last executing test programs: 1m3.612564945s ago: executing program 4 (id=642): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00000000000000000000000000000000000000004e3987f699bea5bc9d94f274ab89fec8052f9f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000030000000020000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f00000000c0), &(0x7f0000000180)=""/232}, 0x20) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/57, 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8923, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106}}, 0x20) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="0000000000000061e10000000000000000c93d59cffa5b00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x3e, &(0x7f0000004e00)=ANY=[], 0x0) 1m3.421120368s ago: executing program 4 (id=647): r0 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendto$inet(r0, &(0x7f0000000140)="2bd488fcb052da7d7788f5498a1729ec30b9d7cb371f52722d6e6ffbced9745406cf25b18c268156793a6bd89c390161a320a4e4478c667d0b4b5f5186fbd05e24b9f7edd04b34ccd426f8c94d97c8dcb5040428ec7564edda8b53087a70503f634c6d65eae541a93bc435708d9369a2da2833bffb06cb7c5a95f8fcd37233a3957daccd0063c411f789605516ae8f2762c52e3c285f1ae4236f8197aa7e6b542b", 0xa1, 0xc0d0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open(&(0x7f0000000400)='./file0\x00', 0x4500, 0x101) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchmod(r3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x600180, 0x0) fcntl$setlease(r4, 0x406, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m3.286139054s ago: executing program 4 (id=651): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@noblock_validity}, {@sb={'sb', 0x3d, 0xffffffffffffffe0}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004000000000000a06740c5381059ff303e4e39335697148a3fe9832274c703808dc16a1d8d56319f2361de4f91e8d992336ab9023e08c6bc91fa63b441fd27597289dcaaa5e54ad5cfdf24edaec51606a5d68f5d15bbeb169fa38f215efc9902ef30264d8348c166302375cf6446a849e05a96a2dee08da7865168e2148bc3f9e0fdaee033a62c617d868f"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) waitid(0x1, r3, &(0x7f0000001300), 0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000000000000a001f000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) 1m2.320680146s ago: executing program 4 (id=665): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x203, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = gettid() r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r7 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x0, 0xbf27, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) 1m1.26117807s ago: executing program 4 (id=679): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2210808, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$eJzs3E1rK1UYwPEnL02TXG4mC1EUpAfdqIuhja7lBmlBDFjaRmwFYdpONGRMSiZUImLryq34Ddy4KF12V1C/QDfudONGV90ILixSPJJ5aSftJNak6cvt/wdlTs9znuk5TBqeEzJz/P7XnzRqrlmzOpLMKkmIiJyIFCUpoURwTHrtjETtyquP/vz5xeXVtXfKlcr8klIL5ZXXS0qpwsz3n36eC4YdTstR8cPjP0q/HT179PzxPysf111Vd1Wz1VGWWm/92rHWHVtt1t2GqdSiY1uurepN12778ZYfrzmtra2uspqbj/Nbbdt1ldXsqobdVZ2W6rS7yvrIqjeVaZrqcV7iZGJ7H6rq3tKSVR4xeeOaJ4NR/a21HhLWibKVEpHcpUh1b6LzAgAAd9LF+j/ZK+lHqv+l4NX/vcHn9f/+Sz92Hr13UAjq/8NMXP3/xi/+ufrq/6yITKD+73e5Irr3dv7P4LHqf9wNM5f3tIm+39rtspUP/n89X36wP+s1qP8BAAAAAAAAAAAAAAAAAAAAALgPTrQ2tNZGeAx+Xjsf4fcNSN+9qXliMgZcf2NaRLK9q6+HXn/cc8ura5L1btxLF0Scr7ar21X/6Md/Dx8tMCuGnHqvh0CvHd55pHqK8oOzE+TvbFdTXqRck7o4YsucGFK8mK/1wtuV+Tnl68+fknw0vySGPBOfX4rNz8grL0fyTTHkpw1piSObvdf1qT7L/2JOqbferVzIz3njAAAAAAB4GpjqTOz+3TQHxf38s/11/+cDIpH9+Wzs/jxtvJC+3bUDAAAAAPBQuN3PGpbj2O34RkI7djsnQ8eM2UiPlj41bEwqssKrnjDjfd9FZHIrHdIIv0jRyERCWfk26B7lzOH6JzPnpIySNSN62p/VOH89/Nho0BhZnPT1Sg8IPffNd39Fep5c/cyJ4Km90dCbB9n/WOnEGlNXevPQqTHffQAAAADcpLDoz7lhz5PbnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/QkMeApa/rcWK3vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrvg3AAD//3xXBXQ=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = fsopen(0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m0.632958903s ago: executing program 4 (id=688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc0004}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pause() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000c3e2cbfa53d4700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x27, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @initdev}, &(0x7f00000003c0)=0xc) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) 1m0.632644813s ago: executing program 32 (id=688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc0004}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pause() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000c3e2cbfa53d4700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x27, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @initdev}, &(0x7f00000003c0)=0xc) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) 1.216410358s ago: executing program 5 (id=2111): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) write$ppp(r0, 0x0, 0x0) 1.10919818s ago: executing program 3 (id=2117): creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000300)='dd:cb\ve') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x3014490, &(0x7f0000001080), 0x45, 0x7ce, &(0x7f0000001240)="$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") munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1600) 1.044800538s ago: executing program 5 (id=2119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) socket$packet(0x11, 0x2, 0x300) 845.796421ms ago: executing program 5 (id=2131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400), 0xfc, 0x564, &(0x7f00000008c0)="$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") mknod$loop(&(0x7f00000001c0)='./file0/bus\x00', 0x100, 0x1) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/bus\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0xee01, @ANYBLOB="100000000000000020"], 0x2c, 0x0) 843.689671ms ago: executing program 3 (id=2132): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xf4\x9c\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRESDEC=r5, @ANYRES64, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe8f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2009, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 835.408912ms ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone3(&(0x7f00000004c0)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x1}, 0x58) socket$kcm(0x10, 0x2, 0x0) 793.855037ms ago: executing program 0 (id=2134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x25c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DESC={0x214, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x752}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd3c6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3da6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3414}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2458}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x78d}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf2b4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x847}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0xa0e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x25c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) 793.041047ms ago: executing program 0 (id=2136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 666.807182ms ago: executing program 5 (id=2141): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 666.220852ms ago: executing program 0 (id=2142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) socket$packet(0x11, 0x2, 0x300) 639.571635ms ago: executing program 3 (id=2143): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 630.896896ms ago: executing program 2 (id=2145): creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000300)='dd:cb\ve') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x3014490, &(0x7f0000001080), 0x45, 0x7ce, &(0x7f0000001240)="$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") munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x3, 0x300) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1600) 594.111601ms ago: executing program 3 (id=2146): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)=r1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0xed) 561.416164ms ago: executing program 5 (id=2147): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x25c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DESC={0x214, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x752}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd3c6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3da6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3414}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2458}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x78d}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf2b4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x847}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0xa0e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x25c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) 535.025267ms ago: executing program 1 (id=2148): inotify_init() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r0, 0x401, 0x0) 518.725819ms ago: executing program 0 (id=2149): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000030000000020"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/57, 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8923, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106}}, 0x20) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="0000000000000061e10000000000000000c93d59cffa5b00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x3e, &(0x7f0000004e00)=ANY=[], 0x0) 518.239339ms ago: executing program 2 (id=2150): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) write$ppp(r0, &(0x7f0000000480), 0x0) 517.600049ms ago: executing program 5 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) socket$kcm(0x23, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x3214}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) listen(r0, 