last executing test programs: 4.015277394s ago: executing program 3 (id=833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x850) 3.985584736s ago: executing program 3 (id=834): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x5e9, &(0x7f0000001480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000040)) sendfile(r3, r2, 0x0, 0x7ffff000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 3.790662484s ago: executing program 0 (id=841): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) socket$kcm(0x11, 0x3, 0x0) 3.671100699s ago: executing program 3 (id=843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x0, 0x4ea, &(0x7f0000000380)="$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") 3.457626629s ago: executing program 3 (id=852): r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xc0a2, 0x80, 0x3, 0x2b5}, &(0x7f0000000400)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xffffffffffffff76}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20550, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x90}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000726) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000300)=""/202, 0xca}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', r4, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f00000005c0)=""/234) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) socket$inet6_udp(0xa, 0x2, 0x0) r11 = accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r8, r0, r8, r3, r3, r7, r8, r11], 0x8) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x20) 3.228346808s ago: executing program 3 (id=856): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x0, 0x4ea, &(0x7f0000000380)="$eJzs3VFrHF0ZAOB3Jrt+TZvPzaffRS3YFltJinaTNLYNXlQF0auCWu9rTLYhZJMtyaZtQtEUf4AgooI3euWN4A8QpD9BhILei4oi2uqFF9WR3Z2NabqbpHazq9nngdM5Z3Z23/N22JM5M8NOAEPrYkRMRkSWZdmViCjl69O8xE6rNLZ78fzxQqMkkWV3/pJEkq9rf9Y7+fJM/rZTEfGVL0Z8PXk97sbW9sp8tVpZz9tT9dXkZZZtX11enV+qLFXWZmdnbszdnLs+N92TPMcj4tbn//C9b//kC7d+8cmHv737p8lvtBJs2ZtHL7VSLzb/L9oKEbF+HMEGpNDMsOX6gPsCAMDBGsf7H4qIj0XElSjFSPNoDgAAADhJss+Mxcukdf0PAAAAOJnSiBiLJC3n9/uORZqWy617eN+P02m1tlH/RFbaPV8wHsX03nK1Mp3fOzAexaTRnsnvsW23r+1rz0bEexHx3dJos11eqFUXB3rmAwAAAIbHmX3z/7+XWvN/AAAA4IQZH3QHAAAAgGNn/g8AAAAnn/k/AAAAnGhfun27UbL2868XH2xtrtQeXF2sbKyUVzcXygu19fvlpVptqfmbfauHfV61Vrv/qVjbfDRVr2zUpza2tu+u1jbX6neXX3kENgAAANBH7114+pskInY+PZpGRJbsea0YkY3s3bjQ//4Bxyd9k41/f3z9APpvZNAdAAbGIT0Mr+KgOwAM3GHjQNebd37Z+74AAADHY+Iju9f/mwUYHvn1/yQZdEeAvnP9H4aX6/8wvIoHHQGYFMCJlx7hq/721/+z7I06BQAA9NxYsyRpOZ8HjEWalssR7zYfC1BM7i1XK9MR8cGI+HWp+E6jPdN8Z+L0AAAAAAAAAAAAAAAAAAAAAAAAAAAcUZYlkXUxursNAAAA8P8sIv1jkj//a6J0eWz/+YEPJP8oNZcR8fCHd77/aL5eX59prP/r7vr6D/L11/p99gIAAADopD1Pb8/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXjx/vNAu/Yz7589FxHin+IU41VyeimJEnP5bEoU970siYqQH8XeeRMTZTvGTRrdiPO/F/vhpRIz2Kv77MfbfxD/Tg/gwzJ42xp/Pdvr+p3Gxuez8/Svk5W11H//S3fFvpMv4926nD0xfX3Xu2c+musZ/EnGu0Hn8a8dPusS/dMQcv/bV7e1ur2U/jpjo+PcneSXWVFK4P7WxtX11eXV+qbJUWZudnbkxd3Pu+tz01L3laiX/t2OM73z05/86KP/TXeKPH5L/5SPm/89nj55/uFUt7nupGD/KsslLnff/2S7x23/7Pp7v7kZ7ol3fadX3Ov/TX52/cED+i13yP2z/Tx4x/ytf/tbvjrgpANAHG1vbK/PVamVdReXYKqPRx6DzcdA27YPYPvTnm3mo/4ld8MaVAQ5KAADAsfjPQf+gewIAAAAAAAAAAAAAAAAAAADD67CfAYse/JzY/pg7g0kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBA/w4AAP//btXLRA==") 2.904356153s ago: executing program 3 (id=863): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x8) 1.60043223s ago: executing program 1 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r1, 0x0, 0x0, 0x0) 1.58614595s ago: executing program 1 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0) 1.564864972s ago: executing program 1 (id=892): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) io_setup(0x9, &(0x7f0000000240)=0x0) r5 = eventfd2(0x7, 0x80001) io_submit(r4, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffd, r6, &(0x7f00000000c0)="0a0c7361444328749789a916f04131155f", 0x11, 0x5, 0x0, 0x2}]) 1.418902968s ago: executing program 1 (id=896): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000100)={0x0, 0x50, [0x6, 0x1ff, 0x8, 0xffffffffffffffff], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) setresgid(0xee00, 0xee01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r11, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x140, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x14, 0x4}, {0x1, 0x6}, {0x1d, 0x2}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0xa}, {0x6, 0x7}, {0x9, 0x1}, {0x8, 0x5}, {0x6, 0x2}, {0x9, 0x2}, {0xe6, 0x1}, {0xb3, 0x5}, {0x7, 0x6}], "7d215bc29ee1a4db"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "d149af131bfbda0f"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x28}, {0x4, 0x6}, {0xff, 0x2}, {0x9, 0x2}, {0x1, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x81, 0x6}, {0x7, 0x2}, {0x50, 0x4}, {0x7, 0x3}, {0x9, 0x2}, {}, {0x2, 0x7}, {0x4, 0x3}, {0x9, 0x7}, {0x2, 0x3}], "d31f4144870e2601"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xab, 0x3}, {0x5, 0x1}, {0x9, 0x3}, {0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x99, 0x2}, {0x7, 0x2}, {0x1}, {0x4, 0x5}, {0x2}, {0xfe, 0x6}, {0x1, 0x40}, {0x5, 0x6}, {0x1, 0x1}, {0x8b, 0x2}, {0x3}], "1d79c617cd1e83bc"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xe9, 0x2}, {0x8, 0x3}, {0xa, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0xff, 0x4}, {0x2, 0x3}, {0x6, 0x2}], "208ca0c88f7bcf81"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xf2, 0x4}, {0x9, 0x3}, {0x8, 0x1}, {0xa, 0x5}, {0x7, 0x5}, {0x5, 0x4}, {0x6}, {0x47, 0x4}, {0x4, 0x7}], "3ac79bd0e15cfc06"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xf9, 0x5}, {0x4, 0x4}, {0x7}, {0x1b}, {0x80, 0x6}, {0xff, 0x1}, {0x4, 0x4}, {0xd, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x7}, {0xd, 0x6}, {0x61, 0x5}, {0x6, 0x4}, {0x4, 0x7}, {0x9, 0x4}, {0x4, 0x1}], "53c2d7ae5777cbd2"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd, 0x5}, {0xff, 0x2}, {0x1}, {0x0, 0x5}, {0x2, 0x2}], "aab349159b1ab5f4"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 1.379638539s ago: executing program 4 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)) 1.216545187s ago: executing program 4 (id=898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20b888, &(0x7f00000006c0)={[{@usrquota}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50e, &(0x7f0000000d40)="$eJzs3c9vI1cdAPDvOHHiZNMmLT0AgnZpCwtarZN426jqAZYjQpUQPYK0DYk3imLHUeyUJuwhPXNFohIneuQP4NwTB25cENy4lAMSPyJQg8TBaMbj1M3am6hJ7Cj+fKTRzJs36+/3xZn3dt6u/QIYW7cj4jAipiLinYiYz88n+RYPOlt63SdHj9eOjx6vJdFuv/3PJKtPz0XPn0ndyl+zFBE//DDiJ8mTcZv7B1urtVp1Ny8vtuo7i839g3ub9dWN6kZ1u1JZWV5ZeuP+65VLa+tL9an86Ksf/+HwWz9L05rLz/S24zJ1ml48iZOajIjvX0WwEZjI2zM16kT4XAoR8XxEvJzd//Mxkb2bAMBN1m7PR3u+twwA3HSFbA4sKZTzuYC5KBTK5c4c3gsxW6g1mq27jxp72+udubKFKBYebdaqS/lc4UIUk7S8nB1/Wq6cKt+PiOci4hfTM1m5vNaorY/yLz4AMMZunRr//zPdGf8BgBuuNOoEAIChGzD+Hw47DwBgeDz/A8D4Mf4DwPjpjP8zo04DABgiz/8AMH6M/wAwVn7w1lvp1j7Ov/96/d39va3Gu/fWq82tcn1vrbzW2N0pbzQaG9l39tTPer1ao7Gz/Frsvbfw7Z1ma7G5f/Cw3tjbbj3Mvtf7YbWYXeWTBQAwSs+99NGfk3REfnMm26JnLYfiSDMDrlph1AkAIzMx6gSAkbHaF4yvCzzjmx6AGyJ58PT6Ur8PCLXb7fYV5gRcrTtfMv8P46pn/t//AoYxY/4fxpf5fxhf7XZy3jX/47wXAgDXmzl+IOl/+vl8/5v8Hwd+vH76ig+uMisAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC43rrr/5bztcDnolAolyOeiYiFKCaPNmvVpYh4NiL+NF2cTsvLI84ZALiowt+SfP2vO/Ovzn2m6sVbJ4dTEfHTX739y/dWW63dP0ZMJf+a7p5vfZCfrww/ewDgbN1xOtv3PMh/cvR4rbsNM5+/fzciSp34x0dTcXwSfzIms30pihEx++8kL3ckPXMXF3H4fkR8sV/7k5jL5kA6K5+ejp/Gfmao8QufiV/I6jr79GfxhUvIBcbNR2n/86Df/VeI29m+//1fynqoi8v7v/Sl1o6zPvDT+N3+b2JA/3f7vDFe+933OkczT9a9H/HlyYhu7OOe/qcbPxkQ/9Vzxv/LV158eVBd+9cRd6J//N5Yi636zmJz/+DeZn11o7pR3a5UVpZXlt64/3plMZujXhw8GvzjzbvPDqpL2z87IH7pjPZ//Yx2d1vw4f/e+dHXnhL/m6/0i1+IF54SPx0Tv3FG/K7V2d+WBtWl8dcHtP+s9//uOeN//NeDJ5YNBwBGp7l/sLVaq1V3x/Igznfx7/Mf1rXIeawP0nfhGqTR9+A7w4o1Ff2rfv5K59d0OqL3F7vd/lyxBvUYlzHrBlwHJzd9RPx31MkAAAAAAAAAAAAAAAB9DeMTS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfX/wMAAP//yAzLPg==") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_file_error\x00', r2, 0x0, 0x65da4d4f}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000500)='!\x7f\x00\xca\xcb\x13\x00\x00E!\xf9\x99\xb7\xca\x9e\xd3ud\x01\xb1M\xf1\x05\x1d\x1a3:\x1a\x88O\xb9#N\xdc\xec\xb47\xe3\xd7\x80U/wco\xceU\x00\x00\x00\x00\x00\x00\x00u\xbc\xdb\xc3\n\x8f\x05\xec\xe0Z\x06\xbdr\xe6D\xc6C\xb3\x05P\xdb\xbc\xb5\xa9@\x13\x1a\x85U;\xc4?\xb7\xa2\x9cT\xb5\xd7\x89\xa02\xa4\xf1\x9b\xca\xacl\x9b\xec\xdd\x1e\xd9\xe8\xacA\x10\xda(Vpz\xbe\xcd\xc0fc\xc7X\xdf\xbd\xb2\xfd\xbe\x99\xdaq\xfb6\x06\x11A\x1a\xbe\xbb\x1cVw2\xf5\xcf\x18+\x90\xd1\xa7B\xe9\xd9u,\xac\xaa\xe5OdK\xe9.v5\xbf\xba\xbf%\xa9X+\xae\x0e\x17\v\xf3\xd1\xe3\'\xc1\xe7\t\xf6}\x82\xdeP\x98{\"\x1f0', 0x113f45a71ba01ae, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7, 0x20000000000}) syz_io_uring_setup(0x14d7, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x2, 0x257}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x110, &(0x7f0000000440)=0x7, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) mq_timedreceive(r4, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 1.104623052s ago: executing program 4 (id=899): r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xc0a2, 0x80, 0x3, 0x2b5}, &(0x7f0000000400)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xffffffffffffff76}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20550, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x90}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000726) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000300)=""/202, 0xca}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', r4, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) socket$inet6_udp(0xa, 0x2, 0x0) r11 = accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r8, r0, r8, r3, r3, r7, r8, r11], 0x8) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x20) 693.97675ms ago: executing program 0 (id=900): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)) 658.239851ms ago: executing program 4 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r1, 0x0, 0x0, 0x0) 615.069453ms ago: executing program 0 (id=903): r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xc0a2, 0x80, 0x3, 0x2b5}, &(0x7f0000000400)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xffffffffffffff76}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20550, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x90}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000726) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000300)=""/202, 0xca}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', r4, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) socket$inet6_udp(0xa, 0x2, 0x0) r11 = accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r8, r0, r8, r3, r3, r7, r8, r11], 0x8) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x20) 614.649353ms ago: executing program 4 (id=904): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bd", 0x44}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 498.865708ms ago: executing program 4 (id=908): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e000200"], 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r8, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) close_range(r3, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x80, 0xf7, 0x3, 0x31, 0x9, 0xdd, 0xe, 0x5, 0x8, [0x8000, 0x1, 0x3, 0x5, 0x101, 0xff, 0x6, 0x7fff]}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x4020400) fstatfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 366.908994ms ago: executing program 2 (id=909): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6b7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x9b, 0xa, 0x2, @remote, @local, 0x80, 0x8000, 0x3, 0x405}}) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@usrjquota}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) 308.864877ms ago: executing program 0 (id=910): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 281.882838ms ago: executing program 2 (id=911): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 203.009081ms ago: executing program 1 (id=912): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc) 174.817152ms ago: executing program 2 (id=913): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000100), 0x1, 0x793, &(0x7f0000001700)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001800835e000000000000000002008000020000020000000006001c004e2400000c0016800600060000180000080005000000000008000100ac"], 0x60}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x4040000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x80, 0x10000, 0x0, 0x0, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES16=r4, @ANYRES64, @ANYRES64, @ANYRES8, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) 138.167564ms ago: executing program 1 (id=914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x5e9, &(0x7f0000001480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 108.086545ms ago: executing program 0 (id=915): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c01000010001307000000000000000000000000000000000000fffffffffffffc01000000000000000000000000000000000002000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000fe800000000000000000000000000013070000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff2000000000000000000000000000000002000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 84.686326ms ago: executing program 2 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 20.020939ms ago: executing program 2 (id=917): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000040)=0xffffffffffffffff, 0x5, 0x2) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 18.652259ms ago: executing program 0 (id=918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000002c0)=0x8, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=@newtfilter={0x28e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28b0, 0x2, [@TCA_CGROUP_ACT={0x55c, 0x1, [@m_tunnel_key={0x118, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x100, 0x80000001, 0x20000000, 0x5, 0x2}, 0x1}}]}, {0xcb, 0x6, "388734190927bbe96afa1da5e9a4eed4f653ec89734cef3a912734857e7031749f2b8770e4613638a7d959c3247b16d52d01899801d9aa0b3748f62b113df826068cc870eb66efd4b7199b01d2ad5e7fc921cdb8040a0648b260f113f3ce729a43dd967b5e5f96727279f713930e691f5a9ee3160de428116cf56a83b09c27159b0c743d338563a7df54d8baf67b4a4cc9d8aea3313cb443e68b9d599fe21ef8c39fe2594d91c2a51d6482307c7ecf51d6bdd9f9914263643de375d53becb4fb0a656b96bbeb22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xf0, 0x10, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x10000000, 0x7fff, 0x2}, @multicast1, @rand_addr=0x64010102, 0xffffffff, 0x1}}]}, {0x9f, 0x6, "2429114874bbe67276726422c3fc262054848745fd04805195fe5bfb29e15a9b0245974bc756a9317bef68cf6dd8d2cac1338eb37526df4f66934531fd7712e1c6503aa7a4e024f0150cc5f8a4882d643ec93e95b3b9864de59a8e0d9cc40b02b44f74ec3d034cca21e987ef66ae9004c227a901aea6eab49b408b9e1ef9b7472e378666fbc026634f68b550350c9adec210db22603719cbd538cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x15c, 0x7, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x83, 0x4, 0xffffffffcffffff0, 0x7}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3d}]}, {0xf5, 0x6, "fcaaac57e6c3f514fb2819ce868f14320815856d3fb5f0b0fa970572425559e124c204525bc239f39611c405bfcca1e1d949196e2a946bc95b3ac5420e4f91a661d86f751134c0c5f67f74ec27577e882bfbd66b690fee0fb0aa49eb0b54a86bb9974d74879b14a2745d4fdf1e22197d594dbaa0b17d7a8fcf8f82aa06996642f0c2ef2f0545a510d441e07144419d1172b1582ac96c8511157fa08e9510eda53c0faf2c92156249af8bb0290550c6f52b1e865f9117f804cfa8d499a600cdad295bff6d83b239c522e42194a0454819114b146807d64e4bb407c37af99105a89c10a8aa6c99ba7c802a773bb8aabe4f34"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x100, 0x15, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x7, 0x1, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x7, 0x7, 0xd}, @private=0xa010101, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x224, 0x7, 0x6, 0xfe, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff000000, 0x1}}]}, {0x5d, 0x6, "2e40bb4cfe4acc3cc8244a7e3d5a560dc68dd81e671e108ae9db0c678bec6bda90e4ea5390f71ceef37e3296c95dc1a833227083a079c425c46e916014e3181fb417662735e691e5a860451a307620b07ea932505be993e8bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xf4, 0xf, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x5, 0x2, 0x1, 0x9c}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb3, 0x0, 0x10000000, 0x22, 0x21a}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0x5, 0xc6bb}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x5, 0x0, 0x6}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xb600, 0x30000000, 