last executing test programs: 5.049103117s ago: executing program 0 (id=1173): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xedb48fceea800593}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x743a, 0x7f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008801}, 0x811) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000302"], 0x44}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000ec0)={0x15a8, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xff, 0xa}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xc, 0x9}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x53, 0xfa, "240cc179ecd44e466c469ed5244d3ae7c82a01ed8ca8eba4d6b7785bf2068c3196de05e9cbef8f3ecae59f5d88d8e441fb12352c0a1f1738e4a22bafdea7922ac3f8dee3cec0caea0e5c1244ce8e7f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "72dad89f7061e4e8cdee289ac38c5e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "c4fc6465160673"}, @NL80211_ATTR_FILS_ERP_RRK={0xa4, 0xfc, "f826dc0fe9e47158c3424e8257076502ab45358cc3af98a9d6edb7b82eceef17a1b6b309716ac2e35148c22e97fa0c9b22086b337d62dbe35c70a82a77a905aade6636dd1cab623a21a44224da27181b616b8b47a7ef64cc6c877a017c3245fdcfbacfc1f5f6444dba97e02b63bd7458989aad3d92b3ce72a96b3736cee363bd068bf357dd47e5dcf7d2932c2c3ddb009280bec795273e5a8541574f2ee0bc91"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "e07573a6d902298846d21775700ed6b9"}, @NL80211_ATTR_FILS_ERP_REALM={0xda, 0xfa, "cad4a2fd3a18a09a58ae3d862b6df0c53028d90062d8875e0ef0367bc61357600f95cb2184a1dd1e9844ea0d4914aaa34cd1548d7790918b83d32f15b656245ba06959fb5750ce539986d1547178e65d541ef9f61ae71e9fb733924243eef11f9e926f9e0700f4041dd98427f9077880d178eaab43d5691a94828e75682c1f60c65f1a0652fd803eb9a6503a7308ad7cebb7d40a29b904f2d5cd314df760adf5e8c21990e7cca6969385067ac3b9de640a69596afba5f179e4587535df4d4ddb268b4009a4f514c50b1fa171a115f74c70b46f521fae"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @NL80211_ATTR_IE={0xfd, 0x2a, [@fast_bss_trans={0x37, 0xb3, {0x7, 0x3, "094c44ccad1c461f419042d4b4f4420b", "d5d04f66096367e32867bd914fc5a8a6511ee3e5c49a1b1f64a8edb46d2092ba", "1f04e6b447ae2d89ae33fdf8f4b2e7a6a67bdc69f7a8ef1706606fecfad5bc95", [{0x3, 0x1f, "ff8146b49a6a4ff859e028b395949907817c97fe9538c025a6f88fb1c97b2b"}, {0x4, 0x25, "e2d58f74c7643cb1f9d2e9ea5aa9185b0c28be3609bc1c5202c70f1296bab3b82d16f9e5a3"}, {0x3, 0x17, "39a2e8642e91749c79b7b45aea6e5fc67490562f3d5bf3"}]}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x2d, 0xe1, @device_b, 0xfffff001, 0x7}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x8a}}, @ibss={0x6, 0x2}, @mic={0x8c, 0x18, {0xf37, "1f0247a3cb26", @long="d39065f225e7b3a6ff209766720f4355"}}, @chsw_timing={0x68, 0x4, {0x9, 0xef1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff7}, @NL80211_ATTR_FILS_ERP_REALM={0x46, 0xfa, "59776dd72021e74fb15710893d688a11f97a8161d21ac4757141c7276e3823fd2d579da100f6f2847d73be51d5ce7323c0f427b9b27185c5a47635bcae378feb9db3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x98, 0xfa, "e382272d8b8a4b1e81327834bafde8890763a12688d325f6155a59133342ca982a7d7f14bf5a80499bbfd79126773471ef1530c10baa22e3c409195d2c896c4cd578ca2258b2c6aa645b097c7f747d1886dc512e20fcbb53e436b228c13092dc41c5aecf89e02c082653c4ee6320e52cf30074ac8ddc48ee0e682f2d33f7877f7c55e6adf42ddc81263a4e33a97335acda338c56"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}, @NL80211_ATTR_FILS_ERP_RRK={0xa1, 0xfc, "ebccd7ac139720e8e9ff4a9939ccaccf64ac7e286a805f84be7af20abe8306d147a56ac26b5b383bb887431eaa0876aa143f0f3c5bd228ea0d0351f772f170d5136cedb959ef630a10a0a8158e1d85e992c5e05f1dc2d9cffdc78a5099bf8f6378364b1912223c52b2a138413e54bad299152e95b99303da1c81507d042cc7f4f0f5d381acd1fc29cc9220045798120e36bba8b59741d335c749ec8696"}, @NL80211_ATTR_FILS_ERP_REALM={0x98, 0xfa, "7a171052e2607b0b321b85c2a31a7c64a813e03c27d4319f178163179e007fc9f537e7440a9746884524dbc4f88c4791ac3cf93f07c13d5f02ab5bfb77469cb591cb6016491216aa3be5d049923bffdb377f38bbf8ec05a30afc97a7fea1b18c802a433485b2677137db9e22021558ea829ee13307d7981ebc908f3763b1cc5f09e584462fbc966ac7ade9cd4c8f0d80186c01cc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}]]}, 0x15a8}, 0x1, 0x0, 0x0, 0xa7497014873fcea6}, 0x40000000) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 4.953356034s ago: executing program 0 (id=1174): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, r2, 0x713}, 0x14}}, 0x0) 4.845009322s ago: executing program 0 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000b05000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x27c97000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2f4b40f0a28f8cb9}, 0x20004094) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x0, 0xf8, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004b168140ca0408306c5d010203010902e60001000000000904000002871475000a24010000000201020524040000090500000000000000941a80d4e5a4143a54bb56caa18fbfb3f261236ef04405a60b462771428df580dbdc8ad82d41ae6704eb57533456e7f0c485ffd4d612efeaf9b52a54307a22af6842497eee67a3ce832eeeb77c7669ef52f9013e132fa4fb3293c6a38d3fb35ca47d8eefc3dfc8fb2c251910e4eae371e408abe8428251c4289c4866eb2ce08f6b465ae0b0c5f84cd03b9283c0aac55e09683f5907250100000000090500000000000000190076af278be2cd933ef57ba2c0ad1d45debe37287c0c0563"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010001fff00"/18, @ANYBLOB], 0x34}}, 0x0) 4.537073865s ago: executing program 3 (id=1182): ioperm(0x0, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7a1, 0x4, 0x3, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r9 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) 3.79021409s ago: executing program 2 (id=1195): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x200) sendfile(r3, r4, 0x0, 0xe066) sendfile(r3, r4, 0x0, 0xffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x4, 0x8, 0x8, 0x1014, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x1f0, 0x2e8, 0x2e8, 0x1f0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) socket$nl_netfilter(0x10, 0x3, 0xc) 3.697115556s ago: executing program 2 (id=1196): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsmount(r4, 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0xac}}, 0x0) pidfd_getfd(r5, r5, 0x0) 3.685142768s ago: executing program 3 (id=1197): ioperm(0x0, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 2.799479103s ago: executing program 3 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000100)={0xb6, 0x1, 0x7, 0xfffffffffffffffa}) mq_timedreceive(r2, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[], 0xfe6f) 2.772323715s ago: executing program 2 (id=1209): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.409118432s ago: executing program 3 (id=1210): ioperm(0x0, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7a1, 0x4, 0x3, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x20000000000001bf, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r10 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) 1.795334727s ago: executing program 0 (id=1213): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) fchdir(r0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.629868019s ago: executing program 1 (id=1214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500"], &(0x7f0000000180)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 1.590282872s ago: executing program 1 (id=1215): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x80000000000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) 1.546817516s ago: executing program 3 (id=1216): ioperm(0x0, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7a1, 0x4, 0x3, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 1.531943327s ago: executing program 2 (id=1217): ioperm(0x0, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7a1, 0x4, 0x3, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x20000000000001bf, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r10 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) 1.516420428s ago: executing program 1 (id=1218): ioperm(0x0, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7a1, 0x4, 0x3, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x20000000000001bf, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) socket$inet6(0xa, 0x806, 0x0) 1.386107517s ago: executing program 4 (id=1219): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsmount(r4, 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0xac}}, 0x0) pidfd_getfd(r5, r5, 0x0) 869.942505ms ago: executing program 0 (id=1220): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x5410, 0x80000020000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}, {&(0x7f0000000a80)=""/244}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/227}, {&(0x7f0000000340)=""/41}], 0x0, &(0x7f0000000d00)=""/154}, 0x4008}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c000000000011907800000000e000000100004e200048907803000000000000000c36d36cb54053d71b5ec8489414f22d58e02a13bdc96c608304ce8802734a58d233de6e5ce7933f791d3a7dfadd7bb9883d675a41f863add26d6a43a63fb2208c544949844e855e0260d194a278381191526e96d28a3f912bcce1504aac982671f7"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000001c0)={0x6, 0xd5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xbb9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x810) 679.674579ms ago: executing program 2 (id=1221): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 644.883602ms ago: executing program 2 (id=1222): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000f65e580d1e272f8bff834b91154cd584e35651b0c3ca39e2f67bf28c1edeb6d422951adb8329d61bd2bfa6b0ea84903402d8aaded04fe7c85188373498846c96a80931dfa1d669b55da2e65c8b137e38be411df577062cce901a4198e5435aa1f0283920cd61cb44be30839bb95ad15d8e251a6678140e8147af74edbb500b3ecdd56a0c27a97c14164ece8f46ae8fdd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {0x8}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 640.659682ms ago: executing program 3 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000b05000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x27c97000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2f4b40f0a28f8cb9}, 0x20004094) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x0, 0xf8, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004b168140ca0408306c5d010203010902e60001000000000904000002871475000a24010000000201020524040000090500000000000000941a80d4e5a4143a54bb56caa18fbfb3f261236ef04405a60b462771428df580dbdc8ad82d41ae6704eb57533456e7f0c485ffd4d612efeaf9b52a54307a22af6842497eee67a3ce832eeeb77c7669ef52f9013e132fa4fb3293c6a38d3fb35ca47d8eefc3dfc8fb2c251910e4eae371e408abe8428251c4289c4866eb2ce08f6b465ae0b0c5f84cd03b9283c0aac55e09683f5907250100000000090500000000000000190076af278be2cd933ef57ba2c0ad1d45debe37287c0c0563"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010001fff00"/18, @ANYBLOB], 0x34}}, 0x0) 637.508883ms ago: executing program 1 (id=1224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001f40)=ANY=[@ANYBLOB="620af8fffa201821bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d0a8a175b2bfa51a21b939a98c1e1aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa08e45d73085664032b73c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6ffc043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b899b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa79f6b5c02e6d6d90756ff6fa1e85e0b9d57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d68d5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32472ad078b2f1d7a0b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571b01fee307f3fd544ca1c9fee54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6efd7211fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d333545794f37331766e472391e358c3b377327ac9ecc35bc2ba80274ba156c0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2776399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000000048418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf3881c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560ebbc55a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab5de6520aa61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000002000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785ef0769bfc23d9787e3418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645ce0596560d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b15f8d44e24ac4fbaacb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b9d713acebc5b014e61a543a5a19569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a98d86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f5240000d2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252916d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b36361a21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9fc4257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a0652b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaafead57775c5af734dcbb6146fbe7c6e7c2630661eee9b1d6fb6174a9e4061cf34c6eb77ab067a7e74e96762e123d31aa38c39cd62c8500f07cd901f328e1a2d06f4d04a6d96d7b63d5d69408d54ef5364302f9b6283d9ecc738c22cd49c61b6605bf894649bdec46317f16239025b30822c045938e5554ccf0f56e959a24ece3abd8bf5ca286bb13992b3bbdd1bb9765db0a28a2d35a51094155dc9d50df92bf01b5160e670109100000000000000000000a2b8453c8093dc52106651e35a6d72094d90e28aa5748565bf20c6f00eb349f62918bba610513b32d04f8cc0096ee7d5e416feba4c34525e051637830000000c9b30701cf4490a97e4cc9da6456aafb4611ac55c9381f5b8e84e80584a06b20fa8a48be4e1adddb895afde76338339eb9caa21c80eb375e7dd07da5a335dec6b8ea877aa79db4c1bdaedada7dd4b545efb8b9037691c7a0a1bd55b941a000c88d9b275949de690e2d51c65e71dc411e2926602abc448386060a53bccfe99cfce32af644bf517b4cb5d21868a5c2dc9cc3063b065ac5b6d64f75a6e17a2bbe825995f251deb0838bc579d52c211adbceaf71166244604d3231cf37d8075cc819e5abb9738682cdcf8d7398608d65bd809f5b863fcc49c7aa56b15bbfc2f9d400e06c37552e7126e17c09dc4cde174b1ce709e723445fc796cd7fd69cb47f06266c8af36aa1f40ca6f62173c243e4ebcbbd853df538abca2ad12729903273fa4262cc0afc19d39d0cacfd42383ad340ee74bf9e78eef13d0d90b1887a5e57e1f6521253ebbe29ad80e73bdb8e9063580f9b4a4ce6a32ed3c8e641e8889fafb69b88015296bd03dbfa636a123cb2f6026f5ae8c27d68a00136b356862a11aec64ba9245e703861bc84f6afd995b8bd15af38176640e1359d91e49d4c1fa30b6ca6d46c4bfac68c151eeaec394d848fe4ab2cb569dca02a8ee7a378c4bbbbcb89c4892eaac10d070b5a2d82602db9563d5e259365b75f1d16eb9078e7f0645a956cc3086eeec8714d9b59e"], &(0x7f0000001000)='GPL\x00'}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='overlay\x00', 0xfffffffffffffffd) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff0000000000000000850000004100000085000000050000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@jqfmt_vfsv0}]}, 0xf5, 0x47a, &(0x7f0000000f40)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000f40)=ANY=[], 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)=@usbdevfs_driver={0x4, 0x8, &(0x7f00000002c0)="a3b6b7ec834da606fbafd0d15cb28bd1653f43baab9dcf3c6e905ee35857f3d2158923bdc9835b078688ae523d3d907d990c6dce124a60d849d99dbd2a9ca58a2f8a4c402b46a8f66e5f4e8e6f733742141c8d868e8ff2479bdc0701dc65f6dd7f43bdeea8ac437101e6ccee904d493e234c8f51a5040dda87435203c71aa525d4543413ba990054b927826e"}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r5, 0x2f, 0x1, 0xd4, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100001000000af02a0d92f124f200f306b96000000000003000000f8d7a0ef749de4cd07000000", @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2], 0x3c}}, 0x0) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) openat(r9, &(0x7f0000000300)='./file0\x00', 0x105841, 0x8) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x7, r7, 0x3}, 0xc) 486.051824ms ago: executing program 1 (id=1225): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x10}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000db00000001000000050000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioperm(0x3, 0x7, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 470.219535ms ago: executing program 4 (id=1226): r0 = io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x802}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000005500)={0x3, 0x0, 0x0, &(0x7f0000005480)=[{0x0}, {0x0}, {&(0x7f0000005380)=""/255, 0xff}], 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x4010, &(0x7f0000002200)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafF32tizs5rbnheyyZHcPu0u0zGgUK7IUa23L0mY+H5D05s1I7301enpvZjSaAEprOrtLI45ExJUkYqpt3mQ0Z04Xyz376MHV7JZEo/GbD5NIirzW8s+Lx4PZXdJ8zlvnI75V2Vzu8v3V63P1RtPDiJMrN26fXL6/emLpxty1hWsLN2dP/ez0mZmfz76xO3EeLB4vXPz19//2pz/8dPHt+okkzsbl6h/noyOO3TLdfHcjC7E9fywizmSJLu8L7KVK8XmsRsR3Yioq+VTTVCz9daiVAwaqUWn2T43xBlA6SQy7BsBwtMYBrW37QWwHj7Kn57L7e13iHyu23vfn20YHniVtW0ZZbsShXSh/LSK+eHD0X9kteuyHGNuFcnqW/ygivttt/Sd5/IfySLP400jbnpelZ4p9G1n9frmDOiRt6f4+fw93UNrLvkr87eshi/9s8Zjln+/x+lvt4pnumC5b+wNgONbPFR15NhCJjf4vGxm2xj/ROf5p/C8/NtTZd21H7/4v3YVX31o+/hvr1v+3+vv9eR+edozDklj75FL3l6x2Zrz3lwv/6FX+dNv4L7tl5bfGgn3Y8dDw6aOIox3x/zl/65MX6z/pMv7NFrnSZxm/eueDC73m7TD+HWs8jjjWdftnY1SapTqOTybROj55evbk4lJ9YaZ537WM/7/5+//0Kn/Y8Wfr/8BL8a9+rznn1es/y7vdZxn/vfT4RjO1b9O8yS3jT98fTy7nqfH8fqN5jScXi0WaD/fmVlbunHp1XVrL5I+zzfiP/6h7++8Rf77xMdH6yuzD7d9ef9b6Hu20w/X/vNHngr1k8c/3+Pxvtf7/3mcZn/7u7g+6zmi9JS/Fv7FPYmKbMQEAAAAAAEBZpfkx2CStvUinaa048PbtOJDWby2v/Hjx1t2b8xHH899DVtPWke6p5nSSTc8Wv4dtTZ/qmP5JRByOiH9WJvLp2tVqfX7YwQMAAAAAAAAAAAAAAAAAAMCIOFic//+8uB7Yx5U0rdWGXStgzwzyAnPAaNP+obzy9r8311sDRoz+H8qra/v3pQCloKlDeWn/UF7aP5SX9g/lpf1DefVu/5vmPBp0XQAAAACAXXP4h+tPxiJi7RcT+S0zXsyrDrVmwKB1tHFHAqFEKsOuADA0Lzp8p/9D6fS1jf9Z8eeAg68OMARJt8x8cNB4deNf7/pMAAAAAAAAAAAAAGAAjh1Zf5I4/x9KyWl/UF7bO/+/sv2nAiOj2x/++BMgKAfb+FByfewE2N9rhvP/AQAAAAAAAAAAAGDPTOa3JK0VPwOejDSt1SK+ERGHoposLtUXZiLimxHxbqW6L5ueHXalAQAAAAAAAAAAAAAAAAAA4DWzfH/1+ly9vnCnPfH5ppzXO9G64umo1Kc9EcnAi0ijI2ciIkYh9sEkxtpykoi1bM3vxisnO//8xCi8P0ViyF9MAAAAAAAAAAAAAAAAAABQQm3nHnd39N97XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Hsb1/8fXGLYMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX09fBgAA//925zoW") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x404000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="540020bc6fe600baf6e758e66b1e3dd307d2b52239d1580787", @ANYRES16=r5, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f00fd040000000000000c009000ff00000000000000"], 0x54}}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000007cc0)={0x2, 0x0, &(0x7f0000007c40)=[{0x0}], 0x0, 0x1}, 0x20) 329.772266ms ago: executing program 1 (id=1227): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 218.657703ms ago: executing program 4 (id=1228): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x80000000000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) 197.115475ms ago: executing program 4 (id=1229): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x200) sendfile(r3, r4, 0x0, 0xe066) sendfile(r3, r4, 0x0, 0xffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x4, 0x8, 0x8, 0x1014, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x1f0, 0x2e8, 0x2e8, 0x1f0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) socket$nl_netfilter(0x10, 0x3, 0xc) 87.557344ms ago: executing program 4 (id=1230): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f0000000740)="a5", 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r1, 0x5410, 0x80000020000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}, {&(0x7f0000000a80)=""/244}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/227}, {&(0x7f0000000340)=""/41}], 0x0, &(0x7f0000000d00)=""/154}, 0x4008}], 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xbb9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x810) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0xfecb, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) open_tree(r5, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=f']) 29.846868ms ago: executing program 4 (id=1231): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fchdir(r0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1232): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x200) sendfile(r3, r4, 0x0, 0xe066) sendfile(r3, r4, 0x0, 0xffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x4, 0x8, 0x8, 0x1014, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x1f0, 0x2e8, 0x2e8, 0x1f0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 17 occurred while creating quota [ 65.845261][ T4903] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.522: Failed to acquire dquot type 1 [ 65.857109][ T4903] EXT4-fs (loop0): 1 truncate cleaned up [ 65.863380][ T4903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.884324][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.904005][ T4914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 65.943011][ T4919] bond1: entered promiscuous mode [ 65.948133][ T4919] bond1: entered allmulticast mode [ 65.954258][ T4919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.973604][ T4919] bond1 (unregistering): Released all slaves [ 66.294619][ T4932] futex_wake_op: syz.0.529 tries to shift op by 36; fix this program [ 67.717995][ T4965] loop4: detected capacity change from 0 to 512 [ 67.761959][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.776804][ T4965] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.906947][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.976112][ T4977] loop4: detected capacity change from 0 to 512 [ 67.985800][ T4977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.004325][ T4977] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.012614][ T4977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.544: bg 0: block 248: padding at end of block bitmap is not set [ 68.028172][ T4977] Quota error (device loop4): write_blk: dquota write failed [ 68.036114][ T4977] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 68.047190][ T4977] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.544: Failed to acquire dquot type 1 [ 68.061721][ T4977] EXT4-fs (loop4): 1 truncate cleaned up [ 68.068797][ T4977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.093751][ T4977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.103330][ T4977] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.544: Abort forced by user [ 68.114208][ T4977] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 68.129217][ T4977] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 68.139776][ T4977] ext4 filesystem being remounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.152724][ T4977] Quota error (device loop4): write_blk: dquota write failed [ 68.160404][ T4977] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 68.170258][ T4977] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.544: Failed to acquire dquot type 1 [ 68.191382][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.278108][ T29] audit: type=1326 audit(1725406944.649:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.4.545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 68.385063][ T4982] loop4: detected capacity change from 0 to 512 [ 68.401537][ T4982] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.545: corrupted in-inode xattr: invalid ea_ino [ 68.417115][ T4982] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.545: couldn't read orphan inode 15 (err -117) [ 68.430667][ T4982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.432546][ T4985] loop0: detected capacity change from 0 to 512 [ 68.452080][ T4985] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.546: corrupted in-inode xattr: invalid ea_ino [ 68.466273][ T4985] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.546: couldn't read orphan inode 15 (err -117) [ 68.482193][ T4985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.641833][ T5002] loop2: detected capacity change from 0 to 512 [ 68.660987][ T5002] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 68.719451][ T5002] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 68.739316][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 69.096190][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.129691][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.199128][ T5023] loop4: detected capacity change from 0 to 512 [ 69.201577][ T5025] loop0: detected capacity change from 0 to 512 [ 69.232711][ T5025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.242271][ T5023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.275504][ T5025] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.279061][ T5023] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.299575][ T5023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.555: bg 0: block 248: padding at end of block bitmap is not set [ 69.320414][ T5025] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.556: bg 0: block 248: padding at end of block bitmap is not set [ 69.334817][ T5023] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.555: Failed to acquire dquot type 1 [ 69.357676][ T5023] EXT4-fs (loop4): 1 truncate cleaned up [ 69.369074][ T5025] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.556: Failed to acquire dquot type 1 [ 69.386693][ T5023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.393722][ T5025] EXT4-fs (loop0): 1 truncate cleaned up [ 69.408227][ T5023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.417527][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.438825][ T5023] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.555: Abort forced by user [ 69.460840][ T5023] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 69.479943][ T5025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.493606][ T5025] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.556: Abort forced by user [ 69.504815][ T5025] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 69.515175][ T5023] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 69.521517][ T5036] loop3: detected capacity change from 0 to 512 [ 69.533853][ T5036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.536979][ T5023] ext4 filesystem being remounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.542928][ T5036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.560958][ T5025] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 69.571533][ T5025] ext4 filesystem being remounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.572017][ T5036] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.559: bg 0: block 248: padding at end of block bitmap is not set [ 69.583522][ T5025] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.556: Failed to acquire dquot type 1 [ 69.611943][ T5023] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.555: Failed to acquire dquot type 1 [ 69.627013][ T5036] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.559: Failed to acquire dquot type 1 [ 69.638903][ T5036] EXT4-fs (loop3): 1 truncate cleaned up [ 69.645293][ T5036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.660658][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.684878][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.702877][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.712741][ T5041] veth1_macvtap: left allmulticast mode [ 69.718928][ T5041] veth1_macvtap: left promiscuous mode [ 69.724465][ T5041] macsec0: left allmulticast mode [ 69.750618][ T5041] veth1_macvtap: entered promiscuous mode [ 69.758127][ T5041] macsec0: entered allmulticast mode [ 69.764615][ T5041] veth1_macvtap: entered allmulticast mode [ 69.934681][ T5057] loop0: detected capacity change from 0 to 1024 [ 69.941869][ T5057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.951264][ T5057] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.078941][ T5057] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.089787][ T5057] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.118820][ T5057] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.568: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.155606][ T5057] EXT4-fs (loop0): Remounting filesystem read-only [ 70.177368][ T5057] EXT4-fs (loop0): 1 orphan inode deleted [ 70.189009][ T5057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.202660][ T5057] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 70.209645][ T5057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.576813][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 70.576826][ T29] audit: type=1326 audit(1725406946.949:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.0.572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 70.653823][ T5075] loop0: detected capacity change from 0 to 512 [ 70.695149][ T5075] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.572: corrupted in-inode xattr: invalid ea_ino [ 70.720383][ T5075] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.572: couldn't read orphan inode 15 (err -117) [ 70.766441][ T5075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.855988][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.005985][ T5090] 9pnet: Could not find request transport: f [ 71.094520][ T5103] loop2: detected capacity change from 0 to 512 [ 71.109899][ T5103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.123464][ T5103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.128430][ T29] audit: type=1326 audit(1725406947.499:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.1.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 71.135279][ T5106] bond1: entered promiscuous mode [ 71.158165][ T5106] bond1: entered allmulticast mode [ 71.163534][ T5106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.169849][ T5103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.582: bg 0: block 248: padding at end of block bitmap is not set [ 71.185216][ T5103] Quota error (device loop2): write_blk: dquota write failed [ 71.192658][ T5103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 71.203018][ T5103] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.582: Failed to acquire dquot type 1 [ 71.215933][ T5106] bond1 (unregistering): Released all slaves [ 71.216725][ T5103] EXT4-fs (loop2): 1 truncate cleaned up [ 71.228531][ T5103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.246373][ T5110] loop1: detected capacity change from 0 to 512 [ 71.267102][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.274904][ T5110] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.580: corrupted in-inode xattr: invalid ea_ino [ 71.294849][ T5110] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.580: couldn't read orphan inode 15 (err -117) [ 71.310515][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.394345][ T5116] loop2: detected capacity change from 0 to 512 [ 71.437079][ T29] audit: type=1326 audit(1725406947.809:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 71.462151][ T5116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.475958][ T5116] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.528299][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.545224][ T5123] loop0: detected capacity change from 0 to 512 [ 71.585689][ T5131] loop2: detected capacity change from 0 to 1024 [ 71.597377][ T5123] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.589: corrupted in-inode xattr: invalid ea_ino [ 71.614433][ T5131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.629096][ T5123] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.589: couldn't read orphan inode 15 (err -117) [ 71.641944][ T5131] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.665141][ T5123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.695557][ T5131] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.704247][ T5131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.729429][ T5131] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.590: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.765669][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 71.783634][ T5131] EXT4-fs (loop2): 1 orphan inode deleted [ 