loop+0x25/0x80 [ 69.411514][ T4612] ? clear_bhb_loop+0x25/0x80 [ 69.411553][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.411580][ T4612] RIP: 0033:0x7f187d48e969 [ 69.411600][ T4612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.411682][ T4612] RSP: 002b:00007f187baf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.411705][ T4612] RAX: ffffffffffffffda RBX: 00007f187d6b5fa0 RCX: 00007f187d48e969 [ 69.411721][ T4612] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 69.411737][ T4612] RBP: 00007f187baf7090 R08: 0000200000000240 R09: 0000000000000000 [ 69.411751][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.411767][ T4612] R13: 0000000000000000 R14: 00007f187d6b5fa0 R15: 00007ffda76c94f8 [ 69.411815][ T4612] [ 69.415242][ T4615] FAULT_INJECTION: forcing a failure. [ 69.415242][ T4615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.508937][ T4614] loop2: detected capacity change from 0 to 512 [ 69.512267][ T4615] CPU: 1 UID: 0 PID: 4615 Comm: syz.4.344 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 69.512327][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.512347][ T4615] Call Trace: [ 69.512357][ T4615] [ 69.512368][ T4615] __dump_stack+0x1d/0x30 [ 69.512397][ T4615] dump_stack_lvl+0xe8/0x140 [ 69.512423][ T4615] dump_stack+0x15/0x1b [ 69.512443][ T4615] should_fail_ex+0x265/0x280 [ 69.512550][ T4615] should_fail+0xb/0x20 [ 69.512586][ T4615] should_fail_usercopy+0x1a/0x20 [ 69.512651][ T4615] _copy_from_user+0x1c/0xb0 [ 69.512680][ T4615] bpf_test_init+0xdf/0x160 [ 69.512719][ T4615] bpf_prog_test_run_xdp+0x274/0x8f0 [ 69.512778][ T4615] ? kstrtouint+0x76/0xc0 [ 69.512813][ T4615] ? __rcu_read_unlock+0x4f/0x70 [ 69.512872][ T4615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.512912][ T4615] bpf_prog_test_run+0x207/0x390 [ 69.512955][ T4615] __sys_bpf+0x3dc/0x790 [ 69.513055][ T4615] __x64_sys_bpf+0x41/0x50 [ 69.513087][ T4615] x64_sys_call+0x2478/0x2fb0 [ 69.513228][ T4615] do_syscall_64+0xd0/0x1a0 [ 69.513256][ T4615] ? clear_bhb_loop+0x25/0x80 [ 69.513284][ T4615] ? clear_bhb_loop+0x25/0x80 [ 69.513312][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.513338][ T4615] RIP: 0033:0x7f72c963e969 [ 69.513416][ T4615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.513439][ T4615] RSP: 002b:00007f72c7ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.513462][ T4615] RAX: ffffffffffffffda RBX: 00007f72c9865fa0 RCX: 00007f72c963e969 [ 69.513478][ T4615] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 69.513494][ T4615] RBP: 00007f72c7ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.513509][ T4615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.513604][ T4615] R13: 0000000000000000 R14: 00007f72c9865fa0 R15: 00007ffcf947d2f8 [ 69.513629][ T4615] [ 69.601185][ T4621] FAULT_INJECTION: forcing a failure. [ 69.601185][ T4621] name failslab, interval 1, probability 0, space 0, times 0 [ 69.642401][ T4614] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 69.651314][ T4621] CPU: 1 UID: 0 PID: 4621 Comm: syz.1.347 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 69.651352][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.651411][ T4621] Call Trace: [ 69.651419][ T4621] [ 69.651429][ T4621] __dump_stack+0x1d/0x30 [ 69.651456][ T4621] dump_stack_lvl+0xe8/0x140 [ 69.651481][ T4621] dump_stack+0x15/0x1b [ 69.651502][ T4621] should_fail_ex+0x265/0x280 [ 69.651589][ T4621] should_failslab+0x8c/0xb0 [ 69.651680][ T4621] __kmalloc_node_noprof+0xa9/0x410 [ 69.651705][ T4621] ? __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 69.651739][ T4621] __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 69.651863][ T4621] ? selinux_capable+0x1f9/0x270 [ 69.651891][ T4621] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 69.651989][ T4621] __vmalloc_noprof+0x5f/0x70 [ 69.652017][ T4621] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 69.652079][ T4621] bpf_prog_alloc_no_stats+0x47/0x390 [ 69.652141][ T4621] ? bpf_prog_alloc+0x2a/0x150 [ 69.652290][ T4621] bpf_prog_alloc+0x3c/0x150 [ 69.652324][ T4621] bpf_prog_load+0x514/0x1070 [ 69.652377][ T4621] ? security_bpf+0x2b/0x90 [ 69.652464][ T4621] __sys_bpf+0x51d/0x790 [ 69.652507][ T4621] __x64_sys_bpf+0x41/0x50 [ 69.652540][ T4621] x64_sys_call+0x2478/0x2fb0 [ 69.652620][ T4621] do_syscall_64+0xd0/0x1a0 [ 69.652649][ T4621] ? clear_bhb_loop+0x25/0x80 [ 69.652677][ T4621] ? clear_bhb_loop+0x25/0x80 [ 69.652707][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.652734][ T4621] RIP: 0033:0x7f187d48e969 [ 69.652822][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.652844][ T4621] RSP: 002b:00007f187baf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.652867][ T4621] RAX: ffffffffffffffda RBX: 00007f187d6b5fa0 RCX: 00007f187d48e969 [ 69.652903][ T4621] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 69.652918][ T4621] RBP: 00007f187baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.652933][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.652949][ T4621] R13: 0000000000000000 R14: 00007f187d6b5fa0 R15: 00007ffda76c94f8 [ 69.652988][ T4621] [ 69.653097][ T4621] syz.1.347: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 69.672567][ T4614] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.675859][ T4621] ,cpuset= [ 69.680287][ T4614] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.343: Block bitmap for bg 0 marked uninitialized [ 69.685051][ T4621] /,mems_allowed=0 [ 69.685080][ T4621] CPU: 1 UID: 0 PID: 4621 Comm: syz.1.347 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 69.685110][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.685203][ T4621] Call Trace: [ 69.685213][ T4621] [ 69.685223][ T4621] __dump_stack+0x1d/0x30 [ 69.685251][ T4621] dump_stack_lvl+0xe8/0x140 [ 69.685275][ T4621] dump_stack+0x15/0x1b [ 69.685323][ T4621] warn_alloc+0x12b/0x1a0 [ 69.685353][ T4621] ? should_failslab+0x8c/0xb0 [ 69.685419][ T4621] __vmalloc_node_range_noprof+0x455/0xdf0 [ 69.685462][ T4621] ? selinux_capable+0x1f9/0x270 [ 69.685491][ T4621] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 69.685633][ T4621] __vmalloc_noprof+0x5f/0x70 [ 69.685661][ T4621] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 69.685747][ T4621] bpf_prog_alloc_no_stats+0x47/0x390 [ 69.685830][ T4621] ? bpf_prog_alloc+0x2a/0x150 [ 69.685864][ T4621] bpf_prog_alloc+0x3c/0x150 [ 69.685899][ T4621] bpf_prog_load+0x514/0x1070 [ 69.685946][ T4621] ? security_bpf+0x2b/0x90 [ 69.685993][ T4621] __sys_bpf+0x51d/0x790 [ 69.686046][ T4621] __x64_sys_bpf+0x41/0x50 [ 69.686078][ T4621] x64_sys_call+0x2478/0x2fb0 [ 69.686104][ T4621] do_syscall_64+0xd0/0x1a0 [ 69.686209][ T4621] ? clear_bhb_loop+0x25/0x80 [ 69.686235][ T4621] ? clear_bhb_loop+0x25/0x80 [ 69.686321][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.686348][ T4621] RIP: 0033:0x7f187d48e969 [ 69.686368][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.686390][ T4621] RSP: 002b:00007f187baf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.686412][ T4621] RAX: ffffffffffffffda RBX: 00007f187d6b5fa0 RCX: 00007f187d48e969 [ 69.686469][ T4621] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 69.686484][ T4621] RBP: 00007f187baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.686499][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.686514][ T4621] R13: 0000000000000000 R14: 00007f187d6b5fa0 R15: 00007ffda76c94f8 [ 69.686538][ T4621] [ 69.686561][ T4621] Mem-Info: [ 69.691157][ T4614] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 69.694293][ T4621] active_anon:22644 inactive_anon:0 isolated_anon:0 [ 69.694293][ T4621] active_file:6690 inactive_file:12800 isolated_file:0 [ 69.694293][ T4621] unevictable:0 dirty:465 writeback:0 [ 69.694293][ T4621] slab_reclaimable:2996 slab_unreclaimable:13665 [ 69.694293][ T4621] mapped:31508 shmem:19509 pagetables:877 [ 