0xfffffff0, 0x3ff}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x4, 0x4, 0x10000000}, 0x59}}]}, {0x1d, 0x6, "94acf8076e6e02b55797ba9159c31fa78e645e5f8fbd261c0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x44c, 0x1, [@m_mirred={0x150, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf5, 0x262c1d55, 0x4, 0x5, 0x1ff}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0xe08, 0x7, 0x0, 0x8}, 0x2, r1}}]}, {0xe3, 0x6, "2b1e62527970e1e8413639a2cc4aef9f91858a11bc6c678655f531becca51d3eeaf1635f5f7f22d8ba7fee93cb8ec49d3fa09515200aba6c14f5f33068d53f76d3b620c0b3b212aabe92ec53994dbb9a4d566710b5072158ddfd79a98f1027228569dd8c7e4b76022364c1bfdb7e0f0d66586d69781a3da74f22ab300438fed9b2a7fa39ee3e8fdbdd42af3bb5b3d1462881328c6af5eba87a4fe4a4d3a5c27e8920291d262c86db9daa84b027af2544f0ce1f8119c905302adec78c92d7926d9e9a1239d0e59bc813402d4e8c480ac911d0ce2fc5dc2e018ad840c435fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x8c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x80}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x200}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x7, 0x20000000, 0xe, 0xfffffff8}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x21, 0x6, "13413b4e37347522d7d05382dc6a51be61570bf1cbe86da0ba5c39e67e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x18c, 0xc, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8ee, 0x1ff, 0x1, 0x19, 0xb}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x20000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xe0, 0x7, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x5, 0x4f90}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1d, 0x800, 0x6, 0x8, 0x9a2}, 0x38}}]}, {0x7c, 0x6, "1522f94e1a99671e8a2ecdbf5d2964923123990d43d18b32330bc5f57bd63455b1898cb9512f3a60db0aadebfbfb30de0062342123252ca7309e80aca1e0c411d2f38de03e629c91f64ae7ff34ffd11439dc64978fb958f43a5ab5ab406bf96e2caa987422dbc94d98ad0f45697989a782c5f5b9c122fd9c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_POLICE={0x884, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xffffffff, 0x6, 0x3, {0xc, 0x1, 0x1, 0x1, 0x2311, 0x5}, {0x0, 0x2, 0x369d, 0x5, 0x400, 0x3}, 0x7ff, 0x8, 0xbe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x99, 0x1ff, 0x2, 0xa, 0x3ff, 0x8, 0x8dd, 0x7, 0x100, 0x8, 0x7, 0x5, 0x5, 0x6b02, 0x0, 0x7fffffff, 0x4, 0x2, 0x0, 0x9a2, 0x8, 0x2, 0x95e8, 0xa, 0x2, 0x5, 0x4, 0x8, 0xb, 0xfffffff7, 0x4, 0x8, 0xe9, 0x3, 0xc9e, 0x4, 0x7, 0x5, 0x0, 0x1000, 0x5, 0x4173, 0x2, 0x2, 0x4947, 0x9, 0xa, 0x2, 0x3, 0x10000, 0xff, 0x4, 0x3, 0xb8d, 0xfff, 0x6, 0x6, 0x0, 0x0, 0x2, 0x7, 0x1ff, 0x1, 0x6, 0x1, 0x10001, 0x1, 0x0, 0x7fffffff, 0xff, 0x7, 0x44, 0x8, 0x759c, 0x3ff, 0x9, 0x1a000000, 0x1c00, 0x2, 0x1, 0x3, 0x1, 0x4, 0x8, 0x7, 0x2, 0x10001, 0x5, 0x5, 0x1, 0x80000001, 0x1, 0x1, 0x1, 0xc, 0x1000000, 0xe6a, 0xac, 0x6, 0xa88, 0xe00000, 0x7fff, 0x7, 0x9, 0x9, 0xf76, 0x4977, 0x0, 0xa, 0x5, 0x4, 0x2, 0x2, 0x0, 0x7ff, 0x2, 0x0, 0x9, 0x31f00000, 0xbd0, 0x7, 0x8, 0x4, 0x1, 0x4, 0x3, 0x8, 0x8, 0x1ff, 0x2, 0x8, 0xc, 0x8001, 0x5, 0x4b6, 0x9, 0x9, 0x3, 0x0, 0xf, 0x6, 0x8, 0x0, 0x5, 0x9, 0x1909, 0xfffff801, 0x0, 0x80000001, 0x7, 0x8929, 0x52f4955b, 0x1ff, 0x6, 0x7bcd, 0x400, 0xc, 0x7, 0x8, 0x6, 0xffffffff, 0x67, 0x7, 0x954e, 0x2, 0x10, 0x0, 0x8, 0x4, 0xac, 0x7fffffff, 0x3, 0x9, 0x3a, 0x7, 0x9, 0x7, 0x2, 0xde, 0x5, 0x61d, 0xfffffff9, 0x7, 0x100, 0x1, 0x800, 0x40, 0xfff, 0x1, 0x1, 0x2, 0x8, 0xfc7, 0x2, 0xf9, 0x1, 0x7f, 0x5, 0x400, 0x3, 0xe7a7, 0x9, 0x4, 0x401, 0x7, 0x81d1, 0x400, 0x7, 0xc, 0x2, 0xca, 0x6, 0x81, 0x10000, 0x6, 0x6, 0x7, 0x2, 0x7fffffff, 0x3, 0x1, 0x7e2, 0x7a, 0x3, 0xb, 0x5, 0x9, 0x10000, 0x7, 0x8, 0x0, 0x38c, 0x7, 0x3, 0x7, 0x100000, 0x5, 0x1, 0x5, 0x6, 0x2, 0x2, 0x3, 0x9, 0x7, 0x7, 0x1ff, 0x5c30c00d, 0x81, 0x2, 0x0, 0x5, 0x2, 0x10e, 0x6, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x45, 0x3ff, 0x3, 0x80000001, 0xf, 0x9, 0x3, 0x1, 0x10, 0x5, 0x2, 0x6, 0x5, 0x6, 0x7, 0x55ef, 0xfffffff8, 0xd3, 0x7a3, 0x8001, 0x5, 0x6, 0x480, 0xc979, 0x5, 0x1, 0x5, 0x1, 0xfffffff7, 0x4, 0x25, 0x2ae, 0x9, 0x2, 0x9, 0x10001, 0x7, 0xff, 0x8, 0xc, 0x800, 0x1, 0x7, 0x1000000, 0x100, 0x5, 0x7f, 0x4, 0xfffffffb, 0x2, 0x6044, 0x4, 0x2, 0x2, 0x1ff, 0xafe2, 0x9, 0x46b, 0x6, 0x9, 0x2b4, 0xc53, 0x9, 0xfffffffb, 0x1, 0x3f94462d, 0x56, 0x81, 0x8, 0x400, 0x9, 0x3, 0x2, 0x1, 0x9, 0x0, 0x7ff, 0x8000, 0x65724820, 0x6, 0x1, 0x2, 0x6, 0x3c6, 0xa6c, 0x6, 0x9, 0x5, 0x9a, 0x9, 0x8, 0x6, 0x8, 0x8, 0x1, 0x5, 0x5d359e2e, 0x0, 0x5, 0x1, 0x6, 0x5, 0x5, 0x7, 0x5, 0x1, 0x0, 0x7, 0xe3a0, 0x6, 0x7, 0x81, 0x79b6, 0x0, 0x88, 0xffffffff, 0x0, 0x9, 0x2, 0x54, 0xb9c, 0x9, 0x8, 0x0, 0x9, 0x9, 0x9, 0xc, 0xffffffff, 0xfffffffb, 0x7, 0x61, 0xffff, 0x5, 0x1, 0x200, 0x0, 0x1, 0x7, 0xff, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x1, 0x52, 0x10000, 0x7, 0x7ff, 0x6, 0x0, 0x3, 0x58b2, 0xe7, 0x4, 0x6, 0x0, 0x8001, 0x8001, 0x0, 0xd4, 0x100e, 0x80, 0x0, 0x7f, 0xaca, 0x4, 0xfffffffc, 0x5, 0x4, 0x798, 0xfffffe01, 0x0, 0x9, 0xb9a, 0x7, 0x200, 0xffff5246, 0xf80, 0x0, 0x8, 0x7, 0x7, 0x40, 0x2, 0x3cefc9d7, 0x4, 0x0, 0xd85, 0x2, 0x6954025e, 0x2, 0x80000001, 0x7, 0x125, 0x9, 0x1, 0x8, 0x81, 0xfff, 0x1ff, 0xfff, 0xe083, 0x800, 0x0, 0x4, 0x8, 0x1, 0xffff7fff, 0x3, 0x6ab3ee55, 0x3ff, 0x7, 0x4, 0x7fff, 0x401, 0x3ff, 0x4, 0x2d, 0xffffff68, 0xd, 0x4, 0x1000, 0x358e, 0x5, 0x9b4c, 0x9, 0x1, 0x4, 0x0, 0x0, 0x1, 0xffffffff, 0x80000000, 0x2, 0x0, 0x9e1, 0x0, 0x8001, 0x4, 0x9, 0x80000000, 0xf99, 0x4, 0x6, 0x608, 0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0xe96, 0xfffffffb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcdaa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4489}]}, @TCA_CGROUP_POLICE={0x1020, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x13bb, 0xcfd, 0x3, 0x1, 0x1ff, 0x2, 0xdc76, 0x5, 0x0, 0xfffffff7, 0x88e2, 0x3, 0x4, 0x9, 0xb5, 0x7, 0x9, 0x0, 0x1, 0x2b8, 0xccb, 0x3, 0x2, 0x80000001, 0x4, 0x2, 0x1, 0x32c2489, 0x3, 0x0, 0x6, 0x65c, 0x4a20, 0x7f, 0x0, 0x2, 0x8000, 0x3, 0x7fffffff, 0xfffffff8, 0xffffffff, 0x5, 0xa1, 0x3, 0x5, 0x7, 0x2, 0x3, 0x1, 0x9, 0xb, 0x7ff, 0x2, 0x0, 0x4, 0x0, 0x1, 0x2, 0x9, 0x9, 0x5, 0x3, 0xffffffff, 0x56b, 0x5, 0x5, 0xfd9, 0x9, 0x0, 0x2, 0xd, 0x1fe9, 0xfffffffe, 0xddf, 0xe, 0x9f, 0x8, 0x5, 0x5, 0x10, 0x8, 0x80000001, 0x5, 0xfff, 0x4, 0x5, 0x2, 0xfffffffc, 0x9, 0xffff, 0xa, 0x1b0, 0x7, 0x3, 0x0, 0x7, 0x2, 0xfff, 0xffffffff, 0x79f, 0x4, 0x1, 0x3, 0x1, 0x5, 0x9, 0x8000, 0x18000000, 0xfff, 0x9, 0x43ea, 0x9, 0x2, 0xab, 0x9, 0x1, 0xd6, 0x4, 0xfff, 0x10001, 0xfffffff0, 0x5, 0x2, 0x6, 0x0, 0x48, 0x7, 0x5, 0xc000, 0x8, 0x2, 0x0, 0x5, 0x10000, 0x40, 0x8, 0x2, 0x2c1, 0xff, 0x3, 0x1, 0x10000, 0x4, 0x7, 0x6, 0x51f6, 0x8, 0x3, 0x5, 0x81, 0x1, 0x101, 0x5, 0xbf2a, 0x0, 0x51, 0x7ebd, 0xb, 0x7, 0x7, 0x2, 0x3, 0x800, 0x9, 0xc, 0x5, 0x6, 0x5, 0x1, 0xa, 0x9, 0x10001, 0x9a7, 0x6, 0x5, 0x8, 0x400, 0x9, 0x0, 0xa9, 0xd, 0x7f8, 0x4, 0xfffffffc, 0x7ff, 0xc, 0x8, 0x7, 0xc7b, 0x8, 0x0, 0x7, 0x409, 0x9f, 0x0, 0x4, 0x2, 0xffffffbf, 0x3, 0xffff409c, 0x5, 0x2, 0x6, 0x73d, 0xee, 0x5, 0x8, 0x400, 0x2, 0x101, 0xd0b, 0xc910, 0x3ff, 0xc, 0x7fffffff, 0x7, 0x800, 0x40, 0xfffffffd, 0x6, 0x7, 0x0, 0x2400, 0xf, 0xd9, 0xff, 0x4, 0xeb7, 0x8000, 0x494ac5ab, 0x4727, 0x7, 0x6, 0xffffa5a6, 0xfffffffd, 0x10001, 0x7, 0x3, 0x0, 0xfffffff7, 0x6, 0xff, 0x6, 0x4, 0x10000, 0x3, 0x10000, 0x7f, 0xe553, 0xdac, 0x3, 0x5, 0x8000, 0x5, 0x80]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x597}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x5, 0xc69, 0x10, 0x5, 0x7, 0x1, 0x7, 0x7, 0x3, 0x3, 0x7ff, 0x9, 0x1000, 0xfff, 0x5, 0x5, 0x1, 0x0, 0x10000, 0xfffffffe, 0x5, 0x2, 0x8, 0x4, 0x8, 0x9, 0x3, 0x10000, 0x2163, 0x14, 0x9, 0x80, 0x7fff, 0x2, 0x9, 0x7, 0x300, 0x1, 0x4, 0x4, 0x400, 0x8, 0x1, 0x4a, 0x1000, 0x7, 0x8, 0x7, 0x5, 0xd75, 0x3, 0x10001, 0x5, 0x5, 0x4, 0x0, 0x2, 0x4, 0x6, 0x8, 0x6, 0x5, 0x1, 0x9, 0x2, 0xffff, 0x0, 0x100, 0x6, 0x97c6, 0x6, 0x3, 0x0, 0x3, 0xfff, 0x8, 0x8, 0x5, 0xfe, 0x1, 0x6, 0x7, 0x140000, 0x7, 0x7, 0xfffffffe, 0x6, 0x0, 0x101, 0xc7, 0x7, 0xffffffff, 0x6a, 0x6b09, 0x9, 0x5, 0x7, 0xc7, 0x9, 0x9, 0x4, 0x3, 0x9, 0x2ba, 0x1, 0xf3, 0x9, 0x39, 0x9, 0x3ff, 0x8, 0x4, 0x9, 0x1b8ea2cd, 0x7, 0x9, 0x6, 0x8, 0x1, 0x1, 0x3, 0x4, 0x8, 0x9, 0xc, 0x1, 0xbab3, 0x6, 0xaf6, 0x4, 0xb, 0x9, 0x3, 0x5, 0x3, 0x6, 0x4, 0xfffffffd, 0x3ff, 0x10000, 0x8000, 0x10000, 0x1ff, 0x472a, 0x3, 0xfffffff7, 0x3, 0x10, 0x14, 0x2, 0x8, 0xffff, 0x0, 0x80000000, 0x4031, 0xd, 0x3, 0xfffffffe, 0x7f, 0x0, 0x3, 0x101, 0x394c, 0x200, 0xd7800, 0x7, 0x6, 0x7fffffff, 0x2, 0x4, 0x9, 0x36af, 0xbce, 0x8, 0x6, 0x1, 0x6, 0xfe, 0x0, 0x10001, 0xffffffce, 0x5, 0x1, 0x2, 0x5, 0x7, 0x4, 0x65, 0x0, 0xf08, 0xb87a, 0x8, 0x4, 0x0, 0x9, 0x7, 0x1d, 0x5, 0x6, 0x5, 0x0, 0x6, 0x40, 0xffffffff, 0x1, 0x7fffffff, 0x2, 0xffffffff, 0x3, 0xffffffff, 0xfffff800, 0x0, 0x7, 0x8, 0xce, 0x7, 0x3, 0x0, 0x1, 0x800, 0x456e, 0x4, 0x0, 0x9, 0x3, 0x3, 0x1, 0xfff, 0x6, 0x4, 0xfd4, 0x8, 0x4, 0x6, 0x8, 0x8, 0x2000, 0x1, 0x9, 0xff, 0x3, 0x5, 0x9, 0x919, 0x5, 0x6, 0x0, 0x8, 0x1, 0x84, 0x5, 0x0, 0x3, 0xa603, 0xb0]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x6ac, 0xe9, 0x6, 0x29d1, 0x2, 0x3, 0xf70, 0x2, 0x5, 0xca98, 0x80, 0x9750a79, 0x8, 0x7f, 0x8aa, 0x7, 0x2, 0x3, 0xff, 0x7, 0x4a5, 0xfffffff4, 0x91a, 0x780000, 0x9, 0x8, 0x5, 0x10001, 0x5, 0x401, 0x5, 0x0, 0x12, 0x3, 0x46dc, 0x0, 0xe, 0x3, 0x8, 0x2d, 0x2, 0x0, 0x3, 0x6, 0x1, 0x80000001, 0x2447, 0xa, 0x80, 0xe1, 0x9, 0x3ff, 0x400, 0x5, 0x8, 0x0, 0xe0000000, 0x444, 0x4, 0xa, 0x8, 0x6, 0x3f6523b7, 0x5, 0xde42, 0x4, 0x4, 0x7f, 0x0, 0xfffffff6, 0x4, 0xbca0, 0x5, 0x1, 0x1700, 0x1ff, 0x237, 0x0, 0x8, 0x5, 0x6, 0x8, 0x7, 0x10, 0x2, 0x3, 0xb, 0x8, 0x7, 0x6, 0x9, 0x1, 0xfffffff8, 0x9, 0x3, 0x3d, 0x0, 0x5, 0x7fffffff, 0xc, 0x5, 0x3, 0x3, 0xfa9b, 0x1000, 0x8, 0x3, 0x2000000, 0xff, 0x400, 0x401, 0x9, 0x4, 0x7fff, 0x8000, 0x8, 0x3, 0x8, 0x1, 0x6, 0x8000, 0x56a, 0x1, 0x1, 0x10001, 0x9, 0x800, 0x4, 0x53bc, 0x0, 0xd1a, 0xf8f, 0x0, 0x172a79a3, 0x46cfb1a1, 0x2, 0x400, 0x5, 0x2, 0xac5, 0xb, 0x7, 0xffffff18, 0x808, 0x4, 0x400, 0xbe, 0x1, 0x3cb, 0x24, 0xda7, 0x1ff, 0x1, 0x40, 0x6515, 0x7, 0x7, 0x0, 0x9, 0x6, 0x9, 0x3, 0x6, 0x5d5, 0x4, 0xf, 0x2, 0x0, 0x3b4, 0x1, 0x5, 0x81, 0x9, 0x401, 0x5, 0x1, 0xb51, 0x8000, 0x6, 0xb9a, 0x9, 0x3, 0xd, 0x6, 0x72, 0x5, 0x4, 0x1000, 0x8, 0xea51, 0xd, 0x3, 0x36, 0x26d, 0xfffffff9, 0x0, 0xd, 0x8, 0x3, 0x5, 0x3, 0x0, 0xd56, 0x101, 0x39, 0x8, 0x9, 0x8, 0xd, 0x8, 0x0, 0x3e, 0x7, 0x5, 0x9, 0xa6, 0x6, 0x4, 0x8, 0x9, 0x7, 0x0, 0x5, 0x7fff, 0xfffffeff, 0x9, 0x4, 0x20, 0x5, 0x4, 0x2, 0x7fffffff, 0xfffffffd, 0x7785, 0x0, 0x10, 0x2, 0x5, 0x4, 0x3, 0x0, 0x7, 0x3, 0x7, 0x4, 0xbf45, 0x5, 0x4, 0x2, 0x50, 0x7f, 0x7, 0x8, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x3, 0xfffffff7, 0xc0, 0x4b9d, 0x8e6a, 0xf4bd, 0x9, 0x5, 0x7fff, 0x1000, 0x10000, 0x1c0000, 0x81, 0x9, 0xfc, 0x3ff, 0x0, 0x0, 0x6, 0x7, 0x1fffc000, 0x8, 0x3, 0x9, 0x7, 0x20, 0x7c9, 0x3, 0x1, 0x0, 0x6, 0x2, 0xfff, 0x101, 0x3, 0x9, 0x4, 0x3d, 0x3, 0x7ff, 0x6, 0x9, 0x7, 0x5, 0x5, 0xb11, 0xffffffc0, 0x5ddd6462, 0xf, 0x5, 0xffffffff, 0x8, 0x2, 0x6f, 0x80000000, 0x32, 0x2, 0x1ff, 0xafe, 0x7, 0x6, 0x8, 0x4, 0x8001, 0x299a7eb9, 0x8001, 0x33, 0x4, 0x5, 0x2, 0x8, 0x3, 0x5, 0xfffffffc, 0x93ac, 0x1d3a8223, 0x45d7, 0x6, 0x44e, 0x6, 0x1, 0x100, 0x4, 0x9, 0x81, 0x2a50, 0xc, 0x0, 0x8, 0xa, 0x4d0, 0x2, 0x1, 0x2, 0x8, 0xa1, 0x1fc, 0xffff, 0x10001, 0x0, 0x2, 0x401, 0x3ff, 0xceea, 0x7fff, 0x2, 0x0, 0x3, 0xfffff000, 0x7, 0x0, 0xfff, 0x7, 0x8, 0x2, 0x3, 0x80000001, 0x2b26, 0x401, 0x4, 0x3, 0x3, 0x4, 0x7fff, 0xd71, 0x100, 0x7, 0x8, 0x9, 0x1, 0x9, 0x6ee, 0x8, 0x7, 0x8, 0x6, 0x3ff, 0x8, 0x9, 0x1, 0x9, 0x2, 0xd45, 0x5, 0x70f, 0x2, 0x8, 0x9, 0x3, 0x0, 0x6, 0x5, 0xd79, 0x79a1, 0x8, 0x8, 0x8001, 0xb7, 0x3, 0x80000001, 0x3, 0x7, 0x3, 0xd, 0x80, 0x9, 0x214, 0x54, 0x80, 0x56524f87, 0x80000000, 0x81, 0x6, 0x2, 0x3, 0x700000, 0x8, 0xfffffff7, 0x5, 0xb2, 0x6, 0x0, 0x72e2fcd9, 0x7, 0x4d0ab630, 0x8, 0x0, 0x4515, 0x0, 0x8000000, 0x7, 0xb2b400, 0x4, 0x80000001, 0x400, 0xadd, 0x18a7, 0x4, 0x5, 0x2, 0x3, 0x1000, 0x3c3, 0x9, 0xd5e, 0xd, 0x3, 0x80000000, 0x7, 0x1, 0x9, 0x4, 0x5, 0xd64e, 0x9, 0xfffffffe, 0x9, 0x0, 0xd, 0x0, 0x1, 0x7ff, 0xfff, 0xef9, 0x5, 0x8, 0x2, 0x94f, 0x3, 0xa, 0x9, 0xf, 0x6, 0x3, 0xc, 0x20000, 0x9, 0x5, 0xd9, 0xfffffffb, 0x2, 0x8, 0x7, 0x9, 0xfffffffe, 0xb4, 0x60f, 0xfffffffe, 0x401, 0xebf, 0x8, 0x758, 0xf, 0x2, 0x3]}]}, @TCA_CGROUP_EMATCHES={0x650, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x26c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff, 0x3, 0x5}, {0x10000, 0x9, 0x9, 0x80}}}, @TCF_EM_IPT={0x19c, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xd4, 0x5, "dfb6ec919233065e3601814b32a257df4bd16bf98d5d2e10c7ae05f6965d864fdbd67551eccfb462d39851b6106128f3e44f7e7578765b1466c4d2dacba3710695acfa522c1d252b4cd10b145ffc3e33415db9c834a07b9062feaf9175eeaf70e5db18bc952a19710e70ae69e31b147958eef6852208b7d0212990e49aa051b814e49068a15f1ef2c4359707bca62f268fb1312acf68c7ee7b9c4847dc8bce6c82f5d387c18957f5b24ccc74059b98c6fe5808b94b650e66951e4818498d48f0711ac83aa590c45437c60bf5f69c4b9f"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xa2, 0x5, "39bbbfe809963bf1ff642ab9cfe9f40fb7db8c21e15e2ccf835b3dd6e266de17d53ddc65f34f1ef044d7c3af9d858e7ffe187620b97e627bfa7e9b9c70211489026f9a60789cc9273c7e630c239d336a35703617af9c851c8a79dd84e228b9bb8d0a186ec29824fe5cdcc4992eb042a511026b8289833eab10d3ff64610dd328a6e17f54312995cb3397f37ccdf713c9b08165d928b7952925c9bf24f1b6"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfffc, 0x3, 0x7}, {0xffff0000, 0xffff, 0x1, 0x2}}}, @TCF_EM_META={0x78, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x5, 0x2}, {0x3, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7f}, {0x1, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="6b02386d90844bc7", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="841ab68f3819be1c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1}, {0x2, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x8}, {0x800, 0xfa5, 0x8000, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x210, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x8a13, 0x0, 0x100}, "3469461830cf3953f6974f66159b5c04498b73fce49ba6ef90b835651103662dce6a0097002b5f5b8753ff480a2be26123cfd70a7f20f45df0c0254a69ff9467707f1abbf0439a73dd88d3f7bb84c1c59c77f7b706dbf358d54145cfee415a3a91eb2f36b840e3617a68be6b3036201426f9158c72786d72d2"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xffff, 0x7, 0x3}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0xfff, 0x0, 0x3}, "5be467b63f9fa966dfd7ad10cfd5ced00ca7ee9d552dcd13eddf20dea42ae0344d99f7134b1f3a81b7f3de42e107a71c19855ac53c9421e2e2bc56ceaaa3093151e8ee7ccdb31b3bb06e2232db051344d89547da"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7}, {0xa84, 0x9, 0x20, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xb4, 0x3, 0x0, 0x0, {{0x400, 0x0, 0x3}, "d43dfebc111eff2bf2964714a9458f86fc16b6173588e54f18c5ea9974632bfb2b7d927eb4454d4ab6be846e1f96c5230ee48cc7833457cfb9de868f0a5e6dcf648f9cc69c6a055c78d5626832966771e5492a837959f2d04cfe4959def9ebe6f24b9e6b65f14b97cfb942aa77544c329b9c039f9a969857e437b17847ea18c2fe0cec2946e252fd7fb1a4d3126f31af1f2d0e00bf22b20d34dea292ac9091e930a51c2fd6a5"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4910, 0x1, 0x9}, {0x8, 0x2, 0x4a, 0x1, 0x1, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xb, 0x8, 0x1}, {0x2, 0x2, 0x4}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x654}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe1}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x69e, 0x6, 0x6, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x6}, {0x10000, 0x3c, 0x85, 0x2, 0x2, 0x1, 0x1}}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe04, 0x9, 0xfff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x2b3}, {0x1, 0x4, 0x1}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="35b7de79e9ab"]}, @TCA_EM_META_RVALUE={0x2f, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dbed57b130fff6156a", @TCF_META_TYPE_VAR="116d7502", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="cb855687efa9360581", @TCF_META_TYPE_VAR="3ea2c434c8d52fbb88", @TCF_META_TYPE_VAR="48264ffa"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="0e564ddd641370eefc", @TCF_META_TYPE_VAR="78f7eef6d91e6f10", @TCF_META_TYPE_VAR='\f']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x1}, {0x8, 0xd}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x3}, {0xffffffffffffffff, 0x6, 0x2}}}, @TCF_EM_META={0xb0, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7f, 0x1}, {0x401, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4a85, 0x1, 0x1}, {0x2, 0x80}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="f29f", @TCF_META_TYPE_VAR="f0329fe9", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="7cc9aa"]}, @TCA_EM_META_LVALUE={0x31, 