71.797922][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.818008][ T5131] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 71.825115][ T5131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.864523][ T29] audit: type=1326 audit(1725406948.239:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.3.593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 71.911259][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.913387][ T5144] serio: Serial port pts0 [ 71.975751][ T5140] loop3: detected capacity change from 0 to 512 [ 71.993353][ T5140] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.593: corrupted in-inode xattr: invalid ea_ino [ 72.007330][ T5140] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.593: couldn't read orphan inode 15 (err -117) [ 72.020149][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.242011][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.485895][ T5151] loop0: detected capacity change from 0 to 512 [ 72.498511][ T5151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.517990][ T5151] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.528703][ T5151] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.596: bg 0: block 248: padding at end of block bitmap is not set [ 72.543483][ T5151] Quota error (device loop0): write_blk: dquota write failed [ 72.551055][ T5151] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 72.561025][ T5151] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.596: Failed to acquire dquot type 1 [ 72.572984][ T5151] EXT4-fs (loop0): 1 truncate cleaned up [ 72.579705][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.600706][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.626844][ T5157] bond1: entered promiscuous mode [ 72.631978][ T5157] bond1: entered allmulticast mode [ 72.637457][ T5157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.652645][ T5157] bond1 (unregistering): Released all slaves [ 72.660232][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.784814][ T5165] loop0: detected capacity change from 0 to 256 [ 72.907519][ T5170] loop1: detected capacity change from 0 to 1024 [ 72.963619][ T5170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.985373][ T5175] loop2: detected capacity change from 0 to 256 [ 73.025743][ T5170] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.081591][ T5170] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.124822][ T5170] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.146060][ T5170] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.603: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.149863][ T5178] bond1: entered promiscuous mode [ 73.165806][ T5178] bond1: entered allmulticast mode [ 73.171459][ T5178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.183334][ T5170] EXT4-fs (loop1): Remounting filesystem read-only [ 73.190007][ T5170] EXT4-fs (loop1): 1 orphan inode deleted [ 73.196431][ T5170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.199666][ T5178] bond1 (unregistering): Released all slaves [ 73.209665][ T5170] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 73.225064][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.296663][ T29] audit: type=1326 audit(1725406949.669:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.0.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 73.367251][ T5187] loop2: detected capacity change from 0 to 512 [ 73.399879][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.422059][ T5187] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.490904][ T5194] loop4: detected capacity change from 0 to 512 [ 73.646574][ T5194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.740061][ T5194] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.747402][ T5194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.610: bg 0: block 248: padding at end of block bitmap is not set [ 73.768287][ T5194] Quota error (device loop4): write_blk: dquota write failed [ 73.776561][ T5194] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.610: Failed to acquire dquot type 1 [ 73.798070][ T5194] EXT4-fs (loop4): 1 truncate cleaned up [ 73.806490][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.816472][ T5194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.855677][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.870279][ T5206] bond1: entered promiscuous mode [ 73.875374][ T5206] bond1: entered allmulticast mode [ 73.884164][ T5206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.917575][ T5206] bond1 (unregistering): Released all slaves [ 74.278551][ T5218] loop4: detected capacity change from 0 to 512 [ 74.302317][ T5221] loop0: detected capacity change from 0 to 256 [ 74.305050][ T5219] loop1: detected capacity change from 0 to 1024 [ 74.316696][ T5218] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.616: corrupted in-inode xattr: invalid ea_ino [ 74.317289][ T5219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.339041][ T5219] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.350125][ T5218] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.616: couldn't read orphan inode 15 (err -117) [ 74.351044][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.375155][ T5219] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.383866][ T5219] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.391417][ T5219] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.618: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.408263][ T5219] EXT4-fs (loop1): Remounting filesystem read-only [ 74.415534][ T5219] EXT4-fs (loop1): 1 orphan inode deleted [ 74.422256][ T5219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.434961][ T5219] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 74.442559][ T5219] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.488178][ T5231] loop0: detected capacity change from 0 to 256 [ 74.596787][ T5235] loop1: detected capacity change from 0 to 512 [ 74.640133][ T5238] loop3: detected capacity change from 0 to 512 [ 74.658109][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.673137][ T5238] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.685174][ T5238] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.623: bg 0: block 248: padding at end of block bitmap is not set [ 74.688534][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.700525][ T5238] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.623: Failed to acquire dquot type 1 [ 74.701604][ T5238] EXT4-fs (loop3): 1 truncate cleaned up [ 74.713941][ T5235] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.746626][ T5238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.772249][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.876711][ T5249] loop3: detected capacity change from 0 to 512 [ 74.885648][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.919796][ T5255] loop4: detected capacity change from 0 to 256 [ 74.924699][ T5249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.927209][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.942326][ T5249] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.991002][ T5257] loop1: detected capacity change from 0 to 512 [ 75.001342][ T5257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.017603][ T5257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.025437][ T5257] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.629: bg 0: block 248: padding at end of block bitmap is not set [ 75.040591][ T5257] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.629: Failed to acquire dquot type 1 [ 75.072888][ T5257] EXT4-fs (loop1): 1 truncate cleaned up [ 75.087429][ T5257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.127616][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.138395][ T5264] loop4: detected capacity change from 0 to 256 [ 75.163647][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.474210][ T5291] loop1: detected capacity change from 0 to 512 [ 75.487047][ T5291] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.639: corrupted in-inode xattr: invalid ea_ino [ 75.515756][ T5291] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.639: couldn't read orphan inode 15 (err -117) [ 75.551392][ T5291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.658834][ T5297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.669922][ T5297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.056982][ T5302] loop2: detected capacity change from 0 to 256 [ 76.155367][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.962112][ T5332] loop2: detected capacity change from 0 to 256 [ 77.054700][ T5340] loop4: detected capacity change from 0 to 512 [ 77.066006][ T5340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.082660][ T5340] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.089702][ T5340] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.657: bg 0: block 248: padding at end of block bitmap is not set [ 77.105140][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 77.105151][ T29] audit: type=1326 audit(1725406953.489:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.2.656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 77.138563][ T5340] Quota error (device loop4): write_blk: dquota write failed [ 77.146092][ T5340] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 77.156271][ T5340] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.657: Failed to acquire dquot type 1 [ 77.171351][ T5340] EXT4-fs (loop4): 1 truncate cleaned up [ 77.183117][ T5340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.205578][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.312493][ T29] audit: type=1326 audit(1725406953.689:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.1.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 77.405495][ T5344] loop1: detected capacity change from 0 to 512 [ 77.456769][ T5344] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.658: corrupted in-inode xattr: invalid ea_ino [ 77.551467][ T5344] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.658: couldn't read orphan inode 15 (err -117) [ 77.566406][ T5344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.672181][ T5354] bond1: entered promiscuous mode [ 77.677293][ T5354] bond1: entered allmulticast mode [ 77.685388][ T5354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.721969][ T5354] bond1 (unregistering): Released all slaves [ 77.906517][ T29] audit: type=1400 audit(1725406954.269:249): avc: denied { watch watch_reads } for pid=5361 comm="syz.2.663" path="/154/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 78.184803][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.233957][ T5367] loop4: detected capacity change from 0 to 512 [ 78.259743][ T5367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.274806][ T5367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.298114][ T5367] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.665: bg 0: block 248: padding at end of block bitmap is not set [ 78.313968][ T5367] Quota error (device loop4): write_blk: dquota write failed [ 78.321396][ T5367] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 78.331400][ T5367] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.665: Failed to acquire dquot type 1 [ 78.343290][ T5367] EXT4-fs (loop4): 1 truncate cleaned up [ 78.363572][ T5367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.388868][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.392389][ T5374] loop1: detected capacity change from 0 to 512 [ 78.405661][ T5374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.418235][ T5374] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.426827][ T5374] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.667: bg 0: block 248: padding at end of block bitmap is not set [ 78.441622][ T5374] Quota error (device loop1): write_blk: dquota write failed [ 78.449099][ T5374] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 78.459041][ T5374] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.667: Failed to acquire dquot type 1 [ 78.472095][ T5374] EXT4-fs (loop1): 1 truncate cleaned up [ 78.478379][ T5374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.503615][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.553425][ T5384] loop1: detected capacity change from 0 to 256 [ 78.644790][ T5384] Cannot find add_set index 0 as target [ 78.652423][ T5390] 9pnet: Could not find request transport: f [ 78.727586][ T29] audit: type=1326 audit(1725406955.099:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.1.674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 78.748543][ T5401] loop0: detected capacity change from 0 to 256 [ 78.814258][ T5409] loop0: detected capacity change from 0 to 256 [ 78.835527][ T5393] loop3: detected capacity change from 0 to 512 [ 78.844004][ T5410] loop1: detected capacity change from 0 to 512 [ 78.853208][ T5393] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.675: corrupted in-inode xattr: invalid ea_ino [ 78.868912][ T5393] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.675: couldn't read orphan inode 15 (err -117) [ 78.872002][ T5410] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.674: corrupted in-inode xattr: invalid ea_ino [ 78.894898][ T5410] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.674: couldn't read orphan inode 15 (err -117) [ 78.918014][ T5409] Cannot find add_set index 0 as target [ 79.104928][ T5417] xt_CT: No such helper "syz0" [ 79.338303][ T5421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.347071][ T5421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.655355][ T5427] loop1: detected capacity change from 0 to 512 [ 79.663261][ T5427] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.686: corrupted in-inode xattr: invalid ea_ino [ 79.676784][ T5427] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.686: couldn't read orphan inode 15 (err -117) [ 79.726449][ T5435] loop1: detected capacity change from 0 to 256 [ 79.774388][ T5437] bond1: entered promiscuous mode [ 79.779550][ T5437] bond1: entered allmulticast mode [ 79.784961][ T5437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.796290][ T5437] bond1 (unregistering): Released all slaves [ 79.873447][ T5443] loop0: detected capacity change from 0 to 512 [ 79.880927][ T5443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.890272][ T5443] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.897054][ T5443] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.691: bg 0: block 248: padding at end of block bitmap is not set [ 79.911592][ T5443] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.691: Failed to acquire dquot type 1 [ 79.924325][ T5443] EXT4-fs (loop0): 1 truncate cleaned up [ 79.942527][ T5443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.953281][ T5443] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.691: Abort forced by user [ 79.964641][ T5443] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 79.990319][ T5443] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 80.000789][ T5443] ext4 filesystem being remounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.041378][ T5451] loop0: detected capacity change from 0 to 512 [ 80.048177][ T5451] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 80.072197][ T5451] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6 [ 80.113064][ T5451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 80.595831][ T5461] loop3: detected capacity change from 0 to 512 [ 80.649979][ T5461] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.819622][ T5469] bond1: entered promiscuous mode [ 80.824684][ T5469] bond1: entered allmulticast mode [ 80.830185][ T5469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.841103][ T5469] bond1 (unregistering): Released all slaves [ 80.887635][ T5474] loop3: detected capacity change from 0 to 4096 [ 81.061654][ T5479] loop1: detected capacity change from 0 to 512 [ 81.072974][ T5479] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.703: corrupted in-inode xattr: invalid ea_ino [ 81.077937][ T5491] loop0: detected capacity change from 0 to 256 [ 81.095923][ T5479] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.703: couldn't read orphan inode 15 (err -117) [ 81.128167][ T5488] loop3: detected capacity change from 0 to 512 [ 81.149432][ T5494] loop0: detected capacity change from 0 to 256 [ 81.178504][ T5488] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.264934][ T5503] loop0: detected capacity change from 0 to 256 [ 81.343313][ T5498] loop1: detected capacity change from 0 to 512 [ 81.351623][ T5498] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.708: corrupted in-inode xattr: invalid ea_ino [ 81.368713][ T5509] bond1: entered promiscuous mode [ 81.373781][ T5509] bond1: entered allmulticast mode [ 81.379359][ T5509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.387822][ T5498] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.708: couldn't read orphan inode 15 (err -117) [ 81.407343][ T5512] loop0: detected capacity change from 0 to 256 [ 81.408400][ T5509] bond1 (unregistering): Released all slaves [ 81.473306][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 81.558364][ T5516] loop3: detected capacity change from 0 to 512 [ 81.594694][ T5516] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.682885][ T5525] 9pnet: Could not find request transport: f [ 81.905989][ T5533] loop3: detected capacity change from 0 to 1024 [ 81.943497][ T5533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.021159][ T5533] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.057813][ T5533] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.066168][ T5533] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.074337][ T5533] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.720: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.092351][ T5533] EXT4-fs (loop3): Remounting filesystem read-only [ 82.099276][ T5533] EXT4-fs (loop3): 1 orphan inode deleted [ 82.099453][ T5544] bond1: entered promiscuous mode [ 82.105569][ T5533] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 82.110077][ T5544] bond1: entered allmulticast mode [ 82.121923][ T5544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.137696][ T5544] bond1 (unregistering): Released all slaves [ 82.155187][ T5542] bond1: entered promiscuous mode [ 82.160411][ T5542] bond1: entered allmulticast mode [ 82.166432][ T5542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.184073][ T5542] bond1 (unregistering): Released all slaves [ 82.202960][ T5551] loop2: detected capacity change from 0 to 512 [ 82.210386][ T5551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.219580][ T5551] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.226458][ T5551] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.726: bg 0: block 248: padding at end of block bitmap is not set [ 82.241149][ T5551] __quota_error: 8 callbacks suppressed [ 82.241161][ T5551] Quota error (device loop2): write_blk: dquota write failed [ 82.241428][ T29] audit: type=1326 audit(1725406958.619:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 82.246846][ T5551] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 82.287227][ T5551] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.726: Failed to acquire dquot type 1 [ 82.300793][ T5551] EXT4-fs (loop2): 1 truncate cleaned up [ 82.351784][ T5558] loop3: detected capacity change from 0 to 512 [ 82.381099][ T5555] loop4: detected capacity change from 0 to 512 [ 82.420842][ T5560] 9pnet: Could not find request transport: f [ 82.427809][ T5558] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.725: corrupted in-inode xattr: invalid ea_ino [ 82.487996][ T5555] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.506305][ T5558] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.725: couldn't read orphan inode 15 (err -117) [ 82.527406][ T5573] loop1: detected capacity change from 0 to 512 [ 82.539479][ T5570] loop2: detected capacity change from 0 to 512 [ 82.560810][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.609493][ T5573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.610756][ T5570] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.616454][ T5573] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.733: bg 0: block 248: padding at end of block bitmap is not set [ 82.686315][ T5573] Quota error (device loop1): write_blk: dquota write failed [ 82.693750][ T5573] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 82.703672][ T5573] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.733: Failed to acquire dquot type 1 [ 82.751100][ T5573] EXT4-fs (loop1): 1 truncate cleaned up [ 82.818048][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.853102][ T5573] EXT4-fs error (device loop1): __ext4_remount:6491: comm syz.1.733: Abort forced by user [ 82.894396][ T5573] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 82.978955][ T5573] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 83.037777][ T5573] ext4 filesystem being remounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.363403][ T29] audit: type=1326 audit(1725406959.739:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 83.412476][ T29] audit: type=1326 audit(1725406959.789:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.1.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 83.495865][ T5600] bond1: entered promiscuous mode [ 83.501018][ T5600] bond1: entered allmulticast mode [ 83.503719][ T5589] loop3: detected capacity change from 0 to 512 [ 83.507211][ T5600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.528829][ T5600] bond1 (unregistering): Released all slaves [ 83.537741][ T5589] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.736: corrupted in-inode xattr: invalid ea_ino [ 83.552577][ T5589] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.736: couldn't read orphan inode 15 (err -117) [ 83.685401][ T5606] loop4: detected capacity change from 0 to 256 [ 84.584742][ T5620] loop1: detected capacity change from 0 to 512 [ 84.614098][ T29] audit: type=1326 audit(1725406960.989:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.0.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 84.640002][ T5620] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.662124][ T5626] bond1: entered promiscuous mode [ 84.667199][ T5626] bond1: entered allmulticast mode [ 84.672670][ T5626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.734029][ T5626] bond1 (unregistering): Released all slaves [ 84.752697][ T5634] loop0: detected capacity change from 0 to 512 [ 84.777340][ T5634] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.749: corrupted in-inode xattr: invalid ea_ino [ 84.798780][ T5634] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.749: couldn't read orphan inode 15 (err -117) [ 84.834537][ T5640] loop2: detected capacity change from 0 to 4096 [ 85.606032][ T5651] loop1: detected capacity change from 0 to 256 [ 85.633061][ T5654] 9pnet: Could not find request transport: f [ 85.639275][ T5648] loop0: detected capacity change from 0 to 256 [ 86.135849][ T5665] loop4: detected capacity change from 0 to 512 [ 86.143956][ T5665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.177328][ T5665] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.199853][ T5665] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.761: bg 0: block 248: padding at end of block bitmap is not set [ 86.221489][ T5665] Quota error (device loop4): write_blk: dquota write failed [ 86.229119][ T5665] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 86.239050][ T5665] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.761: Failed to acquire dquot type 1 [ 86.252505][ T5665] EXT4-fs (loop4): 1 truncate cleaned up [ 86.390434][ T5684] bond1: entered promiscuous mode [ 86.395535][ T5684] bond1: entered allmulticast mode [ 86.401417][ T5684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.418145][ T5684] bond1 (unregistering): Released all slaves [ 86.529191][ T5687] loop2: detected capacity change from 0 to 512 [ 86.542211][ T5687] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 86.584688][ T5687] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 86.611191][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 86.702148][ T5700] loop1: detected capacity change from 0 to 256 [ 86.754696][ T5704] loop1: detected capacity change from 0 to 512 [ 86.764680][ T5698] loop4: detected capacity change from 0 to 512 [ 86.766249][ T5704] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 86.780607][ T5698] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.767: corrupted in-inode xattr: invalid ea_ino [ 86.797436][ T5698] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.767: couldn't read orphan inode 15 (err -117) [ 86.797497][ T5704] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 87.004846][ T5712] loop3: detected capacity change from 0 to 4096 [ 87.254716][ T5716] loop0: detected capacity change from 0 to 512 [ 87.261704][ T5704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 87.310690][ T5716] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.473474][ T5730] futex_wake_op: syz.1.775 tries to shift op by 36; fix this program [ 87.549062][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 87.549077][ T29] audit: type=1326 audit(1725406963.919:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.4.776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 87.566844][ T5733] loop2: detected capacity change from 0 to 2048 [ 87.589831][ T5728] loop4: detected capacity change from 0 to 512 [ 87.598934][ T5733] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.777: casefold flag without casefold feature [ 87.620402][ T5728] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.776: corrupted in-inode xattr: invalid ea_ino [ 87.640045][ T5733] EXT4-fs (loop2): get root inode failed [ 87.645740][ T5733] EXT4-fs (loop2): mount failed [ 87.656230][ T5728] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.776: couldn't read orphan inode 15 (err -117) [ 88.031663][ T5744] bond1: entered promiscuous mode [ 88.036741][ T5744] bond1: entered allmulticast mode [ 88.053497][ T5747] loop0: detected capacity change from 0 to 256 [ 88.066425][ T5744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.148536][ T5744] bond1 (unregistering): Released all slaves [ 88.262351][ T5753] loop0: detected capacity change from 0 to 256 [ 88.298301][ T5751] loop3: detected capacity change from 0 to 2048 [ 88.330732][ T5751] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.782: casefold flag without casefold feature [ 88.354513][ T5751] EXT4-fs (loop3): get root inode failed [ 88.360294][ T5751] EXT4-fs (loop3): mount failed [ 88.778734][ T29] audit: type=1326 audit(1725406965.149:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5776 comm="syz.4.791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 88.853960][ T5777] loop4: detected capacity change from 0 to 512 [ 88.874876][ T5777] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.791: corrupted in-inode xattr: invalid ea_ino [ 88.889723][ T5781] loop2: detected capacity change from 0 to 512 [ 88.902209][ T5777] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.791: couldn't read orphan inode 15 (err -117) [ 88.928327][ T5781] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.195551][ T5792] loop1: detected capacity change from 0 to 512 [ 89.202488][ T5792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.211729][ T5792] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.218534][ T5792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.796: bg 0: block 248: padding at end of block bitmap is not set [ 89.233187][ T5792] Quota error (device loop1): write_blk: dquota write failed [ 89.240676][ T5792] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 89.250665][ T5792] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.796: Failed to acquire dquot type 1 [ 89.262565][ T5792] EXT4-fs (loop1): 1 truncate cleaned up [ 89.330752][ T5796] futex_wake_op: syz.2.794 tries to shift op by 36; fix this program [ 89.353862][ T5792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.377219][ T5792] EXT4-fs error (device loop1): __ext4_remount:6491: comm syz.1.796: Abort forced by user [ 89.388396][ T5792] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 89.400716][ T5798] loop0: detected capacity change from 0 to 256 [ 89.413852][ T5792] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 89.426781][ T5792] ext4 filesystem being remounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.568795][ T5804] loop1: detected capacity change from 0 to 512 [ 89.586166][ T5804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.590946][ T5807] bond1: entered promiscuous mode [ 89.599794][ T5807] bond1: entered allmulticast mode [ 89.608172][ T5807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.617021][ T5804] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.624208][ T5804] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.798: bg 0: block 248: padding at end of block bitmap is not set [ 89.640929][ T5807] bond1 (unregistering): Released all slaves [ 89.650123][ T5804] Quota error (device loop1): write_blk: dquota write failed [ 89.657576][ T5804] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 89.667950][ T5804] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.798: Failed to acquire dquot type 1 [ 89.702240][ T5804] EXT4-fs (loop1): 1 truncate cleaned up [ 89.733720][ T5813] loop4: detected capacity change from 0 to 512 [ 89.744289][ T5813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.763590][ T5813] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.775362][ T5813] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.802: bg 0: block 248: padding at end of block bitmap is not set [ 89.797663][ T5813] Quota error (device loop4): write_blk: dquota write failed [ 89.805235][ T5813] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 89.815257][ T5813] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.802: Failed to acquire dquot type 1 [ 89.831816][ T5813] EXT4-fs (loop4): 1 truncate cleaned up [ 89.841849][ T5813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.854663][ T5813] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.802: Abort forced by user [ 89.870714][ T5813] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 89.880695][ T5816] loop1: detected capacity change from 0 to 512 [ 89.887659][ T5816] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 89.901409][ T5813] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 89.913819][ T5813] ext4 filesystem being remounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.923156][ T5816] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 89.943928][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'. [ 90.001031][ T5826] loop4: detected capacity change from 0 to 512 [ 90.007608][ T5828] bond1: entered promiscuous mode [ 90.012759][ T5828] bond1: entered allmulticast mode [ 90.019679][ T5828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.033153][ T5826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.044772][ T5828] bond1 (unregistering): Released all slaves [ 90.055418][ T5826] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.076962][ T5826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.805: bg 0: block 248: padding at end of block bitmap is not set [ 90.137973][ T5826] Quota error (device loop4): write_blk: dquota write failed [ 90.144035][ T5836] bond1: entered promiscuous mode [ 90.145481][ T5826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 90.145499][ T5826] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.805: Failed to acquire dquot type 1 [ 90.150581][ T5836] bond1: entered allmulticast mode [ 90.206802][ T5836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.207944][ T5826] EXT4-fs (loop4): 1 truncate cleaned up [ 90.228323][ T5836] bond1 (unregistering): Released all slaves [ 90.542016][ T5848] loop4: detected capacity change from 0 to 512 [ 90.562806][ T5848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.647971][ T5848] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.685243][ T5848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.811: bg 0: block 248: padding at end of block bitmap is not set [ 90.859258][ T5848] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.811: Failed to acquire dquot type 1 [ 90.959090][ T5848] EXT4-fs (loop4): 1 truncate cleaned up [ 91.099025][ T5855] loop1: detected capacity change from 0 to 512 [ 91.128294][ T5855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.131611][ T5861] loop4: detected capacity change from 0 to 4096 [ 91.159224][ T5855] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.176031][ T5855] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.814: bg 0: block 248: padding at end of block bitmap is not set [ 91.191574][ T5855] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.814: Failed to acquire dquot type 1 [ 91.203319][ T5855] EXT4-fs (loop1): 1 truncate cleaned up [ 91.442548][ T5879] loop3: detected capacity change from 0 to 256 [ 91.480037][ T5881] futex_wake_op: syz.4.818 tries to shift op by 36; fix this program [ 91.754932][ T5888] loop3: detected capacity change from 0 to 512 [ 91.798110][ T5888] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.825: corrupted in-inode xattr: invalid ea_ino [ 91.819153][ T5888] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.825: couldn't read orphan inode 15 (err -117) [ 91.875349][ T5891] 9pnet: Could not find request transport: f [ 92.153189][ T5900] loop3: detected capacity change from 0 to 512 [ 92.201932][ T5902] loop0: detected capacity change from 0 to 512 [ 92.222994][ T5900] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.264632][ T5902] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.958707][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 92.958723][ T29] audit: type=1326 audit(1725406969.329:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.0.836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 93.079535][ T5930] loop0: detected capacity change from 0 to 512 [ 93.119801][ T5930] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.836: corrupted in-inode xattr: invalid ea_ino [ 93.205007][ T5930] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.836: couldn't read orphan inode 15 (err -117) [ 93.295493][ T29] audit: type=1326 audit(1725406969.669:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.2.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 93.373524][ T5933] loop2: detected capacity change from 0 to 512 [ 93.451333][ T5933] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.837: corrupted in-inode xattr: invalid ea_ino [ 93.465182][ T5933] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.837: couldn't read orphan inode 15 (err -117) [ 94.211815][ T5961] loop4: detected capacity change from 0 to 512 [ 94.219631][ T5961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.236051][ T5961] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.243337][ T5961] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.844: bg 0: block 248: padding at end of block bitmap is not set [ 94.258543][ T5961] Quota error (device loop4): write_blk: dquota write failed [ 94.265995][ T5961] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 94.276017][ T5961] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.844: Failed to acquire dquot type 1 [ 94.303080][ T5961] EXT4-fs (loop4): 1 truncate cleaned up [ 94.320121][ T5966] loop1: detected capacity change from 0 to 256 [ 94.336921][ T5961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.401368][ T5961] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.844: Abort forced by user [ 94.424551][ T5961] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 94.445149][ T5961] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 94.490057][ T5970] bond1: entered promiscuous mode [ 94.493192][ T5961] ext4 filesystem being remounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.495131][ T5970] bond1: entered allmulticast mode [ 94.516782][ T5970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.521302][ T5974] loop2: detected capacity change from 0 to 1024 [ 94.542464][ T5970] bond1 (unregistering): Released all slaves [ 94.551593][ T5974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.560718][ T5974] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.586713][ T5968] loop1: detected capacity change from 0 to 512 [ 94.610575][ T5974] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.618927][ T5974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.625988][ T5974] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.849: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.632230][ T5968] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.646558][ T5974] EXT4-fs (loop2): Remounting filesystem read-only [ 94.656655][ T5974] EXT4-fs (loop2): 1 orphan inode deleted [ 94.684709][ T5974] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 95.036128][ T5994] loop1: detected capacity change from 0 to 1024 [ 95.043389][ T5994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.053096][ T29] audit: type=1326 audit(1725406971.429:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.0.851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 95.076749][ T5994] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.087749][ T5994] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.096375][ T5994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.102974][ T5994] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.854: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.116496][ T5994] EXT4-fs (loop1): Remounting filesystem read-only [ 95.123437][ T5994] EXT4-fs (loop1): 1 orphan inode deleted [ 95.129723][ T5994] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 95.161055][ T5983] loop0: detected capacity change from 0 to 512 [ 95.179485][ T5983] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.851: corrupted in-inode xattr: invalid ea_ino [ 95.194458][ T5983] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.851: couldn't read orphan inode 15 (err -117) [ 95.283634][ T6004] loop1: detected capacity change from 0 to 4096 [ 95.376128][ T29] audit: type=1326 audit(1725406971.749:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.1.857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 95.438108][ T6011] loop4: detected capacity change from 0 to 256 [ 95.438173][ T6007] loop1: detected capacity change from 0 to 512 [ 95.463163][ T6007] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.857: corrupted in-inode xattr: invalid ea_ino [ 95.476745][ T6007] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.857: couldn't read orphan inode 15 (err -117) [ 95.571020][ T6023] loop3: detected capacity change from 0 to 512 [ 95.588276][ T6023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.611868][ T6023] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.621472][ T6023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.863: bg 0: block 248: padding at end of block bitmap is not set [ 95.637106][ T6023] Quota error (device loop3): write_blk: dquota write failed [ 95.644555][ T6023] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 95.654552][ T6023] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.863: Failed to acquire dquot type 1 [ 95.655180][ T29] audit: type=1326 audit(1725406972.029:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 95.656315][ T6023] EXT4-fs (loop3): 1 truncate cleaned up [ 95.696250][ T6023] EXT4-fs mount: 92 callbacks suppressed [ 95.696260][ T6023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.723355][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.827247][ T6035] loop2: detected capacity change from 0 to 1024 [ 95.834238][ T6035] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.843229][ T6035] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.854301][ T6035] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.862615][ T6035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.869200][ T6035] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.866: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.883248][ T6035] EXT4-fs (loop2): Remounting filesystem read-only [ 95.890454][ T6035] EXT4-fs (loop2): 1 orphan inode deleted [ 95.896975][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.911077][ T6035] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 95.918237][ T6035] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.208095][ T6040] loop2: detected capacity change from 0 to 512 [ 96.215212][ T6040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.224316][ T6040] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.231618][ T6040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.867: bg 0: block 248: padding at end of block bitmap is not set [ 96.246387][ T6040] Quota error (device loop2): write_blk: dquota write failed [ 96.253831][ T6040] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.867: Failed to acquire dquot type 1 [ 96.265725][ T6040] EXT4-fs (loop2): 1 truncate cleaned up [ 96.272789][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.294675][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.321248][ T6043] bond1: entered promiscuous mode [ 96.326419][ T6043] bond1: entered allmulticast mode [ 96.331814][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.349616][ T6043] bond1 (unregistering): Released all slaves [ 96.369646][ T6046] bond1: entered promiscuous mode [ 96.374716][ T6046] bond1: entered allmulticast mode [ 96.380633][ T6046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.386909][ T6049] loop1: detected capacity change from 0 to 256 [ 96.405811][ T6046] bond1 (unregistering): Released all slaves [ 96.513277][ T6056] loop2: detected capacity change from 0 to 1024 [ 96.520267][ T6056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.525215][ T6054] loop0: detected capacity change from 0 to 512 [ 96.535492][ T6056] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.544804][ T6056] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.554908][ T6056] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.561607][ T6056] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.873: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.741245][ T6056] EXT4-fs (loop2): Remounting filesystem read-only [ 96.792582][ T6054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.809683][ T6066] loop3: detected capacity change from 0 to 512 [ 96.816041][ T6056] EXT4-fs (loop2): 1 orphan inode deleted [ 96.853151][ T6056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.860562][ T6054] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.874629][ T6066] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 96.883069][ T6056] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 96.891884][ T6056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.909472][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.934754][ T6066] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 96.961439][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.875'. [ 97.020760][ T6080] loop0: detected capacity change from 0 to 512 [ 97.032712][ T6084] loop4: detected capacity change from 0 to 512 [ 97.044600][ T6084] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.877: corrupted in-inode xattr: invalid ea_ino [ 97.059236][ T6084] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.877: couldn't read orphan inode 15 (err -117) [ 97.074820][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.078051][ T6080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.103126][ T6080] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.122496][ T6082] loop3: detected capacity change from 0 to 512 [ 97.131628][ T6082] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.880: corrupted in-inode xattr: invalid ea_ino [ 97.147991][ T6082] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.880: couldn't read orphan inode 15 (err -117) [ 97.160765][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.188367][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.221288][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.317331][ T6101] loop1: detected capacity change from 0 to 256 [ 97.340546][ T6092] 9pnet: Could not find request transport: f [ 97.362820][ T6106] loop1: detected capacity change from 0 to 256 [ 97.434346][ T6108] bond1: entered promiscuous mode [ 97.439505][ T6108] bond1: entered allmulticast mode [ 97.445041][ T6108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.466513][ T6108] bond1 (unregistering): Released all slaves [ 97.568967][ T6120] loop0: detected capacity change from 0 to 512 [ 97.583795][ T6112] loop1: detected capacity change from 0 to 512 [ 97.594027][ T6112] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.887: corrupted in-inode xattr: invalid ea_ino [ 97.597801][ T6120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.607513][ T6112] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.887: couldn't read orphan inode 15 (err -117) [ 97.608081][ T6112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.625091][ T6120] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.670993][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.681264][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.704126][ T6125] loop1: detected capacity change from 0 to 512 [ 97.711227][ T6125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.720831][ T6125] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.727544][ T6125] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.891: bg 0: block 248: padding at end of block bitmap is not set [ 97.742300][ T6125] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.891: Failed to acquire dquot type 1 [ 97.754069][ T6125] EXT4-fs (loop1): 1 truncate cleaned up [ 97.760899][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.761413][ T6125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.837201][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.872568][ T6138] loop4: detected capacity change from 0 to 256 [ 97.914701][ T6127] loop0: detected capacity change from 0 to 512 [ 97.925488][ T6127] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.892: corrupted in-inode xattr: invalid ea_ino [ 97.941361][ T6127] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.892: couldn't read orphan inode 15 (err -117) [ 97.954117][ T6127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.308715][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 98.308731][ T29] audit: type=1326 audit(1725406974.669:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6152 comm="syz.3.900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 98.555916][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.950257][ T6173] loop1: detected capacity change from 0 to 512 [ 98.957387][ T6173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.966714][ T6173] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.973615][ T6173] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.906: bg 0: block 248: padding at end of block bitmap is not set [ 98.988465][ T6173] Quota error (device loop1): write_blk: dquota write failed [ 98.996016][ T6173] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 99.005992][ T6173] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.906: Failed to acquire dquot type 1 [ 99.017859][ T6173] EXT4-fs (loop1): 1 truncate cleaned up [ 99.024533][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.045969][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.071174][ T6176] bond1: entered promiscuous mode [ 99.076322][ T6176] bond1: entered allmulticast mode [ 99.081662][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.097394][ T6176] bond1 (unregistering): Released all slaves [ 99.187202][ T6182] bond1: entered promiscuous mode [ 99.192374][ T6182] bond1: entered allmulticast mode [ 99.197843][ T6182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.212932][ T6182] bond1 (unregistering): Released all slaves [ 99.472085][ T29] audit: type=1326 audit(1725406975.849:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.1.