69.694293][ T4621] sec_pagetables:0 bounce:0 [ 69.694293][ T4621] kernel_misc_reclaimable:0 [ 69.694293][ T4621] free:1878768 free_pcp:5841 free_cma:0 [ 69.699819][ T4614] EXT4-fs (loop2): 1 orphan inode deleted [ 69.703979][ T4621] Node 0 active_anon:90576kB inactive_anon:0kB active_file:26760kB inactive_file:51200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126032kB dirty:1860kB writeback:0kB shmem:78036kB writeback_tmp:0kB kernel_stack:3200kB pagetables:3508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 69.718265][ T4614] __nla_validate_parse: 3 callbacks suppressed [ 69.718343][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 69.719873][ T4621] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.724745][ T4614] ext4: Unknown parameter 'uÀ' [ 69.728544][ T4621] lowmem_reserve[]: 0 2884 7863 7863 [ 70.465454][ T4621] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 70.499353][ T4621] lowmem_reserve[]: 0 0 4978 4978 [ 70.504552][ T4621] Node 0 Normal free:4549676kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:90576kB inactive_anon:0kB active_file:26760kB inactive_file:51200kB unevictable:0kB writepending:1860kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:19744kB local_pcp:17584kB free_cma:0kB [ 70.535021][ T4621] lowmem_reserve[]: 0 0 0 0 [ 70.539598][ T4621] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 70.552368][ T4621] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 70.568713][ T4621] Node 0 Normal: 165*4kB (UME) 108*8kB (UME) 63*16kB (UM) 37*32kB (UME) 34*64kB (UME) 15*128kB (UME) 10*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 6*2048kB (UME) 1103*4096kB (UM) = 4549252kB [ 70.587910][ T4621] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 70.597416][ T4621] 39029 total pagecache pages [ 70.602123][ T4621] 0 pages in swap cache [ 70.606426][ T4621] Free swap = 124996kB [ 70.610623][ T4621] Total swap = 124996kB [ 70.614800][ T4621] 2097051 pages RAM [ 70.618606][ T4621] 0 pages HighMem/MovableOnly [ 70.623448][ T4621] 80258 pages reserved [ 70.641046][ T4633] loop0: detected capacity change from 0 to 512 [ 70.649105][ T4614] EXT4-fs unmount: 89 callbacks suppressed [ 70.649181][ T4614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.681677][ T4633] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.683853][ T4635] loop1: detected capacity change from 0 to 2048 [ 70.704315][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 70.704331][ T29] audit: type=1326 audit(1746330528.635:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2d2385927 code=0x7ffc0000 [ 70.705533][ T4633] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.719356][ T29] audit: type=1326 audit(1746330528.635:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 70.735903][ T4633] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 70.740299][ T29] audit: type=1326 audit(1746330528.635:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 70.766913][ T4633] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.774795][ T29] audit: type=1326 audit(1746330528.635:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 70.803082][ T4633] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 70.812877][ T29] audit: type=1326 audit(1746330528.635:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 70.839549][ T4633] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.350: casefold flag without casefold feature [ 70.842878][ T29] audit: type=1326 audit(1746330528.635:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 70.867939][ T4642] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.878733][ T29] audit: type=1326 audit(1746330528.635:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 70.901956][ T4642] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 70.914843][ T4633] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.350: couldn't read orphan inode 16 (err -117) [ 70.954329][ T4635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.969459][ T4633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.062164][ T4638] loop3: detected capacity change from 0 to 2048 [ 71.165449][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.182629][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.192785][ T4638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.210755][ T4660] loop2: detected capacity change from 0 to 2048 [ 71.238395][ T4660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.310354][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.330553][ T4642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'. [ 71.342253][ T4638] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.352: bg 0: block 234: padding at end of block bitmap is not set [ 71.449922][ T4638] EXT4-fs (loop3): Remounting filesystem read-only [ 71.511336][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.534458][ T4674] bridge0: port 3(vlan2) entered blocking state [ 71.540862][ T4674] bridge0: port 3(vlan2) entered disabled state [ 71.548120][ T4674] vlan2: entered allmulticast mode [ 71.553344][ T4674] bridge0: entered allmulticast mode [ 71.561159][ T4674] vlan2: left allmulticast mode [ 71.566148][ T4674] bridge0: left allmulticast mode [ 71.644500][ T4682] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.365'. [ 71.665680][ T4682] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.365'. [ 71.686053][ T4682] loop3: detected capacity change from 0 to 1024 [ 71.694189][ T4682] EXT4-fs: Ignoring removed bh option [ 71.699790][ T4682] EXT4-fs: inline encryption not supported [ 71.707974][ T4682] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.721596][ T4682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 71.731255][ T4682] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.365: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.745509][ T4682] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.365: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.759930][ T4682] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.365: Failed to acquire dquot type 0 [ 71.771740][ T4682] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 71.781810][ T4682] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.365: mark_inode_dirty error [ 71.794835][ T4682] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 71.805628][ T4682] EXT4-fs (loop3): 1 orphan inode deleted [ 71.815509][ T4682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.828511][ T4073] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.845785][ T4073] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 0 [ 71.891770][ T4682] netlink: 'syz.3.365': attribute type 10 has an invalid length. [ 71.899675][ T4682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.365'. [ 71.910486][ T4682] dummy0: entered promiscuous mode [ 71.928249][ T4682] bridge0: port 3(dummy0) entered blocking state [ 71.934949][ T4682] bridge0: port 3(dummy0) entered disabled state [ 72.011560][ T4682] dummy0: entered allmulticast mode [ 72.038883][ T4682] bridge0: port 3(dummy0) entered blocking state [ 72.045356][ T4682] bridge0: port 3(dummy0) entered forwarding state [ 72.161265][ T4698] loop4: detected capacity change from 0 to 512 [ 72.185367][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.195116][ T3312] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 72.259126][ T3312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 72.269369][ T3312] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 72.281265][ T4698] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.293721][ T4698] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.300478][ T4698] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.319579][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 72.328760][ T4705] loop0: detected capacity change from 0 to 2048 [ 72.336407][ T4698] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 72.345314][ T4698] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.368: casefold flag without casefold feature [ 72.361845][ T4698] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.368: couldn't read orphan inode 16 (err -117) [ 72.375712][ T4698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.412853][ T4705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.510429][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.610031][ T4711] loop2: detected capacity change from 0 to 2048 [ 72.617074][ T4715] loop3: detected capacity change from 0 to 2048 [ 72.736358][ T4715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.749846][ T4711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.779543][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.863862][ T4715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.375: bg 0: block 234: padding at end of block bitmap is not set [ 72.994085][ T4715] EXT4-fs (loop3): Remounting filesystem read-only [ 73.012905][ T4711] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.373: bg 0: block 234: padding at end of block bitmap is not set [ 73.146346][ T4711] EXT4-fs (loop2): Remounting filesystem read-only [ 73.170343][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.324444][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.709115][ T4758] loop4: detected capacity change from 0 to 512 [ 73.721834][ T4758] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 73.730400][ T4758] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.738328][ T4758] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.763149][ T4758] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 73.794684][ T4758] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.387: casefold flag without casefold feature [ 74.610013][ T4758] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.387: couldn't read orphan inode 16 (err -117) [ 74.623012][ T4758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.706358][ T4769] loop0: detected capacity change from 0 to 2048 [ 74.706436][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.770234][ T4769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.850730][ T4776] loop4: detected capacity change from 0 to 2048 [ 74.860450][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.890481][ T4776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.006864][ T4778] loop2: detected capacity change from 0 to 2048 [ 75.020543][ T4780] loop3: detected capacity change from 0 to 2048 [ 75.158411][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.183704][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.224437][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.309777][ T4778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.393: bg 0: block 234: padding at end of block bitmap is not set [ 75.338653][ T4780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.394: bg 0: block 234: padding at end of block bitmap is not set [ 75.364008][ T4780] EXT4-fs (loop3): Remounting filesystem read-only [ 75.429699][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 75.449298][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.559488][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.287586][ T4818] loop3: detected capacity change from 0 to 512 [ 76.317927][ T4818] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.327017][ T4818] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.334295][ T4818] __quota_error: 1595 callbacks suppressed [ 76.334312][ T4818] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 76.351390][ T4818] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.369437][ T4818] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 76.376328][ T4818] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.402: casefold flag without casefold feature [ 76.390316][ T4818] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.402: couldn't read orphan inode 16 (err -117) [ 76.422821][ T4818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.427587][ T29] audit: type=1326 audit(1746330534.355:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 76.492233][ T29] audit: type=1326 audit(1746330534.415:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f187d42ab39 code=0x7ffc0000 [ 76.515817][ T29] audit: type=1326 audit(1746330534.415:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 76.539192][ T29] audit: type=1326 audit(1746330534.415:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f187d42ab39 code=0x7ffc0000 [ 76.562613][ T29] audit: type=1326 audit(1746330534.415:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 76.585946][ T29] audit: type=1326 audit(1746330534.415:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f187d42ab39 code=0x7ffc0000 [ 76.609678][ T29] audit: type=1326 audit(1746330534.415:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 76.633371][ T29] audit: type=1326 audit(1746330534.415:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f187d42ab39 code=0x7ffc0000 [ 76.656795][ T29] audit: type=1326 audit(1746330534.415:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f187d485927 code=0x7ffc0000 [ 76.733813][ T4833] loop1: detected capacity change from 0 to 2048 [ 76.757988][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.785901][ T4833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.897502][ T4846] loop0: detected capacity change from 0 to 2048 [ 76.940656][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.950091][ T4844] loop3: detected capacity change from 0 to 2048 [ 76.952019][ T4846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.986878][ T4844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.048536][ T4848] loop4: detected capacity change from 0 to 2048 [ 77.137495][ T4844] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.412: bg 0: block 234: padding at end of block bitmap is not set [ 77.153205][ T4844] EXT4-fs (loop3): Remounting filesystem read-only [ 77.162787][ T4848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.164420][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.201679][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.336874][ T4848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.413: bg 0: block 234: padding at end of block bitmap is not set [ 77.351987][ T4848] EXT4-fs (loop4): Remounting filesystem read-only [ 77.741424][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.533865][ T4878] loop4: detected capacity change from 0 to 512 [ 78.546422][ T4878] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 78.554776][ T4878] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.561455][ T4878] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.577584][ T4878] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 78.585009][ T4878] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.420: casefold flag without casefold feature [ 78.643210][ T4878] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.420: couldn't read orphan inode 16 (err -117) [ 78.745431][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.843517][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.861704][ T4891] loop0: detected capacity change from 0 to 2048 [ 78.889129][ T4895] loop4: detected capacity change from 0 to 2048 [ 78.908849][ T4891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.008507][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.040451][ T4897] loop3: detected capacity change from 0 to 2048 [ 79.090306][ T4897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.109664][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.161552][ T4897] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.428: bg 0: block 234: padding at end of block bitmap is not set [ 79.179671][ T4906] loop1: detected capacity change from 0 to 2048 [ 79.188812][ T4897] EXT4-fs (loop3): Remounting filesystem read-only [ 79.288493][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.299369][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.349927][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.525166][ T4906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.430: bg 0: block 234: padding at end of block bitmap is not set [ 79.541957][ T4906] EXT4-fs (loop1): Remounting filesystem read-only [ 79.991015][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.096656][ T4944] loop1: detected capacity change from 0 to 512 [ 80.115411][ T4944] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 80.158241][ T4944] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.165023][ T4944] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.201488][ T4944] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 80.251735][ T4944] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.438: casefold flag without casefold feature [ 80.337239][ T4944] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.438: couldn't read orphan inode 16 (err -117) [ 80.350556][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.359471][ T4950] loop3: detected capacity change from 0 to 2048 [ 80.453119][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.453250][ T4950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.504145][ T4960] loop1: detected capacity change from 0 to 2048 [ 80.558279][ T4960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.587678][ T4959] loop4: detected capacity change from 0 to 2048 [ 80.663856][ T4959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.736773][ T4970] loop2: detected capacity change from 0 to 2048 [ 80.769985][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 80.787171][ T4970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.800236][ T4070] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 234: padding at end of block bitmap is not set [ 80.815683][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.826377][ T4070] EXT4-fs (loop4): Remounting filesystem read-only [ 80.831045][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.833849][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.877040][ T4970] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.447: bg 0: block 234: padding at end of block bitmap is not set [ 80.897430][ T4970] EXT4-fs (loop2): Remounting filesystem read-only [ 81.133586][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.588592][ T5004] loop2: detected capacity change from 0 to 512 [ 81.618431][ T5004] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 81.653887][ T5004] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.681763][ T5004] __quota_error: 723 callbacks suppressed [ 81.681785][ T5004] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 81.750058][ T5004] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.040535][ T5004] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 82.053338][ T5004] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.456: casefold flag without casefold feature [ 82.067398][ T5004] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.456: couldn't read orphan inode 16 (err -117) [ 82.143275][ T5007] loop3: detected capacity change from 0 to 2048 [ 82.151753][ T5004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.167745][ T29] audit: type=1326 audit(1746330540.095:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c9635927 code=0x7ffc0000 [ 82.197884][ T29] audit: type=1326 audit(1746330540.115:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c95dab39 code=0x7ffc0000 [ 82.221661][ T29] audit: type=1326 audit(1746330540.115:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c9635927 code=0x7ffc0000 [ 82.245103][ T29] audit: type=1326 audit(1746330540.115:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c95dab39 code=0x7ffc0000 [ 82.268580][ T29] audit: type=1326 audit(1746330540.115:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c9635927 code=0x7ffc0000 [ 82.292050][ T29] audit: type=1326 audit(1746330540.115:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c95dab39 code=0x7ffc0000 [ 82.315709][ T29] audit: type=1326 audit(1746330540.115:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c9635927 code=0x7ffc0000 [ 82.339282][ T29] audit: type=1326 audit(1746330540.125:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c95dab39 code=0x7ffc0000 [ 82.362734][ T29] audit: type=1326 audit(1746330540.125:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c9635927 code=0x7ffc0000 [ 82.368754][ T5014] loop4: detected capacity change from 0 to 2048 [ 82.419723][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.462954][ T5007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.464062][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.661470][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.694993][ T5011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 82.720020][ T4072] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 234: padding at end of block bitmap is not set [ 82.747397][ T4072] EXT4-fs (loop4): Remounting filesystem read-only [ 82.861246][ T5033] loop1: detected capacity change from 0 to 2048 [ 83.000013][ T5033] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.466: bg 0: block 234: padding at end of block bitmap is not set [ 83.015144][ T5046] loop0: detected capacity change from 0 to 128 [ 83.027303][ T5046] process 'syz.0.469' launched './file0' with NULL argv: empty string added [ 83.037553][ T5033] EXT4-fs (loop1): Remounting filesystem read-only [ 83.227968][ T5055] loop0: detected capacity change from 0 to 512 [ 83.984424][ T5055] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.000988][ T5055] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.009666][ T5055] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.136489][ T5055] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 84.162056][ T5055] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.472: casefold flag without casefold feature [ 84.181192][ T5065] loop4: detected capacity change from 0 to 2048 [ 84.977603][ T5055] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.472: couldn't read orphan inode 16 (err -117) [ 85.199534][ T5076] loop3: detected capacity change from 0 to 2048 [ 85.308010][ T5087] loop0: detected capacity change from 0 to 2048 [ 85.328569][ T5076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.478: bg 0: block 234: padding at end of block bitmap is not set [ 85.356342][ T5076] EXT4-fs (loop3): Remounting filesystem read-only [ 85.681838][ T5087] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.483: bg 0: block 234: padding at end of block bitmap is not set [ 85.733767][ T5087] EXT4-fs (loop0): Remounting filesystem read-only [ 86.275763][ T5126] loop0: detected capacity change from 0 to 512 [ 86.844002][ T5126] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.846881][ T5131] FAULT_INJECTION: forcing a failure. [ 86.846881][ T5131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.852207][ T5126] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.865177][ T5131] CPU: 1 UID: 0 PID: 5131 Comm: syz.2.496 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 86.865209][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 86.865327][ T5131] Call Trace: [ 86.865334][ T5131] [ 86.865345][ T5131] __dump_stack+0x1d/0x30 [ 86.865373][ T5131] dump_stack_lvl+0xe8/0x140 [ 86.865465][ T5131] dump_stack+0x15/0x1b [ 86.865486][ T5131] should_fail_ex+0x265/0x280 [ 86.865527][ T5131] should_fail+0xb/0x20 [ 86.865563][ T5131] should_fail_usercopy+0x1a/0x20 [ 86.865596][ T5131] _copy_from_user+0x1c/0xb0 [ 86.865624][ T5131] kstrtouint_from_user+0x69/0xf0 [ 86.865680][ T5131] ? avc_policy_seqno+0x15/0x30 [ 86.865723][ T5131] proc_fail_nth_write+0x50/0x160 [ 86.865756][ T5131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.865809][ T5131] vfs_write+0x266/0x8d0 [ 86.865839][ T5131] ? vfs_read+0x47f/0x6f0 [ 86.865868][ T5131] ? __rcu_read_unlock+0x4f/0x70 [ 86.865894][ T5131] ? __fget_files+0x184/0x1c0 [ 86.865942][ T5131] ksys_write+0xda/0x1a0 [ 86.865976][ T5131] __x64_sys_write+0x40/0x50 [ 86.866008][ T5131] x64_sys_call+0x2cdd/0x2fb0 [ 86.866068][ T5131] do_syscall_64+0xd0/0x1a0 [ 86.866120][ T5131] ? clear_bhb_loop+0x25/0x80 [ 86.866146][ T5131] ? clear_bhb_loop+0x25/0x80 [ 86.866173][ T5131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.866238][ T5131] RIP: 0033:0x7ff75fe8d41f [ 86.866257][ T5131] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 86.866280][ T5131] RSP: 002b:00007ff75e4f7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 86.866304][ T5131] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff75fe8d41f [ 86.866320][ T5131] RDX: 0000000000000001 RSI: 00007ff75e4f70a0 RDI: 0000000000000003 [ 86.866403][ T5131] RBP: 00007ff75e4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.866418][ T5131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 86.866434][ T5131] R13: 0000000000000000 R14: 00007ff7600b5fa0 R15: 00007fff4c6fe3b8 [ 86.866458][ T5131] [ 86.897465][ T5129] loop1: detected capacity change from 0 to 2048 [ 86.902490][ T5126] __quota_error: 516 callbacks suppressed [ 86.902509][ T5126] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 86.923196][ T29] audit: type=1326 audit(1746330544.835:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 86.953581][ T5126] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.953897][ T29] audit: type=1326 audit(1746330544.835:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 86.962421][ T5126] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 86.962828][ T29] audit: type=1326 audit(1746330544.835:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 86.973850][ T5126] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.493: casefold flag without casefold feature [ 86.976590][ T29] audit: type=1326 audit(1746330544.835:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 87.006107][ T5126] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.493: couldn't read orphan inode 16 (err -117) [ 87.010365][ T29] audit: type=1326 audit(1746330544.835:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 87.010399][ T29] audit: type=1326 audit(1746330544.835:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 87.099424][ T5136] loop2: detected capacity change from 0 to 2048 [ 87.104285][ T29] audit: type=1326 audit(1746330544.835:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 87.104314][ T29] audit: type=1326 audit(1746330544.835:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 87.343852][ T29] audit: type=1326 audit(1746330544.835:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 87.485444][ T5133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.497: bg 0: block 234: padding at end of block bitmap is not set [ 87.500293][ T5133] EXT4-fs (loop2): Remounting filesystem read-only [ 87.749305][ T5147] loop1: detected capacity change from 0 to 2048 [ 87.921471][ T5147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 87.945936][ T5170] loop4: detected capacity change from 0 to 512 [ 87.959149][ T5170] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 87.972663][ T5170] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.013695][ T5170] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.039811][ T5175] loop0: detected capacity change from 0 to 2048 [ 88.047989][ T4072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 234: padding at end of block bitmap is not set [ 88.064942][ T5170] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 88.071974][ T5170] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.509: casefold flag without casefold feature [ 88.091492][ T4072] EXT4-fs (loop1): Remounting filesystem read-only [ 88.117350][ T5170] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.509: couldn't read orphan inode 16 (err -117) [ 88.506816][ T5182] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 88.513972][ T5182] syzkaller0: linktype set to 774 [ 88.679504][ T5191] loop2: detected capacity change from 0 to 2048 [ 88.920507][ T5191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.516: bg 0: block 234: padding at end of block bitmap is not set [ 88.967645][ T5208] loop3: detected capacity change from 0 to 2048 [ 89.044007][ T5191] EXT4-fs (loop2): Remounting filesystem read-only [ 89.108916][ T5210] loop1: detected capacity change from 0 to 2048 [ 89.221983][ T5222] loop0: detected capacity change from 0 to 512 [ 89.235647][ T5221] loop2: detected capacity change from 0 to 2048 [ 89.256497][ T5210] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.521: bg 0: block 234: padding at end of block bitmap is not set [ 89.281536][ T5210] EXT4-fs (loop1): Remounting filesystem read-only [ 89.292660][ T5222] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.300794][ T5222] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.357007][ T5222] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.404457][ T5222] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 89.418750][ T5222] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.523: casefold flag without casefold feature [ 89.471048][ T5222] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.523: couldn't read orphan inode 16 (err -117) [ 89.575935][ T5236] loop0: detected capacity change from 0 to 512 [ 89.611122][ T5236] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 89.727999][ T5236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 89.736526][ T5236] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.528: corrupted in-inode xattr: e_value size too large [ 89.751663][ T5236] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.528: couldn't read orphan inode 15 (err -117) [ 90.284571][ T5257] loop3: detected capacity change from 0 to 2048 [ 90.304044][ T5259] loop4: detected capacity change from 0 to 2048 [ 90.372437][ T5259] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.536: bg 0: block 234: padding at end of block bitmap is not set [ 90.373377][ T5257] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.535: bg 0: block 234: padding at end of block bitmap is not set [ 90.387616][ T5259] EXT4-fs (loop4): Remounting filesystem read-only [ 90.403977][ T5257] EXT4-fs (loop3): Remounting filesystem read-only [ 90.453748][ T5267] loop1: detected capacity change from 0 to 2048 [ 90.639697][ T5282] loop3: detected capacity change from 0 to 2048 [ 90.656529][ T5285] loop4: detected capacity change from 0 to 512 [ 90.696604][ T5285] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.720282][ T5285] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.758977][ T5285] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.794499][ T5285] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 90.809150][ T5298] loop1: detected capacity change from 0 to 1024 [ 90.812642][ T5285] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.540: casefold flag without casefold feature [ 90.850196][ T5285] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.540: couldn't read orphan inode 16 (err -117) [ 90.850321][ T5298] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.548: Allocating blocks 385-513 which overlap fs metadata [ 90.958283][ T5298] EXT4-fs (loop1): pa ffff888104b5a770: logic 16, phys. 129, len 24 [ 90.966409][ T5298] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 91.151998][ T5307] loop3: detected capacity change from 0 to 2048 [ 91.252648][ T5307] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.550: bg 0: block 234: padding at end of block bitmap is not set [ 91.255233][ T5298] netlink: 76 bytes leftover after parsing attributes