0x2, [@TCF_META_TYPE_VAR="e8356a27fc28fccf", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="75f4c4cc", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6888dbf5cf0c28", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="478eb0ea87f3"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x8c2af7a9bdcc3513}, {0x5, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8, 0x2}, {0x0, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="2a01080032", @TCF_META_TYPE_VAR="531640d03d79", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xf7, 0x8, 0x15a}, {0x4, 0x5, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xff, 0x8, 0x3}, {0x1}}}]}]}]}}]}, 0x28e0}}, 0x48014) 0s ago: executing program 2 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$assume_authority(0x10, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") kernel console output (not intermixed with test programs): 9.757003][ T3823] Call Trace: [ 39.757010][ T3823] [ 39.757017][ T3823] __dump_stack+0x1d/0x30 [ 39.757039][ T3823] dump_stack_lvl+0xe8/0x140 [ 39.757058][ T3823] dump_stack+0x15/0x1b [ 39.757074][ T3823] should_fail_ex+0x265/0x280 [ 39.757161][ T3823] should_failslab+0x8c/0xb0 [ 39.757195][ T3823] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 39.757225][ T3823] ? perf_event_alloc+0x14c/0x1740 [ 39.757253][ T3823] perf_event_alloc+0x14c/0x1740 [ 39.757282][ T3823] __se_sys_perf_event_open+0x4a5/0x11c0 [ 39.757362][ T3823] ? __rcu_read_unlock+0x4f/0x70 [ 39.757390][ T3823] __x64_sys_perf_event_open+0x67/0x80 [ 39.757419][ T3823] x64_sys_call+0x7bd/0x3000 [ 39.757441][ T3823] do_syscall_64+0xd2/0x200 [ 39.757462][ T3823] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.757523][ T3823] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.757622][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.757674][ T3823] RIP: 0033:0x7f9716e4f749 [ 39.757691][ T3823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.757711][ T3823] RSP: 002b:00007f97158af038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 39.757758][ T3823] RAX: ffffffffffffffda RBX: 00007f97170a5fa0 RCX: 00007f9716e4f749 [ 39.757772][ T3823] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000200000000500 [ 39.757786][ T3823] RBP: 00007f97158af090 R08: 0000000000000005 R09: 0000000000000000 [ 39.757824][ T3823] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 39.757837][ T3823] R13: 00007f97170a6038 R14: 00007f97170a5fa0 R15: 00007ffd38306708 [ 39.757856][ T3823] [ 39.954581][ T3826] Unsupported ieee802154 address type: 0 [ 40.005403][ T3832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 40.029023][ T3830] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 40.060363][ T3830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.188689][ T3836] loop2: detected capacity change from 0 to 2048 [ 40.208708][ T3838] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.113'. [ 40.218628][ T3838] net_ratelimit: 16 callbacks suppressed [ 40.218643][ T3838] netlink: zone id is out of range [ 40.230002][ T3838] netlink: zone id is out of range [ 40.235990][ T3838] netlink: zone id is out of range [ 40.241834][ T3838] netlink: zone id is out of range [ 40.247977][ T3836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.250622][ T3838] netlink: zone id is out of range [ 40.300345][ T3838] netlink: set zone limit has 8 unknown bytes [ 40.414678][ T3836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.112'. [ 40.828201][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.906072][ T3857] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.119'. [ 40.997841][ T3857] netlink: zone id is out of range [ 41.003393][ T3857] netlink: zone id is out of range [ 41.074378][ T3857] netlink: zone id is out of range [ 41.127386][ T3857] netlink: zone id is out of range [ 41.602410][ T3870] vlan0: entered allmulticast mode [ 41.639378][ T3870] dummy0: entered allmulticast mode [ 41.778529][ T3870] syz.1.122 (3870) used greatest stack depth: 10480 bytes left [ 41.815327][ T3873] netlink: 'syz.2.123': attribute type 5 has an invalid length. [ 41.827649][ T3873] batman_adv: batadv0: Adding interface: vxlan0 [ 41.833970][ T3873] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.925975][ T3873] batman_adv: batadv0: Interface activated: vxlan0 [ 42.009695][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.025967][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.040150][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.059105][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.277361][ T3887] loop2: detected capacity change from 0 to 2048 [ 42.310642][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.378673][ T3885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3885 comm=syz.1.127 [ 42.411432][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.518277][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 42.518293][ T29] audit: type=1400 audit(1764147341.649:776): avc: denied { write } for pid=3879 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 42.723644][ T3911] FAULT_INJECTION: forcing a failure. [ 42.723644][ T3911] name failslab, interval 1, probability 0, space 0, times 0 [ 42.736330][ T3911] CPU: 1 UID: 0 PID: 3911 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.736410][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.736421][ T3911] Call Trace: [ 42.736428][ T3911] [ 42.736440][ T3911] __dump_stack+0x1d/0x30 [ 42.736464][ T3911] dump_stack_lvl+0xe8/0x140 [ 42.736487][ T3911] dump_stack+0x15/0x1b [ 42.736507][ T3911] should_fail_ex+0x265/0x280 [ 42.736554][ T3911] should_failslab+0x8c/0xb0 [ 42.736632][ T3911] __kmalloc_node_noprof+0xaa/0x580 [ 42.736663][ T3911] ? alloc_slab_obj_exts+0x3e/0xd0 [ 42.736688][ T3911] alloc_slab_obj_exts+0x3e/0xd0 [ 42.736710][ T3911] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 42.736808][ T3911] kmem_cache_alloc_lru_noprof+0x2c1/0x490 [ 42.736833][ T3911] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 42.736865][ T3911] hugetlbfs_alloc_inode+0xbc/0x100 [ 42.736971][ T3911] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 42.737001][ T3911] alloc_inode+0x40/0x170 [ 42.737028][ T3911] new_inode+0x1d/0xe0 [ 42.737085][ T3911] hugetlbfs_get_inode+0x7b/0x370 [ 42.737117][ T3911] hugetlb_file_setup+0x192/0x3d0 [ 42.737146][ T3911] ksys_mmap_pgoff+0x157/0x310 [ 42.737168][ T3911] x64_sys_call+0x14a3/0x3000 [ 42.737193][ T3911] do_syscall_64+0xd2/0x200 [ 42.737224][ T3911] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.737304][ T3911] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.737411][ T3911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.737431][ T3911] RIP: 0033:0x7f68b291f749 [ 42.737448][ T3911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.737547][ T3911] RSP: 002b:00007f68b1366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 42.737568][ T3911] RAX: ffffffffffffffda RBX: 00007f68b2b76090 RCX: 00007f68b291f749 [ 42.737580][ T3911] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 42.737592][ T3911] RBP: 00007f68b1366090 R08: ffffffffffffffff R09: 0000000000000000 [ 42.737603][ T3911] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 42.737614][ T3911] R13: 00007f68b2b76128 R14: 00007f68b2b76090 R15: 00007fff9fa11b68 [ 42.737703][ T3911] [ 43.001596][ T3914] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 43.008320][ T3914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.015838][ T3914] vhci_hcd vhci_hcd.0: Device attached [ 43.057353][ T29] audit: type=1326 audit(1764147342.189:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 43.080619][ T29] audit: type=1326 audit(1764147342.189:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 43.103843][ T29] audit: type=1326 audit(1764147342.189:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 43.135410][ T29] audit: type=1326 audit(1764147342.189:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 43.143883][ T3913] loop2: detected capacity change from 0 to 512 [ 43.158715][ T29] audit: type=1326 audit(1764147342.189:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 43.188412][ T29] audit: type=1326 audit(1764147342.189:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ae0d4f783 code=0x7ffc0000 [ 43.211504][ T29] audit: type=1326 audit(1764147342.199:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ae0d4e1ff code=0x7ffc0000 [ 43.234702][ T29] audit: type=1326 audit(1764147342.219:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6ae0d4f7d7 code=0x7ffc0000 [ 43.412325][ T3401] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 43.426385][ T3916] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 43.432502][ T29] audit: type=1326 audit(1764147342.279:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ae0d4df90 code=0x7ffc0000 [ 43.459353][ T59] vhci_hcd: stop threads [ 43.463664][ T59] vhci_hcd: release socket [ 43.468089][ T59] vhci_hcd: disconnect device [ 43.521874][ T3913] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.134: corrupted xattr block 95: invalid header [ 43.560953][ T3913] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 43.575004][ T3922] __nla_validate_parse: 5 callbacks suppressed [ 43.575019][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 43.599643][ T3913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.134: bg 0: block 7: invalid block bitmap [ 43.619821][ T3922] veth0_macvtap: left promiscuous mode [ 43.627454][ T3913] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 43.640964][ T3913] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.134: invalid indirect mapped block 69888 (level 2) [ 43.663244][ T3913] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.134: corrupted xattr block 95: invalid header [ 43.687009][ T3913] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 43.703171][ T3913] EXT4-fs (loop2): 1 orphan inode deleted [ 43.713590][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.750475][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.801430][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 43.827235][ T3924] veth0_macvtap: left promiscuous mode [ 44.051429][ T3930] bond0: (slave bond_slave_0): Releasing backup interface [ 44.066121][ T3930] bond0: (slave bond_slave_1): Releasing backup interface [ 44.077601][ T3930] team0: Port device team_slave_0 removed [ 44.091273][ T3930] team0: Port device team_slave_1 removed [ 44.093083][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.105056][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.137647][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.137664][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.194371][ T3933] team0: Mode changed to "loadbalance" [ 44.286468][ T3941] loop1: detected capacity change from 0 to 2048 [ 44.296206][ T3934] @: renamed from vlan0 (while UP) [ 44.384106][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.385929][ T3941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 44.456856][ T3948] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.144'. [ 44.490137][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.587187][ T3957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 44.592344][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 44.644072][ T3963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.148'. [ 44.673936][ T3968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 44.952090][ T3978] xt_policy: output policy not valid in PREROUTING and INPUT [ 45.069711][ T3989] loop4: detected capacity change from 0 to 1024 [ 45.084099][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.111725][ T3989] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 45.603038][ T4006] net_ratelimit: 9 callbacks suppressed [ 45.603054][ T4006] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 45.862184][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 45.965400][ T4020] loop0: detected capacity change from 0 to 2048 [ 45.972724][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.023445][ T4020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.040811][ T4020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.168'. [ 46.124535][ T4027] SELinux: policydb version 1287729864 does not match my version range 15-35 [ 46.150056][ T4027] SELinux: failed to load policy [ 46.189676][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.216315][ T4029] loop2: detected capacity change from 0 to 128 [ 46.432442][ T4039] netlink: zone id is out of range [ 46.437797][ T4039] netlink: zone id is out of range [ 46.446545][ T4039] netlink: zone id is out of range [ 46.452943][ T4039] netlink: zone id is out of range [ 46.462598][ T4039] netlink: zone id is out of range [ 46.521320][ T4046] loop4: detected capacity change from 0 to 512 [ 46.525750][ T4039] netlink: set zone limit has 8 unknown bytes [ 46.540892][ T4048] xt_policy: output policy not valid in PREROUTING and INPUT [ 46.561752][ T4046] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.571624][ T4046] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.584782][ T4046] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.178: corrupted inode contents [ 46.597728][ T4046] EXT4-fs (loop4): Remounting filesystem read-only [ 46.604864][ T4046] EXT4-fs (loop4): 1 truncate cleaned up [ 46.610899][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.621487][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.632342][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.660742][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.702261][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.775718][ T4063] loop4: detected capacity change from 0 to 2048 [ 46.838148][ T4063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.073373][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.169387][ T4077] pimreg: entered allmulticast mode [ 47.182813][ T4076] pimreg: left allmulticast mode [ 47.271427][ T4084] xt_policy: output policy not valid in PREROUTING and INPUT [ 47.286256][ T4085] loop0: detected capacity change from 0 to 1024 [ 47.420001][ T4085] EXT4-fs: Ignoring removed orlov option [ 47.429583][ T4085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.631413][ T4085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.658617][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 47.658630][ T29] audit: type=1400 audit(1764147346.789:1014): avc: denied { read open } for pid=4083 comm="syz.0.191" path="/36/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.774327][ T29] audit: type=1400 audit(1764147346.839:1015): avc: denied { write } for pid=4083 comm="syz.0.191" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.244557][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.284908][ T4105] loop0: detected capacity change from 0 to 2048 [ 48.314152][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.398837][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.449321][ T29] audit: type=1326 audit(1764147347.569:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.449327][ T3401] usb 3-1: enqueue for inactive port 0 [ 48.449353][ T3401] usb 3-1: enqueue for inactive port 0 [ 48.483719][ T29] audit: type=1326 audit(1764147347.569:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.507062][ T29] audit: type=1326 audit(1764147347.569:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.530481][ T29] audit: type=1326 audit(1764147347.569:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.553920][ T29] audit: type=1326 audit(1764147347.569:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.577416][ T29] audit: type=1326 audit(1764147347.569:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.577674][ T3401] vhci_hcd: vhci_device speed not set [ 48.600802][ T29] audit: type=1326 audit(1764147347.569:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.629454][ T29] audit: type=1326 audit(1764147347.569:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 48.697008][ T4126] __nla_validate_parse: 10 callbacks suppressed [ 48.697022][ T4126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'. [ 48.794749][ T4125] pimreg: entered allmulticast mode [ 48.801270][ T4124] pimreg: left allmulticast mode [ 48.815027][ T4126] vhci_hcd: default hub control req: 8014 v0301 i0000 l0 [ 48.926397][ T4145] loop3: detected capacity change from 0 to 128 [ 48.940013][ T4145] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.952405][ T4145] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.970093][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.001934][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.273753][ T4165] loop2: detected capacity change from 0 to 