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 99.562357][ T29] audit: type=1326 audit(1725406975.939:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 99.575910][ T6205] loop1: detected capacity change from 0 to 512 [ 99.608349][ T6205] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.914: corrupted in-inode xattr: invalid ea_ino [ 99.622247][ T6205] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.914: couldn't read orphan inode 15 (err -117) [ 99.637205][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.656346][ T29] audit: type=1326 audit(1725406976.029:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 99.685549][ T6200] loop0: detected capacity change from 0 to 512 [ 99.701346][ T6200] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.915: corrupted in-inode xattr: invalid ea_ino [ 99.715130][ T6200] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.915: couldn't read orphan inode 15 (err -117) [ 99.729122][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.780192][ T6207] loop2: detected capacity change from 0 to 512 [ 99.795552][ T6207] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.917: corrupted in-inode xattr: invalid ea_ino [ 99.809339][ T6207] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.917: couldn't read orphan inode 15 (err -117) [ 99.822262][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.981328][ T6214] loop3: detected capacity change from 0 to 512 [ 99.988405][ T6214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.997787][ T6214] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.004735][ T6214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.918: bg 0: block 248: padding at end of block bitmap is not set [ 100.019319][ T6214] Quota error (device loop3): write_blk: dquota write failed [ 100.026799][ T6214] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 100.037099][ T6214] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.918: Failed to acquire dquot type 1 [ 100.050044][ T6214] EXT4-fs (loop3): 1 truncate cleaned up [ 100.056399][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.076190][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.162256][ T29] audit: type=1326 audit(1725406976.539:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.4.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 100.218984][ T6219] loop4: detected capacity change from 0 to 512 [ 100.226977][ T6219] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.920: corrupted in-inode xattr: invalid ea_ino [ 100.240667][ T6219] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.920: couldn't read orphan inode 15 (err -117) [ 100.253025][ T6219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.267418][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.292476][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.315189][ T6231] bond1: entered promiscuous mode [ 100.320350][ T6231] bond1: entered allmulticast mode [ 100.325794][ T6231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.351817][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.362508][ T6231] bond1 (unregistering): Released all slaves [ 100.529658][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.746560][ T6249] loop1: detected capacity change from 0 to 512 [ 100.757767][ T6249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.771994][ T6249] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.778920][ T6249] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.930: bg 0: block 248: padding at end of block bitmap is not set [ 100.793573][ T6249] Quota error (device loop1): write_blk: dquota write failed [ 100.801147][ T6249] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.930: Failed to acquire dquot type 1 [ 100.813167][ T6249] EXT4-fs (loop1): 1 truncate cleaned up [ 100.819846][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.838739][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.874449][ T6258] loop1: detected capacity change from 0 to 512 [ 100.874691][ T6253] loop2: detected capacity change from 0 to 512 [ 100.884758][ T6253] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.933: corrupted in-inode xattr: invalid ea_ino [ 100.903730][ T6253] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.933: couldn't read orphan inode 15 (err -117) [ 100.916321][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.920852][ T6258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.942554][ T6258] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.954936][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.977011][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.983913][ T6264] loop2: detected capacity change from 0 to 256 [ 101.019762][ T6268] loop2: detected capacity change from 0 to 1024 [ 101.026629][ T6268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.036025][ T6268] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.046657][ T6268] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 101.055167][ T6268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.062269][ T6268] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.937: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.085409][ T6268] EXT4-fs (loop2): Remounting filesystem read-only [ 101.092135][ T6268] EXT4-fs (loop2): 1 orphan inode deleted [ 101.098312][ T6268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.111968][ T6268] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 101.119615][ T6268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.141654][ T6273] bond1: entered promiscuous mode [ 101.146803][ T6273] bond1: entered allmulticast mode [ 101.156497][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.183297][ T6273] bond1 (unregistering): Released all slaves [ 101.204015][ T6276] bond1: entered promiscuous mode [ 101.209299][ T6276] bond1: entered allmulticast mode [ 101.214836][ T6276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.230558][ T6276] bond1 (unregistering): Released all slaves [ 101.249986][ T6283] loop0: detected capacity change from 0 to 256 [ 101.393628][ T6296] loop2: detected capacity change from 0 to 1024 [ 101.402278][ T6296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.411142][ T6296] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.422000][ T6296] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 101.430099][ T6296] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.436763][ T6296] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.946: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.451087][ T6296] EXT4-fs (loop2): Remounting filesystem read-only [ 101.457688][ T6296] EXT4-fs (loop2): 1 orphan inode deleted [ 101.465848][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.488165][ T6296] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 101.494959][ T6296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.578775][ T6294] loop0: detected capacity change from 0 to 512 [ 101.589680][ T6294] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.945: corrupted in-inode xattr: invalid ea_ino [ 101.606158][ T6294] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.945: couldn't read orphan inode 15 (err -117) [ 101.618835][ T6294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.645913][ T6304] loop2: detected capacity change from 0 to 256 [ 101.880268][ T6310] loop1: detected capacity change from 0 to 1024 [ 101.887328][ T6310] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.896339][ T6310] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.907972][ T6310] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 101.916451][ T6310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.922948][ T6310] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.949: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.936487][ T6310] EXT4-fs (loop1): Remounting filesystem read-only [ 101.943129][ T6310] EXT4-fs (loop1): 1 orphan inode deleted [ 101.949460][ T6310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.962137][ T6310] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 101.968996][ T6310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.269251][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.416246][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.424853][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.612802][ T6328] bond1: entered promiscuous mode [ 102.617871][ T6328] bond1: entered allmulticast mode [ 102.623245][ T6328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.634315][ T6328] bond1 (unregistering): Released all slaves [ 102.728510][ T6335] 9pnet: Could not find request transport: f [ 103.027654][ T6350] loop3: detected capacity change from 0 to 256 [ 103.116850][ T6352] loop1: detected capacity change from 0 to 512 [ 103.138279][ T6352] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.960: corrupted in-inode xattr: invalid ea_ino [ 103.183870][ T6352] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.960: couldn't read orphan inode 15 (err -117) [ 103.197366][ T6352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.423044][ T6355] loop3: detected capacity change from 0 to 512 [ 103.443905][ T6355] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.963: corrupted in-inode xattr: invalid ea_ino [ 103.486053][ T6355] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.963: couldn't read orphan inode 15 (err -117) [ 103.529448][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.672133][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.736835][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.814428][ T6365] loop1: detected capacity change from 0 to 512 [ 103.829294][ T6365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.841594][ T6365] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.868205][ T6365] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.965: bg 0: block 248: padding at end of block bitmap is not set [ 103.894591][ T6370] loop4: detected capacity change from 0 to 512 [ 103.907703][ T6365] __quota_error: 6 callbacks suppressed [ 103.907717][ T6365] Quota error (device loop1): write_blk: dquota write failed [ 103.920706][ T6365] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 103.930643][ T6365] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.965: Failed to acquire dquot type 1 [ 103.947581][ T6365] EXT4-fs (loop1): 1 truncate cleaned up [ 103.954129][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.981094][ T6370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.981349][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.004723][ T6370] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.248356][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.355855][ T6387] loop4: detected capacity change from 0 to 256 [ 104.712603][ T6395] loop3: detected capacity change from 0 to 512 [ 104.794818][ T6395] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.975: corrupted in-inode xattr: invalid ea_ino [ 104.867072][ T6395] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.975: couldn't read orphan inode 15 (err -117) [ 104.880413][ T6395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.112105][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.391963][ T6408] loop4: detected capacity change from 0 to 1024 [ 105.414035][ T6408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.431010][ T29] audit: type=1326 audit(1725406981.809:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 105.456282][ T6408] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.476132][ T6408] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.484428][ T6408] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.491690][ T6408] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.980: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.505396][ T6408] EXT4-fs (loop4): Remounting filesystem read-only [ 105.512933][ T6408] EXT4-fs (loop4): 1 orphan inode deleted [ 105.519294][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.531856][ T6408] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 105.539052][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.549045][ T6406] loop3: detected capacity change from 0 to 512 [ 105.565712][ T6406] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.978: corrupted in-inode xattr: invalid ea_ino [ 105.590206][ T6406] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.978: couldn't read orphan inode 15 (err -117) [ 105.603605][ T6406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.637255][ T6423] loop4: detected capacity change from 0 to 512 [ 105.645905][ T6423] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 105.709380][ T6423] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 105.727819][ T6428] loop2: detected capacity change from 0 to 512 [ 105.740605][ T6428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.742108][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 105.765063][ T6428] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.773722][ T6428] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.984: bg 0: block 248: padding at end of block bitmap is not set [ 105.799844][ T6428] Quota error (device loop2): write_blk: dquota write failed [ 105.807424][ T6428] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.817571][ T6428] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.984: Failed to acquire dquot type 1 [ 105.838820][ T6428] EXT4-fs (loop2): 1 truncate cleaned up [ 105.845515][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.446231][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.454928][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.667478][ T6457] loop0: detected capacity change from 0 to 256 [ 106.813566][ T6468] bond1: entered promiscuous mode [ 106.818694][ T6468] bond1: entered allmulticast mode [ 106.824894][ T6468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.839578][ T6468] bond1 (unregistering): Released all slaves [ 106.970962][ T29] audit: type=1326 audit(1725406983.349:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.2.