in process `syz.1.548'. [ 91.280257][ T5315] loop2: detected capacity change from 0 to 2048 [ 91.286836][ T5307] EXT4-fs (loop3): Remounting filesystem read-only [ 91.384804][ T5315] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.553: bg 0: block 234: padding at end of block bitmap is not set [ 91.405166][ T5315] EXT4-fs (loop2): Remounting filesystem read-only [ 91.562002][ T5330] loop0: detected capacity change from 0 to 2048 [ 91.580868][ T5335] loop2: detected capacity change from 0 to 2048 [ 91.701274][ T5346] loop3: detected capacity change from 0 to 512 [ 91.714746][ T5345] loop0: detected capacity change from 0 to 2048 [ 91.753062][ T5346] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 91.761603][ T5346] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.770879][ T5346] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.787466][ T5346] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 91.798100][ T5346] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.560: casefold flag without casefold feature [ 91.813636][ T5346] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.560: couldn't read orphan inode 16 (err -117) [ 92.254512][ T29] kauditd_printk_skb: 1103 callbacks suppressed [ 92.254527][ T29] audit: type=1326 audit(1746330550.185:12370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.306076][ T29] audit: type=1326 audit(1746330550.215:12371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.329738][ T29] audit: type=1326 audit(1746330550.215:12372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.353210][ T29] audit: type=1326 audit(1746330550.215:12373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.437931][ T29] audit: type=1326 audit(1746330550.285:12374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.461444][ T29] audit: type=1326 audit(1746330550.285:12375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.484825][ T29] audit: type=1326 audit(1746330550.285:12376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.493769][ T5359] loop3: detected capacity change from 0 to 2048 [ 92.508283][ T29] audit: type=1326 audit(1746330550.285:12377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.538420][ T29] audit: type=1326 audit(1746330550.285:12378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.545906][ T5366] FAULT_INJECTION: forcing a failure. [ 92.545906][ T5366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.561853][ T29] audit: type=1326 audit(1746330550.285:12379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe2d238e969 code=0x7ffc0000 [ 92.574892][ T5366] CPU: 1 UID: 0 PID: 5366 Comm: syz.2.567 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 92.574970][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 92.574986][ T5366] Call Trace: [ 92.574995][ T5366] [ 92.575006][ T5366] __dump_stack+0x1d/0x30 [ 92.575032][ T5366] dump_stack_lvl+0xe8/0x140 [ 92.575051][ T5366] dump_stack+0x15/0x1b [ 92.575074][ T5366] should_fail_ex+0x265/0x280 [ 92.575118][ T5366] should_fail+0xb/0x20 [ 92.575224][ T5366] should_fail_usercopy+0x1a/0x20 [ 92.575250][ T5366] _copy_to_user+0x20/0xa0 [ 92.575310][ T5366] simple_read_from_buffer+0xb5/0x130 [ 92.575341][ T5366] proc_fail_nth_read+0x100/0x140 [ 92.575405][ T5366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.575437][ T5366] vfs_read+0x19d/0x6f0 [ 92.575466][ T5366] ? __rcu_read_unlock+0x4f/0x70 [ 92.575493][ T5366] ? __fget_files+0x184/0x1c0 [ 92.575530][ T5366] ksys_read+0xda/0x1a0 [ 92.575638][ T5366] __x64_sys_read+0x40/0x50 [ 92.575670][ T5366] x64_sys_call+0x2d77/0x2fb0 [ 92.575698][ T5366] do_syscall_64+0xd0/0x1a0 [ 92.575725][ T5366] ? clear_bhb_loop+0x25/0x80 [ 92.575829][ T5366] ? clear_bhb_loop+0x25/0x80 [ 92.575855][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.575884][ T5366] RIP: 0033:0x7ff75fe8d37c [ 92.575904][ T5366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.575999][ T5366] RSP: 002b:00007ff75e4f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.576024][ T5366] RAX: ffffffffffffffda RBX: 00007ff7600b5fa0 RCX: 00007ff75fe8d37c [ 92.576040][ T5366] RDX: 000000000000000f RSI: 00007ff75e4f70a0 RDI: 0000000000000004 [ 92.576056][ T5366] RBP: 00007ff75e4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.576071][ T5366] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.576087][ T5366] R13: 0000000000000000 R14: 00007ff7600b5fa0 R15: 00007fff4c6fe3b8 [ 92.576115][ T5366] [ 92.680348][ T5363] loop4: detected capacity change from 0 to 2048 [ 92.899846][ T5359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.566: bg 0: block 234: padding at end of block bitmap is not set [ 92.963206][ T5359] EXT4-fs (loop3): Remounting filesystem read-only [ 92.999012][ T5363] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.568: bg 0: block 234: padding at end of block bitmap is not set [ 93.030081][ T5363] EXT4-fs (loop4): Remounting filesystem read-only [ 93.208143][ T5394] loop3: detected capacity change from 0 to 512 [ 93.225375][ T5394] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.235388][ T5394] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.242020][ T5394] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.258153][ T5394] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 93.265171][ T5394] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.575: casefold flag without casefold feature [ 94.064768][ T5394] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.575: couldn't read orphan inode 16 (err -117) [ 94.169905][ T5404] FAULT_INJECTION: forcing a failure. [ 94.169905][ T5404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.183267][ T5404] CPU: 0 UID: 0 PID: 5404 Comm: syz.4.581 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 94.183296][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 94.183308][ T5404] Call Trace: [ 94.183314][ T5404] [ 94.183324][ T5404] __dump_stack+0x1d/0x30 [ 94.183426][ T5404] dump_stack_lvl+0xe8/0x140 [ 94.183445][ T5404] dump_stack+0x15/0x1b [ 94.183460][ T5404] should_fail_ex+0x265/0x280 [ 94.183498][ T5404] should_fail+0xb/0x20 [ 94.183571][ T5404] should_fail_usercopy+0x1a/0x20 [ 94.183662][ T5404] _copy_to_user+0x20/0xa0 [ 94.183683][ T5404] map_get_next_key+0x277/0x330 [ 94.183713][ T5404] __sys_bpf+0x707/0x790 [ 94.183755][ T5404] __x64_sys_bpf+0x41/0x50 [ 94.183865][ T5404] x64_sys_call+0x2478/0x2fb0 [ 94.183885][ T5404] do_syscall_64+0xd0/0x1a0 [ 94.183912][ T5404] ? clear_bhb_loop+0x25/0x80 [ 94.183938][ T5404] ? clear_bhb_loop+0x25/0x80 [ 94.183965][ T5404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.184040][ T5404] RIP: 0033:0x7f72c963e969 [ 94.184102][ T5404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.184125][ T5404] RSP: 002b:00007f72c7ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.184181][ T5404] RAX: ffffffffffffffda RBX: 00007f72c9865fa0 RCX: 00007f72c963e969 [ 94.184193][ T5404] RDX: 0000000000000020 RSI: 0000200000000880 RDI: 0000000000000004 [ 94.184204][ T5404] RBP: 00007f72c7ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.184216][ T5404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.184227][ T5404] R13: 0000000000000000 R14: 00007f72c9865fa0 R15: 00007ffcf947d2f8 [ 94.184247][ T5404] [ 94.372783][ T5406] loop0: detected capacity change from 0 to 2048 [ 94.379388][ T5411] loop3: detected capacity change from 0 to 2048 [ 94.446927][ T5420] loop1: detected capacity change from 0 to 512 [ 94.459897][ T5421] loop4: detected capacity change from 0 to 128 [ 94.480347][ T5422] loop2: detected capacity change from 0 to 512 [ 94.489258][ T5420] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.503423][ T5422] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #12: comm syz.2.584: corrupted in-inode xattr: invalid ea_ino [ 94.519998][ T5412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 94.527890][ T5412] FAT-fs (loop4): Filesystem has been set read-only [ 94.540228][ T5420] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.546268][ T5412] bio_check_eod: 156 callbacks suppressed [ 94.546289][ T5412] syz.4.583: attempt to access beyond end of device [ 94.546289][ T5412] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 94.557096][ T5420] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.566196][ T5412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 94.584927][ T5422] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.584: couldn't read orphan inode 12 (err -117) [ 94.588719][ T5412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 94.610935][ T5413] syz.4.583: attempt to access beyond end of device [ 94.610935][ T5413] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 94.624312][ T5413] buffer_io_error: 70 callbacks suppressed [ 94.624329][ T5413] Buffer I/O error on dev loop4, logical block 2065, async page read [ 94.643541][ T5413] syz.4.583: attempt to access beyond end of device [ 94.643541][ T5413] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 94.656762][ T5413] Buffer I/O error on dev loop4, logical block 2066, async page read [ 94.665440][ T5420] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 94.687289][ T5422] Cannot find add_set index 0 as target [ 94.702457][ T5420] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.582: casefold flag without casefold feature [ 94.704278][ T5413] syz.4.583: attempt to access beyond end of device [ 94.704278][ T5413] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 94.728404][ T5413] Buffer I/O error on dev loop4, logical block 2067, async page read [ 94.731784][ T5420] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.582: couldn't read orphan inode 16 (err -117) [ 94.737029][ T5413] syz.4.583: attempt to access beyond end of device [ 94.737029][ T5413] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 94.762056][ T5413] Buffer I/O error on dev loop4, logical block 2068, async page read [ 94.795615][ T5413] syz.4.583: attempt to access beyond end of device [ 94.795615][ T5413] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 94.808842][ T5413] Buffer I/O error on dev loop4, logical block 2069, async page read [ 94.839536][ T5433] syz.2.586: attempt to access beyond end of device [ 94.839536][ T5433] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 94.853445][ T5413] syz.4.583: attempt to access beyond end of device [ 94.853445][ T5413] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 94.866741][ T5413] Buffer I/O error on dev loop4, logical block 2070, async page read [ 94.877728][ T5413] syz.4.583: attempt to access beyond end of device [ 94.877728][ T5413] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 94.890959][ T5413] Buffer I/O error on dev loop4, logical block 2071, async page read [ 94.899923][ T5413] syz.4.583: attempt to access beyond end of device [ 94.899923][ T5413] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 94.913242][ T5413] Buffer I/O error on dev loop4, logical block 2072, async page read [ 94.926867][ T5436] loop2: detected capacity change from 0 to 128 [ 94.936790][ T5437] loop1: detected capacity change from 0 to 512 [ 94.939586][ T5413] Buffer I/O error on dev loop4, logical block 2065, async page read [ 94.943119][ T5436] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 94.944893][ T5436] ext2 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.969931][ T5413] Buffer I/O error on dev loop4, logical block 2066, async page read [ 95.001282][ T5437] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.010186][ T5437] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.017919][ T5437] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.033557][ T5437] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 95.034924][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 95.041376][ T5437] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.587: casefold flag without casefold feature [ 95.051547][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 95.071459][ T5437] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.587: couldn't read orphan inode 16 (err -117) [ 95.338846][ T5457] loop2: detected capacity change from 0 to 2048 [ 95.370454][ T5462] loop1: detected capacity change from 0 to 2048 [ 95.444241][ T5457] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.594: bg 0: block 234: padding at end of block bitmap is not set [ 95.459399][ T5457] EXT4-fs (loop2): Remounting filesystem read-only [ 95.547918][ T5455] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.593: bg 0: block 234: padding at end of block bitmap is not set [ 95.602300][ T5455] EXT4-fs (loop1): Remounting filesystem read-only [ 95.658269][ T5470] loop0: detected capacity change from 0 to 2048 [ 95.688742][ T5472] loop1: detected capacity change from 0 to 512 [ 95.700367][ T5472] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #12: comm syz.1.597: corrupted in-inode xattr: invalid ea_ino [ 95.778506][ T5472] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.597: couldn't read orphan inode 12 (err -117) [ 95.829255][ T5472] Cannot find add_set index 0 as target [ 95.933784][ T5484] loop0: detected capacity change from 0 to 512 [ 95.950603][ T5484] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 95.976489][ T5484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.992721][ T5484] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.013064][ T5490] loop1: detected capacity change from 0 to 128 [ 96.022103][ T5485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.030079][ T5485] FAT-fs (loop1): Filesystem has been set read-only [ 96.057020][ T5485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.064999][ T5485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.082538][ T5484] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 96.092529][ T5484] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.598: casefold flag without casefold feature [ 96.119441][ T5492] loop4: detected capacity change from 0 to 512 [ 96.133488][ T5492] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.168193][ T5492] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.174644][ T5484] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.598: couldn't read orphan inode 16 (err -117) [ 96.186823][ T5492] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.225388][ T5492] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 96.237571][ T5499] loop1: detected capacity change from 0 to 512 [ 96.254633][ T5499] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.266992][ T5492] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.603: casefold flag without casefold feature [ 96.279778][ T5499] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.279923][ T5492] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.603: couldn't read orphan inode 16 (err -117) [ 96.333802][ T5499] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.361518][ T5501] loop3: detected capacity change from 0 to 128 [ 96.409625][ T5499] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 96.416599][ T5501] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 96.428490][ T5499] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.604: casefold flag without casefold feature [ 96.464220][ T5501] ext2 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.510806][ T5504] loop0: detected capacity change from 0 to 2048 [ 96.523068][ T5499] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.604: couldn't read orphan inode 16 (err -117) [ 96.585860][ T5518] loop1: detected capacity change from 0 to 2048 [ 96.596670][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 96.629697][ T5504] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.605: bg 0: block 234: padding at end of block bitmap is