512 [ 49.284850][ T4162] loop4: detected capacity change from 0 to 512 [ 49.296195][ T4165] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.304546][ T4165] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.313678][ T4165] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.212: Failed to acquire dquot type 1 [ 49.325631][ T4165] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.212: bg 0: block 40: padding at end of block bitmap is not set [ 49.342000][ T4165] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 49.349858][ T4162] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 49.358792][ T4162] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.361181][ T4165] EXT4-fs (loop2): 1 truncate cleaned up [ 49.371517][ T4165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.385376][ T4162] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.210: corrupted inode contents [ 49.397642][ T4162] EXT4-fs (loop4): Remounting filesystem read-only [ 49.404259][ T4162] EXT4-fs (loop4): 1 truncate cleaned up [ 49.419282][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.429857][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.440941][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.459329][ T41] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.469973][ T4162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.494794][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.505152][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.549915][ T4172] Unsupported ieee802154 address type: 0 [ 49.610785][ T4181] loop3: detected capacity change from 0 to 512 [ 49.618985][ T4181] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.627176][ T4181] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.634232][ T4181] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.218: Failed to acquire dquot type 1 [ 49.646424][ T4181] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.218: bg 0: block 40: padding at end of block bitmap is not set [ 49.660776][ T4181] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 49.672117][ T4181] EXT4-fs (loop3): 1 truncate cleaned up [ 49.678287][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.718390][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.800035][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.224'. [ 49.950151][ T4208] Unsupported ieee802154 address type: 0 [ 49.983922][ T4198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'. [ 50.009020][ T4216] FAULT_INJECTION: forcing a failure. [ 50.009020][ T4216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.022144][ T4216] CPU: 0 UID: 0 PID: 4216 Comm: syz.2.231 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.022213][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.022224][ T4216] Call Trace: [ 50.022230][ T4216] [ 50.022237][ T4216] __dump_stack+0x1d/0x30 [ 50.022331][ T4216] dump_stack_lvl+0xe8/0x140 [ 50.022350][ T4216] dump_stack+0x15/0x1b [ 50.022366][ T4216] should_fail_ex+0x265/0x280 [ 50.022471][ T4216] should_fail+0xb/0x20 [ 50.022486][ T4216] should_fail_usercopy+0x1a/0x20 [ 50.022504][ T4216] strncpy_from_user+0x25/0x230 [ 50.022528][ T4216] ? kmem_cache_alloc_noprof+0x242/0x480 [ 50.022570][ T4216] ? getname_flags+0x80/0x3b0 [ 50.022708][ T4216] getname_flags+0xae/0x3b0 [ 50.022737][ T4216] __x64_sys_renameat2+0x6c/0x90 [ 50.022766][ T4216] x64_sys_call+0x3f9/0x3000 [ 50.022791][ T4216] do_syscall_64+0xd2/0x200 [ 50.022863][ T4216] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.022888][ T4216] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.022922][ T4216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.022983][ T4216] RIP: 0033:0x7f6ae0d4f749 [ 50.022997][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.023014][ T4216] RSP: 002b:00007f6adf7af038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 50.023082][ T4216] RAX: ffffffffffffffda RBX: 00007f6ae0fa5fa0 RCX: 00007f6ae0d4f749 [ 50.023094][ T4216] RDX: ffffffffffffff9c RSI: 0000200000000600 RDI: ffffffffffffff9c [ 50.023105][ T4216] RBP: 00007f6adf7af090 R08: 0000000000000000 R09: 0000000000000000 [ 50.023116][ T4216] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 50.023127][ T4216] R13: 00007f6ae0fa6038 R14: 00007f6ae0fa5fa0 R15: 00007fffae5ed8a8 [ 50.023145][ T4216] [ 50.098094][ T4217] process 'syz.3.230' launched '/dev/fd/7' with NULL argv: empty string added [ 50.269269][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 50.298167][ T4231] loop1: detected capacity change from 0 to 512 [ 50.305535][ T4231] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 50.313603][ T4231] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.321030][ T4231] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.234: Failed to acquire dquot type 1 [ 50.333309][ T4231] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.234: bg 0: block 40: padding at end of block bitmap is not set [ 50.348333][ T4231] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 50.358764][ T4210] lo speed is unknown, defaulting to 1000 [ 50.364984][ T4210] lo speed is unknown, defaulting to 1000 [ 50.371371][ T4210] lo speed is unknown, defaulting to 1000 [ 50.377557][ T4210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.390768][ T4231] EXT4-fs (loop1): 1 truncate cleaned up [ 50.397323][ T4210] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.407165][ T4231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.435250][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.456572][ T4210] lo speed is unknown, defaulting to 1000 [ 50.462880][ T4210] lo speed is unknown, defaulting to 1000 [ 50.469044][ T4210] lo speed is unknown, defaulting to 1000 [ 50.475364][ T4210] lo speed is unknown, defaulting to 1000 [ 50.483613][ T4210] lo speed is unknown, defaulting to 1000 [ 50.490253][ T4210] lo speed is unknown, defaulting to 1000 [ 50.525711][ T4240] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.235'. [ 50.544581][ T4240] netlink: zone id is out of range [ 50.552052][ T4240] netlink: zone id is out of range [ 50.564520][ T4240] netlink: zone id is out of range [ 50.614919][ T4251] loop0: detected capacity change from 0 to 512 [ 50.624591][ T4240] net_ratelimit: 2 callbacks suppressed [ 50.624630][ T4240] netlink: set zone limit has 8 unknown bytes [ 50.629295][ T4251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.688470][ T4251] EXT4-fs (loop0): 1 truncate cleaned up [ 50.694802][ T4251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.342662][ T4293] netlink: 'syz.2.254': attribute type 10 has an invalid length. [ 51.347301][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 51.349047][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 51.431865][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.568085][ T4296] pimreg: entered allmulticast mode [ 51.573933][ T4295] pimreg: left allmulticast mode [ 51.907860][ T4309] lo speed is unknown, defaulting to 1000 [ 51.959812][ T4318] loop0: detected capacity change from 0 to 2048 [ 52.045642][ T4318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.064840][ T4318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.263'. [ 52.181765][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 52.193832][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.204909][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 52.361591][ T4329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.266'. [ 52.371848][ T4335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'. [ 52.500470][ T4344] loop0: detected capacity change from 0 to 128 [ 52.510137][ T4344] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.523308][ T4344] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.617085][ T4350] @: renamed from vlan0 (while UP) [ 52.669086][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 52.669101][ T29] audit: type=1326 audit(1764147351.799:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669167][ T29] audit: type=1326 audit(1764147351.799:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669278][ T29] audit: type=1326 audit(1764147351.799:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669353][ T29] audit: type=1326 audit(1764147351.799:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669376][ T29] audit: type=1326 audit(1764147351.799:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669450][ T29] audit: type=1326 audit(1764147351.799:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669478][ T29] audit: type=1326 audit(1764147351.799:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669505][ T29] audit: type=1326 audit(1764147351.799:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669595][ T29] audit: type=1326 audit(1764147351.799:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.669618][ T29] audit: type=1326 audit(1764147351.799:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9716e4f749 code=0x7ffc0000 [ 52.823161][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.994907][ T4358] loop1: detected capacity change from 0 to 512 [ 52.996171][ T4358] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.055254][ T4361] loop0: detected capacity change from 0 to 2048 [ 53.056967][ T4358] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.057410][ T4358] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.276: Failed to acquire dquot type 1 [ 53.057829][ T4358] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.276: bg 0: block 40: padding at end of block bitmap is not set [ 53.058012][ T4358] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 53.058174][ T4358] EXT4-fs (loop1): 1 truncate cleaned up [ 53.058820][ T4358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.069297][ T4361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.099535][ T4367] loop4: detected capacity change from 0 to 589 [ 53.188108][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.208482][ T4366] lo speed is unknown, defaulting to 1000 [ 53.261255][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.286439][ T4380] loop0: detected capacity change from 0 to 1024 [ 53.310282][ T4366] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 53.321291][ T4380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.720146][ T4407] lo speed is unknown, defaulting to 1000 [ 53.735144][ T4408] __nla_validate_parse: 6 callbacks suppressed [ 53.735158][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 54.150560][ T4418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 54.235557][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.295814][ T4431] pimreg: entered allmulticast mode [ 54.296269][ T4428] pimreg: left allmulticast mode [ 54.340672][ T4437] FAULT_INJECTION: forcing a failure. [ 54.340672][ T4437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.340753][ T4437] CPU: 1 UID: 0 PID: 4437 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.340775][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.340785][ T4437] Call Trace: [ 54.340792][ T4437] [ 54.340799][ T4437] __dump_stack+0x1d/0x30 [ 54.340876][ T4437] dump_stack_lvl+0xe8/0x140 [ 54.340924][ T4437] dump_stack+0x15/0x1b [ 54.340944][ T4437] should_fail_ex+0x265/0x280 [ 54.340971][ T4437] should_fail+0xb/0x20 [ 54.340985][ T4437] should_fail_usercopy+0x1a/0x20 [ 54.341062][ T4437] _copy_from_iter+0xd2/0xe80 [ 54.341081][ T4437] ? __build_skb_around+0x1ab/0x200 [ 54.341140][ T4437] ? __alloc_skb+0x223/0x320 [ 54.341164][ T4437] netlink_sendmsg+0x471/0x6b0 [ 54.341219][ T4437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.341235][ T4437] __sock_sendmsg+0x145/0x180 [ 54.341256][ T4437] ____sys_sendmsg+0x31e/0x4e0 [ 54.341273][ T4437] ___sys_sendmsg+0x17b/0x1d0 [ 54.341297][ T4437] __x64_sys_sendmsg+0xd4/0x160 [ 54.341320][ T4437] x64_sys_call+0x191e/0x3000 [ 54.341338][ T4437] do_syscall_64+0xd2/0x200 [ 54.341360][ T4437] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.341383][ T4437] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.341466][ T4437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.341499][ T4437] RIP: 0033:0x7f6ae0d4f749 [ 54.341516][ T4437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.341530][ T4437] RSP: 002b:00007f6adf7af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.341546][ T4437] RAX: ffffffffffffffda RBX: 00007f6ae0fa5fa0 RCX: 00007f6ae0d4f749 [ 54.341563][ T4437] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 54.341594][ T4437] RBP: 00007f6adf7af090 R08: 0000000000000000 R09: 0000000000000000 [ 54.341604][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.341615][ T4437] R13: 00007f6ae0fa6038 R14: 00007f6ae0fa5fa0 R15: 00007fffae5ed8a8 [ 54.341629][ T4437] [ 54.633714][ T4453] loop4: detected capacity change from 0 to 512 [ 54.641598][ T4453] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.641703][ T4453] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.660358][ T4453] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.306: Failed to acquire dquot type 1 [ 54.667483][ T4453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.306: bg 0: block 40: padding at end of block bitmap is not set [ 54.694452][ T4453] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 54.709427][ T4453] EXT4-fs (loop4): 1 truncate cleaned up [ 54.717258][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 54.718923][ T4453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.760085][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.771239][ T4457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.307'. [ 54.923229][ T4462] loop4: detected capacity change from 0 to 512 [ 54.973132][ T4462] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.990196][ T4462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.000369][ T4462] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.309: corrupted inode contents [ 55.000584][ T4462] EXT4-fs (loop4): Remounting filesystem read-only [ 55.000652][ T4462] EXT4-fs (loop4): 1 truncate cleaned up [ 55.000791][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.035061][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.035101][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.046316][ T4462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.059686][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.136785][ T4471] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 55.154503][ T4471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.312'. [ 55.211560][ T4479] pimreg: entered allmulticast mode [ 55.217538][ T4478] pimreg: left allmulticast mode [ 55.378085][ T4502] loop0: detected capacity change from 0 to 512 [ 55.378881][ T4499] bond1: option all_slaves_active: invalid value (7) [ 55.403668][ T4499] bond1 (unregistering): Released all slaves [ 55.414111][ T4502] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.433952][ T4502] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.459928][ T4502] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.320: Failed to acquire dquot type 1 [ 55.473356][ T4502] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.320: bg 0: block 40: padding at end of block bitmap is not set [ 55.505116][ T4502] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 55.523485][ T4502] EXT4-fs (loop0): 1 truncate cleaned up [ 55.529644][ T4502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.582282][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.607151][ T4516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 55.616168][ T4516] unsupported nla_type 24929 [ 55.730244][ T4522] @: renamed from vlan0 (while UP) [ 56.112167][ T4533] pimreg: entered allmulticast mode [ 56.113868][ T4532] pimreg: left allmulticast mode [ 56.315198][ T4539] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.331'. [ 56.315383][ T4539] netlink: zone id is out of range [ 56.315404][ T4539] netlink: zone id is out of range [ 56.315697][ T4539] netlink: zone id is out of range [ 56.315978][ T4539] netlink: zone id is out of range [ 56.318728][ T4539] netlink: zone id is out of range [ 56.416572][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 56.433957][ T4539] netlink: set zone limit has 8 unknown bytes [ 56.493104][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.333'. [ 56.564583][ T4550] netlink: 'syz.4.334': attribute type 10 has an invalid length. [ 56.572380][ T4550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.334'. [ 56.589926][ T4546] lo speed is unknown, defaulting to 1000 [ 56.605357][ T4550] batadv0: entered promiscuous mode [ 56.610610][ T4550] batadv0: entered allmulticast mode [ 56.617913][ T4550] bridge0: port 3(batadv0) entered blocking