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 107.027483][ T6483] loop1: detected capacity change from 0 to 512 [ 107.038359][ T6483] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 107.072084][ T6483] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 107.087126][ T6475] loop2: detected capacity change from 0 to 512 [ 107.107474][ T6483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6483 comm=syz.1.1003 [ 107.130309][ T6475] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1002: corrupted in-inode xattr: invalid ea_ino [ 107.155247][ T6475] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1002: couldn't read orphan inode 15 (err -117) [ 108.430323][ T29] audit: type=1326 audit(1725406984.809:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.1.1009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 108.485948][ T6509] loop1: detected capacity change from 0 to 512 [ 108.494307][ T6509] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1009: corrupted in-inode xattr: invalid ea_ino [ 108.508013][ T6509] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1009: couldn't read orphan inode 15 (err -117) [ 108.571192][ T6518] loop1: detected capacity change from 0 to 512 [ 108.578205][ T6518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.587824][ T6518] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.595256][ T6518] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1012: bg 0: block 248: padding at end of block bitmap is not set [ 108.610074][ T6518] Quota error (device loop1): write_blk: dquota write failed [ 108.617470][ T6518] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 108.627500][ T6518] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1012: Failed to acquire dquot type 1 [ 108.639388][ T6518] EXT4-fs (loop1): 1 truncate cleaned up [ 108.671171][ T6521] bond1: entered promiscuous mode [ 108.676264][ T6521] bond1: entered allmulticast mode [ 108.683860][ T6524] loop1: detected capacity change from 0 to 256 [ 108.685551][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.744760][ T6521] bond1 (unregistering): Released all slaves [ 108.765828][ T6526] loop2: detected capacity change from 0 to 256 [ 108.807080][ T6530] loop1: detected capacity change from 0 to 256 [ 108.900621][ T6533] loop4: detected capacity change from 0 to 512 [ 108.913232][ T29] audit: type=1326 audit(1725406985.289:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.1.1018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 108.944832][ T6533] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.968381][ T6536] loop1: detected capacity change from 0 to 512 [ 108.980813][ T6536] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1018: corrupted in-inode xattr: invalid ea_ino [ 108.995221][ T6536] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1018: couldn't read orphan inode 15 (err -117) [ 109.065887][ T6548] loop1: detected capacity change from 0 to 512 [ 109.075655][ T6548] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 109.098401][ T6548] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 109.110289][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 109.266856][ T6560] loop1: detected capacity change from 0 to 4096 [ 109.480947][ T29] audit: type=1326 audit(1725406985.859:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 109.568884][ T6570] loop3: detected capacity change from 0 to 512 [ 109.582387][ T6570] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1027: corrupted in-inode xattr: invalid ea_ino [ 109.681300][ T6570] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1027: couldn't read orphan inode 15 (err -117) [ 109.801493][ T6577] bond1: entered promiscuous mode [ 109.806712][ T6577] bond1: entered allmulticast mode [ 109.812795][ T6577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.827865][ T6577] bond1 (unregistering): Released all slaves [ 110.196819][ T6593] loop1: detected capacity change from 0 to 1024 [ 110.215369][ T6593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.237069][ T6593] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.260779][ T6593] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 110.280956][ T6593] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.295979][ T6593] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.1034: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.314186][ T6597] 9pnet: Could not find request transport: f [ 110.320920][ T6593] EXT4-fs (loop1): Remounting filesystem read-only [ 110.328672][ T6593] EXT4-fs (loop1): 1 orphan inode deleted [ 110.350805][ T6593] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 110.423012][ T29] audit: type=1326 audit(1725406986.799:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 110.448558][ T6604] loop1: detected capacity change from 0 to 256 [ 110.530999][ T6606] loop3: detected capacity change from 0 to 512 [ 110.540494][ T6606] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1036: corrupted in-inode xattr: invalid ea_ino [ 110.590462][ T6606] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1036: couldn't read orphan inode 15 (err -117) [ 110.987015][ T6614] loop0: detected capacity change from 0 to 512 [ 111.025650][ T6614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.089296][ T6614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.111996][ T6614] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1040: bg 0: block 248: padding at end of block bitmap is not set [ 111.176577][ T6614] Quota error (device loop0): write_blk: dquota write failed [ 111.184106][ T6614] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 111.194325][ T6614] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1040: Failed to acquire dquot type 1 [ 111.214316][ T6614] EXT4-fs (loop0): 1 truncate cleaned up [ 111.260594][ T6620] loop2: detected capacity change from 0 to 512 [ 111.316597][ T6620] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.740370][ T6639] Zero length message leads to an empty skb [ 111.755273][ T6639] 9pnet: Could not find request transport: f [ 111.776015][ T6643] loop2: detected capacity change from 0 to 512 [ 111.782957][ T6643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.792197][ T6643] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.799327][ T6643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1049: bg 0: block 248: padding at end of block bitmap is not set [ 111.814192][ T6643] Quota error (device loop2): write_blk: dquota write failed [ 111.821614][ T6643] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.831638][ T6643] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1049: Failed to acquire dquot type 1 [ 111.843921][ T6643] EXT4-fs (loop2): 1 truncate cleaned up [ 111.872844][ T6646] loop2: detected capacity change from 0 to 1024 [ 111.879864][ T6646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.888831][ T6646] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.899753][ T6646] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.908002][ T6646] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.914503][ T6646] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.1050: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.928163][ T6646] EXT4-fs (loop2): Remounting filesystem read-only [ 111.934751][ T6646] EXT4-fs (loop2): 1 orphan inode deleted [ 111.941263][ T6646] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 112.523278][ T6655] loop3: detected capacity change from 0 to 4096 [ 112.576628][ T6661] bond1: entered promiscuous mode [ 112.581767][ T6661] bond1: entered allmulticast mode [ 112.586305][ T29] audit: type=1326 audit(1725406988.959:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 112.609831][ T6661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.636969][ T6661] bond1 (unregistering): Released all slaves [ 112.701738][ T6672] loop1: detected capacity change from 0 to 512 [ 112.735902][ T6672] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1054: corrupted in-inode xattr: invalid ea_ino [ 112.762190][ T6672] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1054: couldn't read orphan inode 15 (err -117) [ 112.786169][ T6674] loop3: detected capacity change from 0 to 512 [ 112.885070][ T6674] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.957391][ T6688] loop0: detected capacity change from 0 to 512 [ 112.990074][ T6688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.020741][ T6690] bond1: entered promiscuous mode [ 113.025818][ T6690] bond1: entered allmulticast mode [ 113.040965][ T6688] EXT4-fs (loop0): orphan cleanup on readonly fs [ 113.051302][ T6688] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1062: bg 0: block 248: padding at end of block bitmap is not set [ 113.066946][ T6690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.092764][ T6688] Quota error (device loop0): write_blk: dquota write failed [ 113.093092][ T6690] bond1 (unregistering): Released all slaves [ 113.100199][ T6688] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 113.100221][ T6688] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1062: Failed to acquire dquot type 1 [ 113.136514][ T6688] EXT4-fs (loop0): 1 truncate cleaned up [ 113.863938][ T6714] futex_wake_op: syz.4.1069 tries to shift op by 36; fix this program [ 114.541071][ T6719] loop3: detected capacity change from 0 to 512 [ 114.614928][ T6722] loop1: detected capacity change from 0 to 256 [ 114.672712][ T6719] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.813401][ T29] audit: type=1326 audit(1725406991.189:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 114.869775][ T6733] loop1: detected capacity change from 0 to 1024 [ 114.878011][ T6733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.887326][ T6733] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.900663][ T6733] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.908866][ T6733] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.915299][ T6733] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.1074: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.931643][ T6733] EXT4-fs (loop1): Remounting filesystem read-only [ 114.953973][ T6733] EXT4-fs (loop1): 1 orphan inode deleted [ 115.006404][ T6737] loop3: detected capacity change from 0 to 256 [ 115.013559][ T6733] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 115.022699][ T6728] loop2: detected capacity change from 0 to 512 [ 115.084184][ T6728] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1073: corrupted in-inode xattr: invalid ea_ino [ 115.090332][ T6748] loop1: detected capacity change from 0 to 256 [ 115.098742][ T6728] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1073: couldn't read orphan inode 15 (err -117) [ 115.133561][ T29] audit: type=1326 audit(1725406991.499:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.4.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 115.158035][ T29] audit: type=1326 audit(1725406991.539:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.3.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 115.229987][ T6755] loop4: detected capacity change from 0 to 512 [ 115.238041][ T6755] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1077: corrupted in-inode xattr: invalid ea_ino [ 115.263032][ T6758] loop3: detected capacity change from 0 to 512 [ 115.270560][ T6755] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1077: couldn't read orphan inode 15 (err -117) [ 115.275349][ T6758] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1078: corrupted in-inode xattr: invalid ea_ino [ 115.304569][ T6758] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1078: couldn't read orphan inode 15 (err -117) [ 116.072560][ T6774] loop3: detected capacity change from 0 to 256 [ 116.365593][ T6784] futex_wake_op: syz.1.1087 tries to shift op by 36; fix this program [ 116.675841][ T6788] loop3: detected capacity change from 0 to 1024 [ 116.677991][ T6786] loop0: detected capacity change from 0 to 4096 [ 116.683756][ T6788] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.705986][ T6788] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.735341][ T6788] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.778218][ T6788] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.824654][ T6788] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.1089: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.895001][ T6788] EXT4-fs (loop3): Remounting filesystem read-only [ 116.992577][ T6788] EXT4-fs (loop3): 1 orphan inode deleted [ 116.999558][ T6788] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 117.021763][ T6795] bond1: entered promiscuous mode [ 117.027024][ T6795] bond1: entered allmulticast mode [ 117.035474][ T6795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.056965][ T6795] bond1 (unregistering): Released all slaves [ 117.480289][ T6807] loop0: detected capacity change from 0 to 256 [ 117.516237][ T6804] bond1: entered promiscuous mode [ 117.521539][ T6804] bond1: entered allmulticast mode [ 117.531643][ T6804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.565268][ T6804] bond1 (unregistering): Released all slaves [ 118.027963][ T6818] bond1: entered promiscuous mode [ 118.033197][ T6818] bond1: entered allmulticast mode [ 118.040169][ T6818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.055753][ T6818] bond1 (unregistering): Released all slaves [ 118.089344][ T29] audit: type=1326 audit(1725406994.469:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 118.105913][ T6826] loop4: detected capacity change from 0 to 4096 [ 118.172511][ T6832] loop2: detected capacity change from 0 to 256 [ 118.232293][ T6836] loop4: detected capacity change from 0 to 256 [ 118.600292][ T6840] 9pnet: Could not find request transport: f [ 118.828047][ T6855] loop2: detected capacity change from 0 to 512 [ 118.835362][ T6855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.906827][ T6855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.919231][ T6856] futex_wake_op: syz.4.1106 tries to shift op by 36; fix this program [ 118.932457][ T6855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1109: bg 0: block 248: padding at end of block bitmap is not set [ 118.954853][ T6859] loop0: detected capacity change from 0 to 256 [ 118.998944][ T6855] Quota error (device loop2): write_blk: dquota write failed [ 119.006385][ T6855] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 119.016374][ T6855] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1109: Failed to acquire dquot type 1 [ 119.073297][ T6855] EXT4-fs (loop2): 1 truncate cleaned up [ 119.151442][ T29] audit: type=1326 audit(1725406995.509:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.1.