not set [ 96.644536][ T5504] EXT4-fs (loop0): Remounting filesystem read-only [ 96.759643][ T5506] loop2: detected capacity change from 0 to 2048 [ 96.779689][ T5524] loop0: detected capacity change from 0 to 512 [ 96.790249][ T5524] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #12: comm syz.0.610: corrupted in-inode xattr: invalid ea_ino [ 96.807728][ T5524] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.610: couldn't read orphan inode 12 (err -117) [ 96.847579][ T5524] Cannot find add_set index 0 as target [ 96.877472][ T5506] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.607: bg 0: block 234: padding at end of block bitmap is not set [ 96.893748][ T5506] EXT4-fs (loop2): Remounting filesystem read-only [ 97.015295][ T5543] loop0: detected capacity change from 0 to 128 [ 97.026817][ T5537] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.034739][ T5537] FAT-fs (loop0): Filesystem has been set read-only [ 97.045561][ T5537] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.054397][ T5537] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.072633][ T5548] loop2: detected capacity change from 0 to 512 [ 97.100836][ T5548] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.109803][ T5548] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.120398][ T5548] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.137519][ T5548] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 97.144815][ T5548] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.617: casefold flag without casefold feature [ 97.189624][ T5548] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.617: couldn't read orphan inode 16 (err -117) [ 97.886611][ T5561] loop4: detected capacity change from 0 to 512 [ 97.901155][ T5554] loop1: detected capacity change from 0 to 512 [ 97.912599][ T5563] loop3: detected capacity change from 0 to 128 [ 97.913566][ T5554] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.928319][ T5563] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 97.936946][ T5561] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.952979][ T29] kauditd_printk_skb: 3396 callbacks suppressed [ 97.953003][ T29] audit: type=1326 audit(1746330555.885:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 97.953045][ T5554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.959718][ T29] audit: type=1326 audit(1746330555.885:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 97.982958][ T5561] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.993825][ T5554] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 98.039409][ T5561] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 98.040216][ T5554] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.065672][ T5563] ext2 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.099263][ T29] audit: type=1326 audit(1746330555.915:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fe8e969 code=0x7ffc0000 [ 98.122803][ T29] audit: type=1326 audit(1746330555.915:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 98.146228][ T29] audit: type=1326 audit(1746330555.915:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 98.161932][ T5569] loop2: detected capacity change from 0 to 2048 [ 98.169646][ T29] audit: type=1326 audit(1746330555.915:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 98.182546][ T5554] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 98.199354][ T29] audit: type=1326 audit(1746330555.915:15775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75fe2ab39 code=0x7ffc0000 [ 98.199388][ T29] audit: type=1326 audit(1746330555.915:15776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff75fe85927 code=0x7ffc0000 [ 98.219128][ T5561] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.285529][ T5554] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.619: casefold flag without casefold feature [ 98.299723][ T5572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 98.319194][ T5554] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.619: couldn't read orphan inode 16 (err -117) [ 98.344792][ T5561] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 98.351837][ T5561] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.620: casefold flag without casefold feature [ 98.404575][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'. [ 98.421049][ T5561] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.620: couldn't read orphan inode 16 (err -117) [ 98.454745][ T5575] loop1: detected capacity change from 0 to 2048 [ 98.468246][ T4073] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:30: bg 0: block 234: padding at end of block bitmap is not set [ 98.485868][ T4073] EXT4-fs (loop2): Remounting filesystem read-only [ 98.533113][ T3304] ================================================================== [ 98.541251][ T3304] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 98.549013][ T3304] [ 98.551355][ T3304] read-write to 0xffff888237c26b70 of 8 bytes by task 5575 on cpu 0: [ 98.559438][ T3304] find_get_block_common+0x4f0/0x960 [ 98.564771][ T3304] bdev_getblk+0x7f/0x3d0 [ 98.569134][ T3304] __ext4_get_inode_loc+0x303/0x930 [ 98.574375][ T3304] ext4_reserve_inode_write+0xdb/0x230 [ 98.579872][ T3304] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 98.585267][ T3304] ext4_ext_truncate+0x5a/0x170 [ 98.590140][ T3304] ext4_truncate+0x6f8/0xac0 [ 98.594761][ T3304] ext4_write_end+0x44b/0x730 [ 98.599457][ T3304] ext4_da_write_end+0x71/0x7b0 [ 98.604330][ T3304] generic_perform_write+0x30f/0x490 [ 98.609654][ T3304] ext4_buffered_write_iter+0x1ee/0x3c0 [ 98.615263][ T3304] ext4_file_write_iter+0xdbf/0xf00 [ 98.620481][ T3304] do_iter_readv_writev+0x41e/0x4c0 [ 98.625697][ T3304] vfs_writev+0x2c9/0x870 [ 98.630049][ T3304] __se_sys_pwritev2+0xfc/0x1c0 [ 98.634921][ T3304] __x64_sys_pwritev2+0x67/0x80 [ 98.639788][ T3304] x64_sys_call+0x1cea/0x2fb0 [ 98.644478][ T3304] do_syscall_64+0xd0/0x1a0 [ 98.648995][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.654901][ T3304] [ 98.657244][ T3304] read to 0xffff888237c26b70 of 8 bytes by task 3304 on cpu 1: [ 98.664793][ T3304] has_bh_in_lru+0x35/0x1f0 [ 98.669312][ T3304] smp_call_function_many_cond+0x394/0xb20 [ 98.675148][ T3304] on_each_cpu_cond_mask+0x3c/0x80 [ 98.680294][ T3304] invalidate_bh_lrus+0x2a/0x30 [ 98.685159][ T3304] blkdev_flush_mapping+0x9a/0x1a0 [ 98.690289][ T3304] bdev_release+0x2bf/0x3d0 [ 98.694810][ T3304] blkdev_release+0x15/0x20 [ 98.699346][ T3304] __fput+0x298/0x650 [ 98.703348][ T3304] ____fput+0x1c/0x30 [ 98.707484][ T3304] task_work_run+0x12e/0x1a0 [ 98.712091][ T3304] resume_user_mode_work+0x6a/0x70 [ 98.717219][ T3304] syscall_exit_to_user_mode+0x77/0xb0 [ 98.722703][ T3304] do_syscall_64+0xdd/0x1a0 [ 98.727220][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.733124][ T3304] [ 98.735466][ T3304] value changed: 0x0000000000000000 -> 0xffff88811ad333a8 [ 98.742590][ T3304] [ 98.744919][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 98.751076][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 98.763674][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.773742][ T3304] ================================================================== [ 98.792167][ T5585] loop2: detected capacity change from 0 to 512 [ 98.805673][ T5585] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #12: comm syz.2.626: corrupted in-inode xattr: invalid ea_ino [ 98.830775][ T5581] loop0: detected capacity change from 0 to 2048 [ 98.842530][ T5585] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.626: couldn't read orphan inode 12 (err -117) [ 98.867203][ T5585] Cannot find add_set index 0 as target [ 98.939961][ T5581] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.627: bg 0: block 234: padding at end of block bitmap is not set [ 98.954518][ T5581] EXT4-fs (loop0): Remounting filesystem read-only