state [ 56.624489][ T4550] bridge0: port 3(batadv0) entered disabled state [ 56.648877][ T4553] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 56.671726][ T4550] bridge0: port 3(batadv0) entered blocking state [ 56.678266][ T4550] bridge0: port 3(batadv0) entered forwarding state [ 56.694568][ T4549] lo speed is unknown, defaulting to 1000 [ 56.703489][ T4553] batadv0: entered promiscuous mode [ 56.708823][ T4553] batadv0: entered allmulticast mode [ 56.716533][ T4553] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 56.794228][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4562 comm=syz.2.338 [ 57.136729][ T4590] loop4: detected capacity change from 0 to 512 [ 57.159174][ T4590] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.169685][ T4590] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.177356][ T4590] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.349: Failed to acquire dquot type 1 [ 57.179671][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 57.197784][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 57.229432][ T4590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.349: bg 0: block 40: padding at end of block bitmap is not set [ 57.249676][ T4590] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 57.308208][ T4590] EXT4-fs (loop4): 1 truncate cleaned up [ 57.322850][ T4590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.366583][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.574844][ T4624] loop3: detected capacity change from 0 to 512 [ 57.584607][ T4619] netlink: 'syz.0.359': attribute type 7 has an invalid length. [ 57.596763][ T4619] loop0: detected capacity change from 0 to 512 [ 57.603780][ T4619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.624647][ T4624] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.632846][ T4624] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.640760][ T4619] EXT4-fs (loop0): 1 orphan inode deleted [ 57.646523][ T4619] EXT4-fs (loop0): 1 truncate cleaned up [ 57.653710][ T4624] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.361: corrupted inode contents [ 57.665966][ T4619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.679226][ T4624] EXT4-fs (loop3): Remounting filesystem read-only [ 57.685931][ T4624] EXT4-fs (loop3): 1 truncate cleaned up [ 57.692250][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.702842][ T12] __quota_error: 195 callbacks suppressed [ 57.702853][ T12] Quota error (device loop3): write_blk: dquota write failed [ 57.715938][ T12] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 57.725998][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.736517][ T12] Quota error (device loop3): write_blk: dquota write failed [ 57.743901][ T12] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 57.768146][ T4619] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ·iˆëž§±û<@/LIþÙ孶ߦã«o¹2bÆvÙŽ2†Gï–ÝĉèÝžÚ6ˆ”®nÖ¬ûW5¤-sÌ\<{#ê¹ÊƒchkÛ6iD²¡®Ð¹¹6Ÿ(­Â;¹›šH¢×˜Žjõó‹-å0¥Ž3óðý$Ø}>›O:äÓîåñ¥k”çªÐ¬žƒÈkñ:#»& o#…sÔr¥-<Ð' [ 57.788451][ T29] audit: type=1400 audit(1764147356.899:1588): avc: denied { remount } for pid=4618 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.808904][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.819084][ T12] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 57.828299][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.847595][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.863082][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.891318][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.936167][ T29] audit: type=1326 audit(1764147357.069:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 57.962803][ T29] audit: type=1326 audit(1764147357.099:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 57.986340][ T29] audit: type=1326 audit(1764147357.099:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 58.275435][ T4661] xt_policy: output policy not valid in PREROUTING and INPUT [ 58.380161][ T4668] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 58.395706][ T4668] team0: Port device geneve1 added [ 58.405290][ T4671] loop3: detected capacity change from 0 to 2048 [ 58.436701][ T4671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.466053][ T4678] loop0: detected capacity change from 0 to 2048 [ 58.536521][ T4685] loop4: detected capacity change from 0 to 512 [ 58.552736][ T4678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.572217][ T4685] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.580804][ T4685] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.587650][ T4685] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.379: Failed to acquire dquot type 1 [ 58.619119][ T4685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.379: bg 0: block 40: padding at end of block bitmap is not set [ 58.658433][ T4685] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 58.667615][ T4685] EXT4-fs (loop4): 1 truncate cleaned up [ 58.704454][ T4697] loop3: detected capacity change from 0 to 8192 [ 58.733778][ T4704] loop3: detected capacity change from 0 to 128 [ 58.765957][ T4708] pimreg: entered allmulticast mode [ 58.778825][ T4707] pimreg: left allmulticast mode [ 58.784555][ T4710] loop4: detected capacity change from 0 to 512 [ 58.800888][ T4711] syz.3.385: attempt to access beyond end of device [ 58.800888][ T4711] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 58.814535][ T4711] syz.3.385: attempt to access beyond end of device [ 58.814535][ T4711] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 58.818655][ T4710] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.828254][ T4711] syz.3.385: attempt to access beyond end of device [ 58.828254][ T4711] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 58.859350][ T4711] syz.3.385: attempt to access beyond end of device [ 58.859350][ T4711] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 58.860308][ T4710] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.872806][ T4711] syz.3.385: attempt to access beyond end of device [ 58.872806][ T4711] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 58.892488][ T4711] syz.3.385: attempt to access beyond end of device [ 58.892488][ T4711] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 58.906168][ T4711] syz.3.385: attempt to access beyond end of device [ 58.906168][ T4711] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 58.909072][ T4710] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.387: corrupted inode contents [ 58.921215][ T4711] syz.3.385: attempt to access beyond end of device [ 58.921215][ T4711] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 58.944563][ T4711] syz.3.385: attempt to access beyond end of device [ 58.944563][ T4711] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 58.957906][ T4711] syz.3.385: attempt to access beyond end of device [ 58.957906][ T4711] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 58.980953][ T4710] EXT4-fs (loop4): Remounting filesystem read-only [ 59.014145][ T4719] __nla_validate_parse: 9 callbacks suppressed [ 59.014162][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 59.033557][ T4721] FAULT_INJECTION: forcing a failure. [ 59.033557][ T4721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.037807][ T4710] EXT4-fs (loop4): 1 truncate cleaned up [ 59.046661][ T4721] CPU: 0 UID: 0 PID: 4721 Comm: syz.0.390 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.046685][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.046697][ T4721] Call Trace: [ 59.046705][ T4721] [ 59.046722][ T4721] __dump_stack+0x1d/0x30 [ 59.046745][ T4721] dump_stack_lvl+0xe8/0x140 [ 59.046766][ T4721] dump_stack+0x15/0x1b [ 59.046784][ T4721] should_fail_ex+0x265/0x280 [ 59.046816][ T4721] should_fail+0xb/0x20 [ 59.046880][ T4721] should_fail_usercopy+0x1a/0x20 [ 59.046902][ T4721] _copy_from_iter+0xd2/0xe80 [ 59.046924][ T4721] ? __build_skb_around+0x1ab/0x200 [ 59.046955][ T4721] ? __alloc_skb+0x223/0x320 [ 59.046988][ T4721] netlink_sendmsg+0x471/0x6b0 [ 59.047011][ T4721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.047032][ T4721] __sock_sendmsg+0x145/0x180 [ 59.047057][ T4721] ____sys_sendmsg+0x31e/0x4e0 [ 59.047105][ T4721] ___sys_sendmsg+0x17b/0x1d0 [ 59.047139][ T4721] __x64_sys_sendmsg+0xd4/0x160 [ 59.047161][ T4721] x64_sys_call+0x191e/0x3000 [ 59.047183][ T4721] do_syscall_64+0xd2/0x200 [ 59.047205][ T4721] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.047251][ T4721] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.047283][ T4721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.047305][ T4721] RIP: 0033:0x7f9716e4f749 [ 59.047321][ T4721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.047394][ T4721] RSP: 002b:00007f97158af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.047413][ T4721] RAX: ffffffffffffffda RBX: 00007f97170a5fa0 RCX: 00007f9716e4f749 [ 59.047426][ T4721] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 59.047438][ T4721] RBP: 00007f97158af090 R08: 0000000000000000 R09: 0000000000000000 [ 59.047451][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.047463][ T4721] R13: 00007f97170a6038 R14: 00007f97170a5fa0 R15: 00007ffd38306708 [ 59.047559][ T4721] [ 59.067485][ T4723] pim6reg: entered allmulticast mode [ 59.149584][ T4727] xt_policy: output policy not valid in PREROUTING and INPUT [ 59.154045][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.276321][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.297789][ T4732] loop1: detected capacity change from 0 to 512 [ 59.304998][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.316050][ T4732] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.324100][ T4732] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.331413][ T4732] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.395: Failed to acquire dquot type 1 [ 59.351213][ T4732] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.395: bg 0: block 40: padding at end of block bitmap is not set [ 59.393203][ T4732] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 59.403655][ T4732] EXT4-fs (loop1): 1 truncate cleaned up [ 59.446749][ T4749] loop1: detected capacity change from 0 to 1024 [ 59.447387][ T4723] pim6reg: left allmulticast mode [ 59.485048][ T4754] loop0: detected capacity change from 0 to 1024 [ 59.496113][ T4754] EXT4-fs: Ignoring removed orlov option [ 59.499357][ T4749] EXT4-fs: Ignoring removed orlov option [ 59.509929][ T4754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.517084][ T4749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.548678][ T4758] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.400'. [ 59.562524][ T4758] netlink: zone id is out of range [ 59.567816][ T4758] netlink: zone id is out of range [ 59.573696][ T4758] netlink: zone id is out of range [ 59.687947][ T4772] xt_policy: output policy not valid in PREROUTING and INPUT [ 59.932988][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 59.956198][ T4785] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 59.965702][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 59.999929][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 60.013008][ T4792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'. [ 60.056434][ T4794] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.415'. [ 60.167093][ T4800] lo speed is unknown, defaulting to 1000 [ 60.287148][ T4810] lo speed is unknown, defaulting to 1000 [ 60.339354][ T4800] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 60.345978][ T4800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.353517][ T4800] vhci_hcd vhci_hcd.0: Device attached [ 60.374797][ T4810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.642307][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 60.878336][ T4828] vhci_hcd: connection reset by peer [ 60.889691][ T41] vhci_hcd: stop threads [ 60.893967][ T41] vhci_hcd: release socket [ 60.898432][ T41] vhci_hcd: disconnect device [ 60.940067][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 61.078551][ T4842] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 61.357501][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 61.436201][ T4853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'. [ 62.611508][ T4887] lo speed is unknown, defaulting to 1000 [ 63.366423][ T4915] pimreg: entered allmulticast mode [ 63.399970][ T4914] pimreg: left allmulticast mode [ 63.452454][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 63.452470][ T29] audit: type=1326 audit(1764147362.589:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.460296][ T4922] loop0: detected capacity change from 0 to 512 [ 63.482290][ T29] audit: type=1326 audit(1764147362.589:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.512478][ T29] audit: type=1326 audit(1764147362.649:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.535892][ T29] audit: type=1326 audit(1764147362.649:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.559257][ T29] audit: type=1326 audit(1764147362.649:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.583158][ T29] audit: type=1326 audit(1764147362.699:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.606481][ T29] audit: type=1326 audit(1764147362.699:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.629812][ T29] audit: type=1326 audit(1764147362.699:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.654687][ T29] audit: type=1326 audit(1764147362.699:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.678436][ T29] audit: type=1326 audit(1764147362.699:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b291f749 code=0x7ffc0000 [ 63.729680][ T4922] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 63.737821][ T4922] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.746647][ T4922] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.449: corrupted inode contents [ 63.758605][ T4922] EXT4-fs (loop0): Remounting filesystem read-only [ 63.765447][ T4922] EXT4-fs (loop0): 1 truncate cleaned up [ 63.771160][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.781739][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.809377][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.849538][ T4923] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 64.448852][ T4945] loop1: detected capacity change from 0 to 512 [ 64.472891][ T4945] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.492926][ T4945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.509679][ T4945] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.455: Failed to acquire dquot type 1 [ 64.533970][ T4945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.455: bg 0: block 40: padding at end of block bitmap is not set [ 64.588777][ T4945] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 64.619613][ T4945] EXT4-fs (loop1): 1 truncate cleaned up [ 64.780056][ T4954] __nla_validate_parse: 2 callbacks suppressed [ 64.780072][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 65.255356][ T4978] loop4: detected capacity change from 0 to 512 [ 65.548787][ T4988] lo speed is unknown, defaulting to 1000 [ 65.596436][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 65.671387][ T5005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.473'. [ 65.719331][ T36] usb 1-1: enqueue for inactive port 0 [ 65.724883][ T36] usb 1-1: enqueue for inactive port 0 [ 65.765492][ T5013] xt_policy: output policy not valid in PREROUTING and INPUT [ 65.799349][ T36] vhci_hcd: vhci_device speed not set [ 65.896156][ T5022] lo speed is unknown, defaulting to 1000 [ 65.955310][ T5026] loop1: detected capacity change from 0 to 512 [ 65.970796][ T5026] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.978890][ T5026] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.986736][ T5026] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.482: corrupted inode contents [ 66.005446][ T5026] EXT4-fs (loop1): Remounting filesystem read-only [ 66.012244][ T5026] EXT4-fs (loop1): 1 truncate cleaned up [ 66.018107][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.028691][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.039822][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 66.050675][ T5026] EXT4-fs mount: 18 callbacks suppressed [ 66.050692][ T5026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.093077][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.113232][ T5033] loop4: detected capacity change from 0 to 2048 [ 66.132377][ T5033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.147704][ T5033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.485'. [ 