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 119.189674][ T6868] bond1: entered promiscuous mode [ 119.194739][ T6868] bond1: entered allmulticast mode [ 119.220731][ T6868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.247291][ T6868] bond1 (unregistering): Released all slaves [ 119.255861][ T6862] loop1: detected capacity change from 0 to 512 [ 119.277957][ T6862] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1112: corrupted in-inode xattr: invalid ea_ino [ 119.323341][ T6862] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1112: couldn't read orphan inode 15 (err -117) [ 119.351505][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 119.472550][ T6883] 9pnet: Could not find request transport: f [ 119.572697][ T6879] xt_CT: No such helper "syz0" [ 119.753805][ T6891] xt_CT: No such helper "syz0" [ 120.660364][ T6911] loop0: detected capacity change from 0 to 256 [ 121.112032][ T6927] loop4: detected capacity change from 0 to 512 [ 121.129961][ T6930] futex_wake_op: syz.1.1129 tries to shift op by 36; fix this program [ 121.146738][ T6927] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 121.235203][ T6927] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 121.303595][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1131'. [ 121.512246][ T6938] loop4: detected capacity change from 0 to 256 [ 121.649345][ T29] audit: type=1326 audit(1725406998.029:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.1135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 121.679630][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 121.764470][ T6940] loop2: detected capacity change from 0 to 512 [ 121.776549][ T6940] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1135: corrupted in-inode xattr: invalid ea_ino [ 121.879985][ T6940] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1135: couldn't read orphan inode 15 (err -117) [ 122.899308][ T6961] loop0: detected capacity change from 0 to 4096 [ 122.899945][ T29] audit: type=1326 audit(1725406999.279:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.3.1140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 122.953579][ T6958] loop3: detected capacity change from 0 to 512 [ 122.982157][ T6958] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1140: corrupted in-inode xattr: invalid ea_ino [ 123.007718][ T6958] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1140: couldn't read orphan inode 15 (err -117) [ 123.075185][ T6969] bond1: entered promiscuous mode [ 123.080275][ T6969] bond1: entered allmulticast mode [ 123.083362][ T6974] loop0: detected capacity change from 0 to 1024 [ 123.093136][ T6969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.115339][ T6974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.125563][ T6969] bond1 (unregistering): Released all slaves [ 123.152258][ T6974] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.170433][ T6974] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 123.185007][ T6974] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.192417][ T6974] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.1142: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.224301][ T6988] loop4: detected capacity change from 0 to 256 [ 123.229721][ T6974] EXT4-fs (loop0): Remounting filesystem read-only [ 123.230756][ T29] audit: type=1326 audit(1725406999.589:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 123.259639][ T6974] EXT4-fs (loop0): 1 orphan inode deleted [ 123.266680][ T6974] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 123.325324][ T6981] loop3: detected capacity change from 0 to 512 [ 123.334287][ T6981] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1148: corrupted in-inode xattr: invalid ea_ino [ 123.349647][ T6981] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1148: couldn't read orphan inode 15 (err -117) [ 123.350020][ T6984] loop1: detected capacity change from 0 to 512 [ 123.380777][ T29] audit: type=1326 audit(1725406999.749:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e964dceb9 code=0x0 [ 123.422548][ T6984] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.530790][ T7003] loop4: detected capacity change from 0 to 4096 [ 123.695529][ T29] audit: type=1326 audit(1725407000.069:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 123.805184][ T7008] loop4: detected capacity change from 0 to 512 [ 123.824182][ T7008] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1155: corrupted in-inode xattr: invalid ea_ino [ 123.854093][ T7008] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1155: couldn't read orphan inode 15 (err -117) [ 124.306568][ T7028] futex_wake_op: syz.2.1157 tries to shift op by 36; fix this program [ 124.571829][ T7031] loop4: detected capacity change from 0 to 512 [ 124.605369][ T7031] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.770060][ T7041] loop4: detected capacity change from 0 to 4096 [ 124.879116][ T29] audit: type=1326 audit(1725407001.239:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.4.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 124.966760][ T7052] loop4: detected capacity change from 0 to 512 [ 124.977450][ T29] audit: type=1326 audit(1725407001.349:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.3.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 125.024942][ T7052] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1166: corrupted in-inode xattr: invalid ea_ino [ 125.068976][ T7052] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1166: couldn't read orphan inode 15 (err -117) [ 125.124893][ T7057] loop3: detected capacity change from 0 to 512 [ 125.141282][ T7057] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1167: corrupted in-inode xattr: invalid ea_ino [ 125.165782][ T7057] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1167: couldn't read orphan inode 15 (err -117) [ 125.175724][ T29] audit: type=1326 audit(1725407001.539:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.2.1168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 125.222661][ T7067] bond1: entered promiscuous mode [ 125.227791][ T7067] bond1: entered allmulticast mode [ 125.233285][ T7067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.243958][ T7067] bond1 (unregistering): Released all slaves [ 125.335120][ T7072] bond1: entered promiscuous mode [ 125.340340][ T7072] bond1: entered allmulticast mode [ 125.346299][ T7072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.356692][ T7072] bond1 (unregistering): Released all slaves [ 125.572089][ T7080] loop1: detected capacity change from 0 to 4096 [ 125.592531][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.601423][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.623920][ T7084] loop1: detected capacity change from 0 to 256 [ 125.666142][ T7086] loop1: detected capacity change from 0 to 1024 [ 125.674072][ T7086] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.684180][ T7086] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.694978][ T7086] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.704024][ T7086] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.710868][ T7086] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.1178: Freeing blocks not in datazone - block = 0, count = 4096 [ 125.725296][ T7086] EXT4-fs (loop1): Remounting filesystem read-only [ 125.732199][ T7086] EXT4-fs (loop1): 1 orphan inode deleted [ 125.738433][ T7086] EXT4-fs mount: 81 callbacks suppressed [ 125.738445][ T7086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.756618][ T7086] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 125.763485][ T7086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.792032][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.898469][ T29] audit: type=1326 audit(1725407002.269:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.3.1182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 125.934827][ T29] audit: type=1326 audit(1725407002.309:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.4.1184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad68fceb9 code=0x0 [ 126.015022][ T7099] loop3: detected capacity change from 0 to 512 [ 126.025420][ T7099] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1182: corrupted in-inode xattr: invalid ea_ino [ 126.045916][ T7099] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1182: couldn't read orphan inode 15 (err -117) [ 126.060268][ T7099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.082709][ T7104] loop4: detected capacity change from 0 to 512 [ 126.098969][ T7104] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1184: corrupted in-inode xattr: invalid ea_ino [ 126.113834][ T7104] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1184: couldn't read orphan inode 15 (err -117) [ 126.147823][ T7104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.164154][ T7116] loop2: detected capacity change from 0 to 256 [ 126.275563][ T7119] loop2: detected capacity change from 0 to 4096 [ 126.282401][ T7123] loop1: detected capacity change from 0 to 256 [ 126.295544][ T7119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.337931][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.369091][ T7130] bond1: entered promiscuous mode [ 126.374269][ T7130] bond1: entered allmulticast mode [ 126.379646][ T7130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.391520][ T7130] bond1 (unregistering): Released all slaves [ 126.591184][ T7140] loop2: detected capacity change from 0 to 256 [ 126.686222][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.724250][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.787268][ T29] audit: type=1326 audit(1725407003.159:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.3.1197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 127.061053][ T7154] loop4: detected capacity change from 0 to 256 [ 127.285502][ T7161] loop1: detected capacity change from 0 to 4096 [ 127.305834][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.336037][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.459246][ T29] audit: type=1326 audit(1725407003.839:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.1.1205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 127.709450][ T29] audit: type=1326 audit(1725407004.089:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.1.1208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 127.747403][ T7178] loop3: detected capacity change from 0 to 512 [ 127.774316][ T7188] loop1: detected capacity change from 0 to 512 [ 127.784855][ T7178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.804453][ T7188] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1208: corrupted in-inode xattr: invalid ea_ino [ 127.812968][ T7178] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.832161][ T7188] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1208: couldn't read orphan inode 15 (err -117) [ 127.859299][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.961625][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.040792][ T29] audit: type=1326 audit(1725407004.419:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.3.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 128.144432][ T7198] loop3: detected capacity change from 0 to 512 [ 128.176411][ T7198] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1210: corrupted in-inode xattr: invalid ea_ino [ 128.198455][ T7198] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1210: couldn't read orphan inode 15 (err -117) [ 128.212352][ T7198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.487774][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.563756][ T7204] loop1: detected capacity change from 0 to 256 [ 128.825644][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.898200][ T29] audit: type=1326 audit(1725407005.269:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.2.1217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb289fceb9 code=0x0 [ 128.923099][ T29] audit: type=1326 audit(1725407005.299:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb978e8ceb9 code=0x0 [ 128.948166][ T29] audit: type=1326 audit(1725407005.319:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7220 comm="syz.3.1216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7781ceb9 code=0x0 [ 129.033627][ T7229] loop2: detected capacity change from 0 to 512 [ 129.051951][ T7229] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1217: corrupted in-inode xattr: invalid ea_ino [ 129.067211][ T7231] loop1: detected capacity change from 0 to 512 [ 129.097569][ T7231] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1218: corrupted in-inode xattr: invalid ea_ino [ 129.111128][ T7229] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1217: couldn't read orphan inode 15 (err -117) [ 129.124726][ T7231] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1218: couldn't read orphan inode 15 (err -117) [ 129.137160][ T7229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.151895][ T7231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.691433][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.732906][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.769868][ T7246] loop1: detected capacity change from 0 to 512 [ 129.785304][ T7246] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 129.811079][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.819860][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.833319][ T7246] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 129.865599][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 129.893579][ T7253] loop1: detected capacity change from 0 to 512 [ 129.900608][ T7253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.912955][ T7253] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.920638][ T7253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1225: bg 0: block 248: padding at end of block bitmap is not set [ 129.925044][ T7256] loop4: detected capacity change from 0 to 1024 [ 129.938772][ T7253] Quota error (device loop1): write_blk: dquota write failed [ 129.948912][ T7253] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 129.952040][ T7256] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.958831][ T7253] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1225: Failed to acquire dquot type 1 [ 129.960054][ T7251] xt_CT: No such helper "syz0" [ 129.970931][ T7256] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.988767][ T7253] EXT4-fs (loop1): 1 truncate cleaned up [ 129.994907][ T7256] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 130.000526][ T7253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.008059][ T7256] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.026784][ T7256] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.1226: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.040511][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.041639][ T7256] EXT4-fs (loop4): Remounting filesystem read-only [ 130.056058][ T7256] EXT4-fs (loop4): 1 orphan inode deleted [ 130.071693][ T7256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.084257][ T7256] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 130.091410][ T7256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.182039][ T7266] loop4: detected capacity change from 0 to 256 [ 130.320186][ T7272] 9pnet: Could not find request transport: f [ 130.389575][ T7277] loop0: detected capacity change from 0 to 256 [ 130.464123][ T7278] ================================================================== [ 130.472588][ T7278] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 130.481550][ T7278] [ 130.483866][ T7278] read-write to 0xffff88811364f260 of 8 bytes by task 7277 on cpu 1: [ 130.492007][ T7278] __filemap_add_folio+0x439/0x710 [ 130.497135][ T7278] filemap_add_folio+0x9c/0x1b0 [ 130.502029][ T7278] page_cache_ra_unbounded+0x148/0x2e0 [ 130.507502][ T7278] page_cache_sync_ra+0x652/0x670 [ 130.512534][ T7278] filemap_get_pages+0x252/0xfb0 [ 130.517484][ T7278] filemap_splice_read+0x360/0x920 [ 130.522609][ T7278] splice_direct_to_actor+0x26c/0x670 [ 130.527994][ T7278] do_splice_direct+0xd7/0x150 [ 130.532779][ T7278] do_sendfile+0x3ab/0x950 [ 130.537189][ T7278] __x64_sys_sendfile64+0x110/0x150 [ 130.542391][ T7278] x64_sys_call+0xed5/0x2d60 [ 130.546983][ T7278] do_syscall_64+0xc9/0x1c0 [ 130.551488][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.557395][ T7278] [ 130.559811][ T7278] read to 0xffff88811364f260 of 8 bytes by task 7278 on cpu 0: [ 130.567353][ T7278] filemap_write_and_wait_range+0x58/0x1f0 [ 130.573182][ T7278] kiocb_invalidate_pages+0x87/0x1e0 [ 130.578482][ T7278] generic_file_direct_write+0x58/0x200 [ 130.584026][ T7278] __generic_file_write_iter+0xae/0x120 [ 130.589578][ T7278] generic_file_write_iter+0x7d/0x1d0 [ 130.594962][ T7278] iter_file_splice_write+0x5e6/0x970 [ 130.600336][ T7278] direct_splice_actor+0x16c/0x2c0 [ 130.605474][ T7278] splice_direct_to_actor+0x305/0x670 [ 130.610901][ T7278] do_splice_direct+0xd7/0x150 [ 130.615844][ T7278] do_sendfile+0x3ab/0x950 [ 130.620261][ T7278] __x64_sys_sendfile64+0x110/0x150 [ 130.625478][ T7278] x64_sys_call+0xed5/0x2d60 [ 130.630088][ T7278] do_syscall_64+0xc9/0x1c0 [ 130.634593][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.640511][ T7278] [ 130.642838][ T7278] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 130.650290][ T7278] [ 130.652692][ T7278] Reported by Kernel Concurrency Sanitizer on: [ 130.658936][ T7278] CPU: 0 UID: 0 PID: 7278 Comm: syz.0.1232 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 130.669613][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.679668][ T7278] ==================================================================