66.221806][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.281270][ T5047] pimreg: entered allmulticast mode [ 66.287115][ T5046] pimreg: left allmulticast mode [ 66.308279][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 66.325499][ T5051] loop4: detected capacity change from 0 to 512 [ 66.363327][ T5051] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.363445][ T5051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.390074][ T5051] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.488: corrupted inode contents [ 66.390355][ T5051] EXT4-fs (loop4): Remounting filesystem read-only [ 66.390451][ T5051] EXT4-fs (loop4): 1 truncate cleaned up [ 66.390516][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.390538][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.390690][ T41] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 66.391404][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.405549][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.419727][ T5060] lo speed is unknown, defaulting to 1000 [ 66.532868][ T5063] loop4: detected capacity change from 0 to 512 [ 66.534146][ T5063] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.534268][ T5063] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.542585][ T5066] loop3: detected capacity change from 0 to 1024 [ 66.569511][ T5063] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.495: Failed to acquire dquot type 1 [ 66.571603][ T5063] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.495: bg 0: block 40: padding at end of block bitmap is not set [ 66.619325][ T5063] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 66.619699][ T5063] EXT4-fs (loop4): 1 truncate cleaned up [ 66.620092][ T5063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.653427][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.688987][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.767728][ T5083] xt_policy: output policy not valid in PREROUTING and INPUT [ 67.016015][ T5091] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.503'. [ 67.016174][ T5091] net_ratelimit: 9 callbacks suppressed [ 67.016203][ T5091] netlink: zone id is out of range [ 67.016224][ T5091] netlink: zone id is out of range [ 67.016458][ T5091] netlink: zone id is out of range [ 67.016689][ T5091] netlink: zone id is out of range [ 67.023106][ T5091] netlink: zone id is out of range [ 67.099489][ T5091] netlink: set zone limit has 8 unknown bytes [ 67.375261][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.450727][ T5102] loop1: detected capacity change from 0 to 1024 [ 67.479925][ T5102] EXT4-fs: Ignoring removed orlov option [ 67.498047][ T5102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.511133][ T5102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.709829][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.862409][ T5123] pimreg: entered allmulticast mode [ 67.868193][ T5120] pimreg: left allmulticast mode [ 68.043314][ T5137] loop0: detected capacity change from 0 to 164 [ 68.058082][ T5137] bio_check_eod: 102 callbacks suppressed [ 68.058096][ T5137] syz.0.520: attempt to access beyond end of device [ 68.058096][ T5137] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 68.109720][ T5137] syz.0.520: attempt to access beyond end of device [ 68.109720][ T5137] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.199093][ T5139] lo speed is unknown, defaulting to 1000 [ 68.463497][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 68.463511][ T29] audit: type=1326 audit(1764147367.599:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.469893][ T29] audit: type=1326 audit(1764147367.599:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.469955][ T29] audit: type=1326 audit(1764147367.599:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.469979][ T29] audit: type=1326 audit(1764147367.599:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.470006][ T29] audit: type=1326 audit(1764147367.599:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.470181][ T29] audit: type=1326 audit(1764147367.599:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.470258][ T29] audit: type=1326 audit(1764147367.599:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.470279][ T29] audit: type=1326 audit(1764147367.599:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.470375][ T29] audit: type=1326 audit(1764147367.599:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.470398][ T29] audit: type=1326 audit(1764147367.599:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 68.651291][ T5162] loop1: detected capacity change from 0 to 128 [ 68.651478][ T5162] vfat: Unknown parameter 'sched_switch' [ 68.845572][ T5171] Unsupported ieee802154 address type: 0 [ 68.886564][ T5169] loop3: detected capacity change from 0 to 512 [ 68.891060][ T5173] xt_policy: output policy not valid in PREROUTING and INPUT [ 68.933229][ T5169] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 68.941292][ T5169] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.963104][ T5169] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.530: corrupted inode contents [ 68.997089][ T5169] EXT4-fs (loop3): Remounting filesystem read-only [ 69.005758][ T5169] EXT4-fs (loop3): 1 truncate cleaned up [ 69.014693][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.025318][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.061358][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.073384][ T5169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.116366][ T5186] loop1: detected capacity change from 0 to 2048 [ 69.143030][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.177381][ T5193] loop3: detected capacity change from 0 to 512 [ 69.184873][ T5186] loop1: p1 < > p4 [ 69.206667][ T5193] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.217064][ T5193] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.217068][ T5186] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.268154][ T5193] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.540: corrupted inode contents [ 69.283992][ T5193] EXT4-fs (loop3): Remounting filesystem read-only [ 69.299496][ T5193] EXT4-fs (loop3): 1 truncate cleaned up [ 69.305305][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.315911][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.342450][ T5200] loop1: detected capacity change from 0 to 512 [ 69.355020][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.369078][ T5193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.397560][ T5200] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 69.405895][ T5200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.418571][ T5200] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.542: corrupted inode contents [ 69.438568][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.447800][ T5200] EXT4-fs (loop1): Remounting filesystem read-only [ 69.499518][ T5200] EXT4-fs (loop1): 1 truncate cleaned up [ 69.505301][ T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.515899][ T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.528045][ T59] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.539094][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.553847][ T5211] xt_policy: output policy not valid in PREROUTING and INPUT [ 69.569987][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.663682][ T5220] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.549'. [ 69.691628][ T5220] netlink: zone id is out of range [ 69.696916][ T5220] netlink: zone id is out of range [ 69.727492][ T5220] netlink: zone id is out of range [ 69.734756][ T5220] netlink: zone id is out of range [ 69.739134][ T5222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.550'. [ 69.917717][ T5238] FAULT_INJECTION: forcing a failure. [ 69.917717][ T5238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.930976][ T5238] CPU: 0 UID: 0 PID: 5238 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.931036][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.931049][ T5238] Call Trace: [ 69.931056][ T5238] [ 69.931064][ T5238] __dump_stack+0x1d/0x30 [ 69.931085][ T5238] dump_stack_lvl+0xe8/0x140 [ 69.931103][ T5238] dump_stack+0x15/0x1b [ 69.931122][ T5238] should_fail_ex+0x265/0x280 [ 69.931158][ T5238] should_fail+0xb/0x20 [ 69.931233][ T5238] should_fail_usercopy+0x1a/0x20 [ 69.931252][ T5238] _copy_from_user+0x1c/0xb0 [ 69.931278][ T5238] ___sys_sendmsg+0xc1/0x1d0 [ 69.931312][ T5238] __sys_sendmmsg+0x178/0x300 [ 69.931341][ T5238] __x64_sys_sendmmsg+0x57/0x70 [ 69.931392][ T5238] x64_sys_call+0x1c4a/0x3000 [ 69.931413][ T5238] do_syscall_64+0xd2/0x200 [ 69.931436][ T5238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.931487][ T5238] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.931593][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.931612][ T5238] RIP: 0033:0x7f68b291f749 [ 69.931626][ T5238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.931642][ T5238] RSP: 002b:00007f68b1387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.931663][ T5238] RAX: ffffffffffffffda RBX: 00007f68b2b75fa0 RCX: 00007f68b291f749 [ 69.931676][ T5238] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 69.931688][ T5238] RBP: 00007f68b1387090 R08: 0000000000000000 R09: 0000000000000000 [ 69.931732][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.931750][ T5238] R13: 00007f68b2b76038 R14: 00007f68b2b75fa0 R15: 00007fff9fa11b68 [ 69.931768][ T5238] [ 69.932889][ T5240] netlink: 'syz.4.557': attribute type 2 has an invalid length. [ 70.114900][ T5240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.557'. [ 70.320252][ T5246] lo speed is unknown, defaulting to 1000 [ 70.336330][ T5240] loop4: detected capacity change from 0 to 2048 [ 70.432025][ T5252] loop1: detected capacity change from 0 to 1024 [ 70.447576][ T5240] loop4: p1 < > p4 [ 70.475874][ T5240] loop4: p4 size 8388608 extends beyond EOD, truncated [ 70.541649][ T5252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.573501][ T5261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'. [ 70.672215][ T5263] loop4: detected capacity change from 0 to 1024 [ 70.679012][ T5263] EXT4-fs: Ignoring removed orlov option [ 70.679282][ T5263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.715720][ T5263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.995286][ T5274] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.567'. [ 71.188422][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.220517][ T5285] xt_policy: output policy not valid in PREROUTING and INPUT [ 71.268980][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.296405][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 71.411782][ T5302] loop0: detected capacity change from 0 to 512 [ 71.435143][ T5297] lo speed is unknown, defaulting to 1000 [ 71.450137][ T5302] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.458436][ T5302] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.512717][ T5302] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.576: corrupted inode contents [ 71.526664][ T5302] EXT4-fs (loop0): Remounting filesystem read-only [ 71.533511][ T5302] EXT4-fs (loop0): 1 truncate cleaned up [ 71.546104][ T5310] loop4: detected capacity change from 0 to 1024 [ 71.552647][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.553514][ T5310] EXT4-fs: Ignoring removed orlov option [ 71.563342][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.581451][ T5310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.592769][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.652668][ T5310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.681001][ T5302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.734565][ T5321] xt_policy: output policy not valid in PREROUTING and INPUT [ 71.763566][ T5323] loop1: detected capacity change from 0 to 1024 [ 71.775760][ T5323] EXT4-fs: Ignoring removed orlov option [ 71.788754][ T5323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.799670][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.819919][ T5326] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.583'. [ 71.944512][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.061186][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.163110][ T5348] pimreg: entered allmulticast mode [ 72.170115][ T5341] pimreg: left allmulticast mode [ 72.211238][ T5351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.590'. [ 72.256044][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.260232][ T5359] tipc: Started in network mode [ 72.270009][ T5359] tipc: Node identity ac14140f, cluster identity 4711 [ 72.276977][ T5359] tipc: New replicast peer: 255.255.255.255 [ 72.283039][ T5359] tipc: Enabled bearer , priority 10 [ 72.296183][ T5361] xt_policy: output policy not valid in PREROUTING and INPUT [ 72.329641][ T5368] loop4: detected capacity change from 0 to 512 [ 72.340812][ T5368] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.349100][ T5368] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.357240][ T5368] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.596: corrupted inode contents [ 72.370516][ T5368] EXT4-fs (loop4): Remounting filesystem read-only [ 72.377226][ T5368] EXT4-fs (loop4): 1 truncate cleaned up [ 72.383281][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.393825][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.404567][ T41] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.415642][ T5368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.445060][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.742477][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 72.845627][ T5392] lo speed is unknown, defaulting to 1000 [ 73.076878][ T5408] loop3: detected capacity change from 0 to 512 [ 73.084913][ T5408] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.093199][ T5408] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.100514][ T5408] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.606: Failed to acquire dquot type 1 [ 73.113079][ T5408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.606: bg 0: block 40: padding at end of block bitmap is not set [ 73.129191][ T5408] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 73.139629][ T5408] EXT4-fs (loop3): 1 truncate cleaned up [ 73.146010][ T5408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.169139][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.195673][ T5420] loop3: detected capacity change from 0 to 512 [ 73.211613][ T5420] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.220311][ T5420] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.228039][ T5420] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.609: corrupted inode contents [ 73.242278][ T5420] EXT4-fs (loop3): Remounting filesystem read-only [ 73.248892][ T5420] EXT4-fs (loop3): 1 truncate cleaned up [ 73.255472][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.266104][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.277294][ T41] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.288391][ T5420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.301123][ T3415] tipc: Node number set to 2886997007 [ 73.393008][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.469347][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 73.469362][ T29] audit: type=1326 audit(1764147372.599:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 73.506942][ T5433] pimreg: entered allmulticast mode [ 73.513565][ T5429] pimreg: left allmulticast mode [ 73.621592][ T5439] loop4: detected capacity change from 0 to 1024 [ 73.630793][ T5439] EXT4-fs: Ignoring removed orlov option [ 73.653646][ T5439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.676449][ T5439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.021291][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.236978][ T5458] loop3: detected capacity change from 0 to 1024 [ 74.243920][ T5458] EXT4-fs: Ignoring removed orlov option [ 74.250411][ T5458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.261457][ T5458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.708764][ T5466] lo speed is unknown, defaulting to 1000 [ 74.755167][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 75.136115][ T5476] xt_policy: output policy not valid in PREROUTING and INPUT [ 75.163032][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.165535][ T5478] pimreg: entered allmulticast mode [ 75.181201][ T5477] pimreg: left allmulticast mode [ 75.270185][ T5489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.627'. [ 75.378787][ T5498] loop0: detected capacity change from 0 to 512 [ 75.401457][ T5498] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.411730][ T5498] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.438351][ T5498] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.633: corrupted inode contents [ 75.456178][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 75.478891][ T5498] EXT4-fs (loop0): Remounting filesystem read-only [ 75.486279][ T5498] EXT4-fs (loop0): 1 truncate cleaned up [ 75.497524][ T275] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.508098][ T275] Quota error (device loop0): write_blk: dquota write failed [ 75.515513][ T275] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 75.515869][ T5508] loop4: detected capacity change from 0 to 2048 [ 75.525517][ T275] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.525540][ T275] Quota error (device loop0): write_blk: dquota write failed [ 75.550395][ T275] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 75.560507][ T275] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 75.570607][ T275] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 75.599302][ T275] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 75.610018][ T5498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.610499][ T5508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.657090][ T5508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.636'. [ 75.675409][ T5515] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 75.685821][ T29] audit: type=1400 audit(1764147374.799:2440): avc: denied { read write } for pid=5514 comm="syz.2.638" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.709261][ T29] audit: type=1400 audit(1764147374.799:2441): avc: denied { open } for pid=5514 comm="syz.2.638" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.732596][ T29] audit: type=1400 audit(1764147374.819:2442): avc: denied { relabelto } for pid=5514 comm="syz.2.638" name="153" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 75.760315][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.832088][ T5524] loop0: detected capacity change from 0 to 2048 [ 75.864580][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.891501][ T5524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.921483][ T5524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 76.039518][ T5531] lo speed is unknown, defaulting to 1000 [ 76.073186][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 76.247136][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.563392][ T5551] loop0: detected capacity change from 0 to 1024 [ 76.582424][ T5551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.613375][ T5556] loop4: detected capacity change from 0 to 512 [ 76.678704][ T5556] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.678848][ T5556] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.680405][ T5556] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.650: corrupted inode contents [ 76.680564][ T5556] EXT4-fs (loop4): Remounting filesystem read-only [ 76.680698][ T5556] EXT4-fs (loop4): 1 truncate cleaned up [ 76.680875][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.680894][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.680916][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.681443][ T5556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.725675][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.886640][ T5562] loop4: detected capacity change from 0 to 1024 [ 76.886863][ T5562] EXT4-fs: Ignoring removed orlov option [ 76.887341][ T5562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.898012][ T5562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.930603][ T5565] loop3: detected capacity change from 0 to 1024 [ 76.930886][ T5565] EXT4-fs: Ignoring removed orlov option [ 76.931095][ T5565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.945505][ T5565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.166710][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.414178][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.426105][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.493024][ T5597] loop0: detected capacity change from 0 to 512 [ 77.504462][ T5595] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.662'. [ 77.514790][ T5595] net_ratelimit: 18 callbacks suppressed [ 77.514819][ T5595] netlink: zone id is out of range [ 77.527209][ T5595] netlink: zone id is out of range [ 77.533584][ T5597] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 77.542099][ T5597] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.548953][ T5595] netlink: zone id is out of range [ 77.557055][ T5597] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.664: corrupted inode contents [ 77.586280][ T5595] netlink: zone id is out of range [ 77.600681][ T5595] netlink: zone id is out of range [ 77.608742][ T5595] netlink: zone id is out of range [ 77.614447][ T5595] netlink: zone id is out of range [ 77.622598][ T5595] netlink: zone id is out of range [ 77.666324][ T5595] netlink: set zone limit has 8 unknown bytes [ 77.669415][ T5597] EXT4-fs (loop0): Remounting filesystem read-only [ 77.704466][ T5597] EXT4-fs (loop0): 1 truncate cleaned up [ 77.710375][ T275] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.721049][ T275] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.742115][ T275] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.770027][ T5597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.817446][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.835758][ T5618] loop3: detected capacity change from 0 to 512 [ 77.851869][ T5618] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.860200][ T5618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.868387][ T5618] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.670: corrupted inode contents [ 77.881140][ T5618] EXT4-fs (loop3): Remounting filesystem read-only [ 77.887875][ T5618] EXT4-fs (loop3): 1 truncate cleaned up [ 77.893957][ T275] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.904580][ T275] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.915330][ T275] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.946975][ T5618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.003731][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.173792][ T5633] loop0: detected capacity change from 0 to 2048 [ 78.204717][ T5633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.207366][ T5633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.674'. [ 78.240861][ T5637] loop3: detected capacity change from 0 to 1024 [ 78.241131][ T5637] EXT4-fs: inline encryption not supported [ 78.261047][ T5637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.264453][ T5637] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.388464][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.415181][ T5647] lo speed is unknown, defaulting to 1000 [ 78.496075][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 78.496090][ T29] audit: type=1326 audit(1764147377.629:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.496124][ T29] audit: type=1326 audit(1764147377.629:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.496161][ T29] audit: type=1326 audit(1764147377.629:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.496566][ T29] audit: type=1326 audit(1764147377.629:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.497276][ T29] audit: type=1326 audit(1764147377.629:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.497305][ T29] audit: type=1326 audit(1764147377.629:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.497332][ T29] audit: type=1326 audit(1764147377.629:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.497431][ T29] audit: type=1326 audit(1764147377.629:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.497456][ T29] audit: type=1326 audit(1764147377.629:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.497521][ T29] audit: type=1326 audit(1764147377.629:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f405698f749 code=0x7ffc0000 [ 78.620115][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 78.847446][ T5663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.682'. [ 79.086938][ T5679] loop3: detected capacity change from 0 to 512 [ 79.110612][ T5679] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.125827][ T5679] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.214924][ T5679] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.687: corrupted inode contents [ 79.232763][ T5679] EXT4-fs (loop3): Remounting filesystem read-only [ 79.242397][ T5679] EXT4-fs (loop3): 1 truncate cleaned up [ 79.248175][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.258852][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.265894][ T5686] loop1: detected capacity change from 0 to 1024 [ 79.278718][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.284957][ T5686] EXT4-fs: Ignoring removed orlov option [ 79.302781][ T5686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.319009][ T5679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.335135][ T5686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.347979][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.372505][ T5689] loop3: detected capacity change from 0 to 2048 [ 79.380460][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.404018][ T5689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.690'. [ 79.449766][ T5691] loop1: detected capacity change from 0 to 2048 [ 79.476633][ T5695] netlink: zone id is out of range [ 79.490206][ T5691] loop1: p1 < > p4 [ 79.494525][ T5691] loop1: p4 size 8388608 extends beyond EOD, truncated [ 79.572847][ T5700] pimreg: entered allmulticast mode [ 79.592478][ T5699] pimreg: left allmulticast mode [ 79.632223][ T5705] xt_policy: output policy not valid in PREROUTING and INPUT [ 79.685047][ T5711] loop3: detected capacity change from 0 to 1024 [ 79.692522][ T5711] EXT4-fs: inline encryption not supported [ 79.998747][ T5725] loop4: detected capacity change from 0 to 2048 [ 80.037101][ T5732] loop0: detected capacity change from 0 to 2048 [ 80.043100][ T5725] loop4: p1 < > p4 [ 80.049158][ T5725] loop4: p4 size 8388608 extends beyond EOD, truncated [ 80.173557][ T5749] pimreg: entered allmulticast mode [ 80.185416][ T5748] pimreg: left allmulticast mode [ 80.265569][ T5761] loop0: detected capacity change from 0 to 1024 [ 80.272573][ T5761] EXT4-fs: Ignoring removed orlov option [ 80.278557][ T5761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.535661][ T5774] __nla_validate_parse: 2 callbacks suppressed [ 80.535730][ T5774] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.718'. [ 80.730270][ T5784] loop0: detected capacity change from 0 to 512 [ 80.749522][ T5784] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.757517][ T5784] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.789366][ T5784] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.722: corrupted inode contents [ 80.812580][ T5784] EXT4-fs (loop0): Remounting filesystem read-only [ 80.820116][ T5784] EXT4-fs (loop0): 1 truncate cleaned up [ 80.825934][ T41] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.836477][ T41] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.847662][ T41] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 81.125841][ T5795] pimreg: entered allmulticast mode [ 81.133205][ T5794] pimreg: left allmulticast mode [ 81.213312][ T5801] loop0: detected capacity change from 0 to 512 [ 81.253821][ T5801] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 81.262165][ T5801] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.269124][ T5801] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.729: Failed to acquire dquot type 1 [ 81.287886][ T5801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.729: bg 0: block 40: padding at end of block bitmap is not set [ 81.302992][ T5801] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 81.312349][ T5801] EXT4-fs (loop0): 1 truncate cleaned up [ 81.355219][ T5806] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.730'. [ 81.468378][ T5808] lo speed is unknown, defaulting to 1000 [ 81.511811][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 81.810129][ T5819] netlink: 'syz.2.734': attribute type 2 has an invalid length. [ 81.817856][ T5819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.734'. [ 82.130895][ T5839] xt_policy: output policy not valid in PREROUTING and INPUT [ 82.208880][ T5844] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.743'. [ 82.219222][ T5841] lo speed is unknown, defaulting to 1000 [ 82.396393][ T5853] loop3: detected capacity change from 0 to 512 [ 82.406496][ T5853] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.415078][ T5853] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.422407][ T5853] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.746: Failed to acquire dquot type 1 [ 82.443409][ T5853] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.746: bg 0: block 40: padding at end of block bitmap is not set [ 82.460140][ T5853] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 82.471349][ T5853] EXT4-fs (loop3): 1 truncate cleaned up [ 82.509704][ T5860] netlink: 'syz.3.749': attribute type 2 has an invalid length. [ 82.517372][ T5860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.749'. [ 82.587283][ T5860] loop3: detected capacity change from 0 to 2048 [ 82.609747][ T5863] loop0: detected capacity change from 0 to 512 [ 82.624959][ T5863] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.633760][ T5860] loop3: p1 < > p4 [ 82.638090][ T5863] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.644990][ T5860] loop3: p4 size 8388608 extends beyond EOD, truncated [ 82.650868][ T5863] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.750: corrupted inode contents [ 82.707584][ T5863] EXT4-fs (loop0): Remounting filesystem read-only [ 82.714394][ T5863] EXT4-fs (loop0): 1 truncate cleaned up [ 82.727336][ T5871] loop3: detected capacity change from 0 to 512 [ 82.735773][ T275] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.746331][ T275] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.757149][ T275] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.774360][ T5871] loop3: detected capacity change from 0 to 512 [ 82.781255][ T5871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.804233][ T5871] EXT4-fs (loop3): 1 truncate cleaned up [ 82.958821][ T5877] lo speed is unknown, defaulting to 1000 [ 83.001571][ T5882] xt_policy: output policy not valid in PREROUTING and INPUT [ 83.044600][ T5884] pimreg: entered allmulticast mode [ 83.050465][ T5883] pimreg: left allmulticast mode [ 83.156684][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.758'. [ 83.178565][ T5896] loop3: detected capacity change from 0 to 2048 [ 83.234944][ T5904] netlink: 'syz.2.765': attribute type 2 has an invalid length. [ 83.242717][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.765'. [ 83.253122][ T5896] loop3: p1 < > p4 [ 83.257753][ T5896] loop3: p4 size 8388608 extends beyond EOD, truncated [ 83.362253][ T5911] pimreg: entered allmulticast mode [ 83.369353][ T5910] pimreg: left allmulticast mode [ 83.379020][ T5916] loop3: detected capacity change from 0 to 1024 [ 83.385753][ T5916] EXT4-fs: Ignoring removed orlov option [ 83.391742][ T5916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.519877][ T5919] lo speed is unknown, defaulting to 1000 [ 83.553676][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 83.981883][ T5926] loop3: detected capacity change from 0 to 1024 [ 83.982178][ T5926] EXT4-fs: Ignoring removed orlov option [ 83.994715][ T5926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.211294][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 84.211307][ T29] audit: type=1326 audit(1764147383.349:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.211463][ T29] audit: type=1326 audit(1764147383.349:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.211733][ T29] audit: type=1326 audit(1764147383.349:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.212057][ T29] audit: type=1326 audit(1764147383.349:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.212552][ T29] audit: type=1326 audit(1764147383.349:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.242843][ T29] audit: type=1326 audit(1764147383.359:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.242874][ T29] audit: type=1326 audit(1764147383.359:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.249317][ T29] audit: type=1326 audit(1764147383.379:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.406134][ T29] audit: type=1326 audit(1764147383.379:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.429453][ T29] audit: type=1326 audit(1764147383.379:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae0d4f749 code=0x7ffc0000 [ 84.483049][ T5940] netlink: 'syz.3.776': attribute type 2 has an invalid length. [ 84.483066][ T5940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.776'. [ 84.501402][ T5940] loop3: detected capacity change from 0 to 2048 [ 84.551249][ T5940] loop3: p1 < > p4 [ 84.555548][ T5940] loop3: p4 size 8388608 extends beyond EOD, truncated [ 84.677353][ T5949] net_ratelimit: 32 callbacks suppressed [ 84.677478][ T5949] netlink: zone id is out of range [ 84.690767][ T5949] netlink: zone id is out of range [ 84.699929][ T5949] netlink: zone id is out of range [ 84.705261][ T5949] netlink: zone id is out of range [ 84.715039][ T5953] loop0: detected capacity change from 0 to 512 [ 84.721332][ T5949] netlink: zone id is out of range [ 84.726751][ T5949] netlink: zone id is out of range [ 84.733192][ T5949] netlink: zone id is out of range [ 84.743820][ T5949] netlink: zone id is out of range [ 84.760244][ T5953] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.772539][ T5953] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.821071][ T5949] netlink: set zone limit has 8 unknown bytes [ 84.829359][ T5953] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.783: corrupted inode contents [ 84.861671][ T5965] loop4: detected capacity change from 0 to 1024 [ 84.868609][ T5953] EXT4-fs (loop0): Remounting filesystem read-only [ 84.875707][ T5953] EXT4-fs (loop0): 1 truncate cleaned up [ 84.878153][ T5967] mmap: syz.2.786 (5967) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.894848][ T1763] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.905527][ T1763] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.908442][ T5967] veth0: entered promiscuous mode [ 84.927819][ T1763] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 84.951844][ T5971] netlink: zone id is out of range [ 84.971226][ T5965] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 85.013223][ T5976] netlink: 'syz.2.791': attribute type 2 has an invalid length. [ 85.080797][ T5986] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 85.099819][ T5987] xt_policy: output policy not valid in PREROUTING and INPUT [ 85.107454][ T5986] loop0: detected capacity change from 0 to 2048 [ 85.148686][ T5989] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 85.156357][ T5989] netlink: 'syz.2.797': attribute type 2 has an invalid length. [ 85.170584][ T5986] loop0: p1 < > p4 [ 85.175086][ T5986] loop0: p4 size 8388608 extends beyond EOD, truncated [ 85.225708][ T5998] loop0: detected capacity change from 0 to 512 [ 85.237115][ T5998] loop0: detected capacity change from 0 to 512 [ 85.250665][ T5998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.270281][ T5998] EXT4-fs (loop0): 1 truncate cleaned up [ 85.341349][ T5989] IPv6: Can't replace route, no match found [ 85.437549][ T6019] pimreg: entered allmulticast mode [ 85.443354][ T6018] pimreg: left allmulticast mode [ 85.543330][ T6036] xt_policy: output policy not valid in PREROUTING and INPUT [ 85.547671][ T6040] FAULT_INJECTION: forcing a failure. [ 85.547671][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 85.563371][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.3.818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.563399][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.563411][ T6040] Call Trace: [ 85.563418][ T6040] [ 85.563425][ T6040] __dump_stack+0x1d/0x30 [ 85.563450][ T6040] dump_stack_lvl+0xe8/0x140 [ 85.563472][ T6040] dump_stack+0x15/0x1b [ 85.563526][ T6040] should_fail_ex+0x265/0x280 [ 85.563555][ T6040] should_failslab+0x8c/0xb0 [ 85.563579][ T6040] kmem_cache_alloc_noprof+0x50/0x480 [ 85.563619][ T6040] ? prepare_creds+0x37/0x4c0 [ 85.563710][ T6040] ? __fget_files+0x184/0x1c0 [ 85.563739][ T6040] prepare_creds+0x37/0x4c0 [ 85.563765][ T6040] __sys_setreuid+0xdc/0x520 [ 85.563827][ T6040] ? ksys_write+0x192/0x1a0 [ 85.563854][ T6040] __x64_sys_setreuid+0x2d/0x40 [ 85.563875][ T6040] x64_sys_call+0x2450/0x3000 [ 85.563946][ T6040] do_syscall_64+0xd2/0x200 [ 85.563968][ T6040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.563997][ T6040] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.564068][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.564091][ T6040] RIP: 0033:0x7f405698f749 [ 85.564106][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.564136][ T6040] RSP: 002b:00007f40553f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 85.564156][ T6040] RAX: ffffffffffffffda RBX: 00007f4056be5fa0 RCX: 00007f405698f749 [ 85.564179][ T6040] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 85.564192][ T6040] RBP: 00007f40553f7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.564206][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.564219][ T6040] R13: 00007f4056be6038 R14: 00007f4056be5fa0 R15: 00007ffd5aa5d008 [ 85.564238][ T6040] [ 85.946237][ T6065] lo speed is unknown, defaulting to 1000 [ 85.980021][ T6067] __nla_validate_parse: 10 callbacks suppressed [ 85.980038][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 86.242310][ T6076] loop4: detected capacity change from 0 to 1024 [ 86.248962][ T6076] EXT4-fs: Ignoring removed orlov option [ 86.255314][ T6076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.267285][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 86.276226][ T6079] xt_policy: output policy not valid in PREROUTING and INPUT [ 86.337611][ T6085] loop3: detected capacity change from 0 to 1024 [ 86.344341][ T6085] EXT4-fs: Ignoring removed orlov option [ 86.351678][ T6085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.363179][ T6088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.831'. [ 86.535599][ T6106] loop4: detected capacity change from 0 to 512 [ 86.546075][ T6106] loop4: detected capacity change from 0 to 512 [ 86.553087][ T6106] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.594828][ T6106] EXT4-fs (loop4): 1 truncate cleaned up [ 86.661353][ T6114] loop3: detected capacity change from 0 to 512 [ 86.667720][ T6116] xt_policy: output policy not valid in PREROUTING and INPUT [ 86.675915][ T6114] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.686408][ T6114] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.693490][ T6114] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.843: Failed to acquire dquot type 1 [ 86.726976][ T6114] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.843: bg 0: block 40: padding at end of block bitmap is not set [ 86.730451][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.847'. [ 86.758346][ T6114] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 86.772713][ T6114] EXT4-fs (loop3): 1 truncate cleaned up [ 86.776732][ T6127] loop4: detected capacity change from 0 to 512 [ 86.785590][ T6127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.805629][ T6127] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.820787][ T6127] EXT4-fs (loop4): 1 truncate cleaned up [ 86.838687][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 86.992955][ T6143] loop4: detected capacity change from 0 to 512 [ 87.013359][ T6143] loop4: detected capacity change from 0 to 512 [ 87.021521][ T6143] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.034987][ T6143] EXT4-fs (loop4): 1 truncate cleaned up [ 87.107085][ T6147] loop3: detected capacity change from 0 to 512 [ 87.118580][ T6153] loop1: detected capacity change from 0 to 512 [ 87.134661][ T6147] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.142799][ T6147] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.149853][ T6153] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 87.157941][ T6153] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.165586][ T6153] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.859: corrupted inode contents [ 87.177558][ T6153] EXT4-fs (loop1): Remounting filesystem read-only [ 87.184350][ T6153] EXT4-fs (loop1): 1 truncate cleaned up [ 87.191976][ T6147] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.856: Failed to acquire dquot type 1 [ 87.203552][ T6147] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.856: bg 0: block 40: padding at end of block bitmap is not set [ 87.218239][ T6147] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 87.227282][ T6147] EXT4-fs (loop3): 1 truncate cleaned up [ 87.265594][ T6160] netlink: 'syz.4.861': attribute type 2 has an invalid length. [ 87.273287][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.861'. [ 87.291985][ T6160] loop4: detected capacity change from 0 to 2048 [ 87.324916][ T275] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.335568][ T275] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.346795][ T275] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 87.357224][ T6160] loop4: p1 < > p4 [ 87.361536][ T6160] loop4: p4 size 8388608 extends beyond EOD, truncated [ 87.432670][ T6166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6166 comm=syz.4.864 [ 87.526446][ T6172] loop1: detected capacity change from 0 to 2048 [ 87.570530][ T6172] loop1: p1 < > p4 [ 87.575175][ T6172] loop1: p4 size 8388608 extends beyond EOD, truncated [ 87.613767][ T6179] loop1: detected capacity change from 0 to 512 [ 87.623448][ T6179] loop1: detected capacity change from 0 to 512 [ 87.630272][ T6179] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.650130][ T6179] EXT4-fs (loop1): 1 truncate cleaned up [ 87.681058][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 87.766042][ T6186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.869'. [ 87.776616][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'. [ 87.798028][ T6185] sch_tbf: burst 88 is lower than device veth1 mtu (1514) ! [ 87.842174][ T6188] vhci_hcd: invalid port number 224 [ 87.866557][ T6196] netlink: 'syz.2.875': attribute type 2 has an invalid length. [ 87.874270][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.875'. [ 87.926858][ T6200] loop4: detected capacity change from 0 to 2048 [ 88.061082][ T6204] loop4: detected capacity change from 0 to 2048 [ 88.109991][ T6204] loop4: p1 < > p4 [ 88.110659][ T6204] loop4: p4 size 8388608 extends beyond EOD, truncated [ 88.183941][ T6210] loop4: detected capacity change from 0 to 1024 [ 88.184204][ T6210] EXT4-fs: Ignoring removed orlov option [ 88.196462][ T6210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.443005][ T6216] xt_policy: output policy not valid in PREROUTING and INPUT [ 88.467885][ T6218] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 88.490770][ T6220] loop4: detected capacity change from 0 to 512 [ 88.500198][ T6220] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.500340][ T6220] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.501867][ T6220] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.885: corrupted inode contents [ 88.526970][ T6220] EXT4-fs (loop4): Remounting filesystem read-only [ 88.527047][ T6220] EXT4-fs (loop4): 1 truncate cleaned up [ 88.527898][ T1763] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.550695][ T1763] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.550742][ T1763] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.613696][ T6226] loop4: detected capacity change from 0 to 512 [ 88.621416][ T6226] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.621552][ T6226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.621874][ T6226] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.887: Failed to acquire dquot type 1 [ 88.622250][ T6226] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.887: bg 0: block 40: padding at end of block bitmap is not set [ 88.662905][ T6226] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 88.663193][ T6226] EXT4-fs (loop4): 1 truncate cleaned up [ 89.131215][ T6256] loop4: detected capacity change from 0 to 512 [ 89.157836][ T6256] loop4: detected capacity change from 0 to 512 [ 89.164884][ T6256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.179251][ T6256] EXT4-fs (loop4): 1 truncate cleaned up [ 89.283246][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 89.283276][ T29] audit: type=1326 audit(1764147388.419:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.369296][ T29] audit: type=1326 audit(1764147388.449:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.392632][ T29] audit: type=1326 audit(1764147388.449:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.416107][ T29] audit: type=1326 audit(1764147388.449:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.439522][ T29] audit: type=1326 audit(1764147388.449:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.462848][ T29] audit: type=1326 audit(1764147388.449:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.486280][ T29] audit: type=1326 audit(1764147388.449:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.509635][ T29] audit: type=1326 audit(1764147388.449:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.532972][ T29] audit: type=1326 audit(1764147388.449:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 89.556276][ T29] audit: type=1326 audit(1764147388.449:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc64a63f749 code=0x7ffc0000 [ 90.034687][ T6291] loop0: detected capacity change from 0 to 512 [ 90.061514][ T6291] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.081050][ T6291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.107487][ T6291] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.910: corrupted inode contents [ 90.119693][ T6291] EXT4-fs (loop0): Remounting filesystem read-only [ 90.142799][ T6291] EXT4-fs (loop0): 1 truncate cleaned up [ 90.148548][ T1763] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.159122][ T1763] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.175195][ T1763] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.192237][ T6301] loop1: detected capacity change from 0 to 1024 [ 90.198989][ T6301] EXT4-fs: Ignoring removed orlov option [ 90.205052][ T6301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.316817][ T6301] ================================================================== [ 90.324936][ T6301] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 90.334230][ T6301] [ 90.336536][ T6301] write to 0xffff8881004a41a0 of 4 bytes by task 6307 on cpu 1: [ 90.344149][ T6301] writeback_single_inode+0x150/0x3f0 [ 90.349524][ T6301] sync_inode_metadata+0x5b/0x90 [ 90.354459][ T6301] generic_buffers_fsync_noflush+0xd9/0x120 [ 90.360356][ T6301] ext4_sync_file+0x1ab/0x690 [ 90.365018][ T6301] vfs_fsync_range+0x10d/0x130 [ 90.369775][ T6301] ext4_buffered_write_iter+0x34f/0x3c0 [ 90.375306][ T6301] ext4_file_write_iter+0x387/0xf60 [ 90.380488][ T6301] iter_file_splice_write+0x666/0xa60 [ 90.385844][ T6301] direct_splice_actor+0x156/0x2a0 [ 90.390947][ T6301] splice_direct_to_actor+0x312/0x680 [ 90.396306][ T6301] do_splice_direct+0xda/0x150 [ 90.401054][ T6301] do_sendfile+0x380/0x650 [ 90.405468][ T6301] __x64_sys_sendfile64+0x105/0x150 [ 90.410666][ T6301] x64_sys_call+0x2bb4/0x3000 [ 90.415335][ T6301] do_syscall_64+0xd2/0x200 [ 90.419822][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.425723][ T6301] [ 90.428038][ T6301] read to 0xffff8881004a41a0 of 4 bytes by task 6301 on cpu 0: [ 90.435567][ T6301] generic_buffers_fsync_noflush+0x80/0x120 [ 90.441451][ T6301] ext4_sync_file+0x1ab/0x690 [ 90.446113][ T6301] vfs_fsync_range+0x10d/0x130 [ 90.450864][ T6301] ext4_buffered_write_iter+0x34f/0x3c0 [ 90.456406][ T6301] ext4_file_write_iter+0x387/0xf60 [ 90.461586][ T6301] iter_file_splice_write+0x666/0xa60 [ 90.466947][ T6301] direct_splice_actor+0x156/0x2a0 [ 90.472044][ T6301] splice_direct_to_actor+0x312/0x680 [ 90.477405][ T6301] do_splice_direct+0xda/0x150 [ 90.482155][ T6301] do_sendfile+0x380/0x650 [ 90.486565][ T6301] __x64_sys_sendfile64+0x105/0x150 [ 90.491757][ T6301] x64_sys_call+0x2bb4/0x3000 [ 90.496424][ T6301] do_syscall_64+0xd2/0x200 [ 90.501349][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.507227][ T6301] [ 90.509530][ T6301] value changed: 0x00000070 -> 0x00000002 [ 90.515227][ T6301] [ 90.517531][ T6301] Reported by Kernel Concurrency Sanitizer on: [ 90.523670][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.1.914 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.533291][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.543329][ T6301] ==================================================================