0xb7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="3f758a9b03e042e4521f7a42d7dccf4b2d455cfe2d7a7621287d31ca47cf81e13bbe3c11930d3178e703b0819a4939516efa98515b47fbd4857dee620e23000cac563791ac1a279eec2bb5974e8496e9205d6846d33a8e16c6c028b9b8115993dd5a4f053fa9a0990b0047111a0e9bb54966f0e08bc5c8bd8eba27550b3c5a89dc715d49b9d6bdabc88a99e977968abefcb20ad4f9452a50e66e5de013bfdb873cb916a85b9c71f4466f2de1cbdb3732649fdf0df990c3ce90d29596595d16c2f16358ba5bc19fc3ff4b8a71876e7b86aa0ff5a552dcd3049298484b6abc0f7bd7665050eab4"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 497.690652ms ago: executing program 1 (id=2152): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 487.809753ms ago: executing program 3 (id=2153): creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000300)='dd:cb\ve') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x3014490, &(0x7f0000001080), 0x45, 0x7ce, &(0x7f0000001240)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 452.842307ms ago: executing program 0 (id=2154): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xf4\x9c\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRESDEC=r5, @ANYRES64, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe8f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2009, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 396.397833ms ago: executing program 2 (id=2155): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f00000004c0)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 395.578953ms ago: executing program 2 (id=2156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 368.263267ms ago: executing program 2 (id=2157): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 316.996883ms ago: executing program 1 (id=2158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fadvise64(0xffffffffffffffff, 0x3, 0x9a, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(r1) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000640)=""/125, 0x7d}], 0x1, 0xfffffffc, 0x1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 316.285752ms ago: executing program 2 (id=2159): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@noblock_validity}, {@sb={'sb', 0x3d, 0xffffffffffffffe0}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004000000000000a06740c5381059ff303e4e39335697148a3fe9832274c703808dc16a1d8d56319f2361de4f91e8d992336ab9023e08c6bc91fa63b441fd27597289dcaaa5e54ad5cfdf24edaec51606a5d68f5d15bbeb169fa38f215efc9902ef30264d8348c166302375cf6446a849e05a96a2dee08da7865168e2148bc3f9e0fdaee033a62c617d868f"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) waitid(0x1, r3, &(0x7f0000001300), 0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000000000000a001f000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e1e8cfcb73d18c15dfaf04550bbd479aca9d59f408a7f8647ee014f5c0325ae447fc915d6a5ba5ddd204b1d4f3c83fc3a8b2e79726653", 0x7e}], 0x1}}], 0x1, 0x4) 258.71806ms ago: executing program 1 (id=2160): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fstatfs(r2, &(0x7f0000000e80)=""/4106) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0xb48, 0x2000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x804) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0080000000000000000000000000000000000000e816691e64443335f2e7ee8e89e9a4ee4d35b38b8e69c558e060f91aff23062044a08034040cbc67e686a0d52e263136630a9eff207e5dbe3a5637e1f0b8ed83b8df212b68848828c0e03053f463b54e8582086760200b6f2b7bf3c0f50f70e5eb0dfb4b3e4f9362291ee1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$inet(0xa, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8afcff00000000bfa20000000000f81b650007020000f8ffff80b701000008000000b704000000000000852700000000e9ec0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x1, 0x3, 0x10001, {{0x9, 0x4, 0x3, 0x38, 0x24, 0x68, 0x0, 0x2, 0x2f, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0xf, 0x24, [@multicast1, @multicast1, @multicast2]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 137.382744ms ago: executing program 1 (id=2161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) socket$packet(0x11, 0x2, 0x300) 86.661549ms ago: executing program 3 (id=2162): inotify_init() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r0, 0x401, 0x0) 0s ago: executing program 1 (id=2163): creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000300)='dd:cb\ve') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x3014490, &(0x7f0000001080), 0x45, 0x7ce, &(0x7f0000001240)="$eJzs3c9rHNcdAPDvrFY/7VYqlLYuFBYKrcF4Vbmq3UKhKj2UQg2G5JRDbLFaC0crrdGujCVEYhMCuQSSkFty8Tk/LyHX/IDkkvwfwcZJZBOHHILC7A9pJe/aK0faje3PB8Z6b+fNvPfdN/P2STOeDeCxlUv/yUQciYiXk4jxxutJRAzWUtmImXq5OxvrhXRJYnPzia+TWpnbG+uFaNkmdaiR+V1EfPxCxLHM3fVWVtcWZkul4vKObVfXjl9YnJ0vzheXTk5NT5849bdTJ/cv1m+/WDt845X//vmdme+f/+27L32SxEwcTuOr2Y5jv+Qi14hrMH0Ld/jPflfWN+8/20WhTMTmZj2ZPegGsQfpqTnQ6JUjMR4D9+qf0V62DAA4KM9FOjPrYKDjGgDgoZbUP///1e92AAC90vw7wO2N9UJz6e9fJHrr5r8jYqQef/P6Zn1NtnHNbqR2HXTsdrLjykgSERP7UH8uIt744Om30iV2XU8FOEhXrkbEuYncjvF/IGoj3O57FvbqL+1fnm/N5HatNP5B73yYzn/+3m7+l9ma/0Sb+c9wm3P3Qdz//M9c34dqOkrnf/9subftTkv8DRMDjdwvanO+weT8hVIxHdt+GRFHY3A4zU/Vy7a9Q+borR9udaq/df73zavPvJnWn/7cLpG5nh3euc3cbHX2p8bddPNqxO+z7eJPx//hWv8nHea/Z7qs43//ePH1TuvS+NN4m8vd8R+szWsRf2rb/8lWmTQ1WV28OFlpd3/iZO1wmGweFG28NxNjnerPZbf7P13S+pu/C/RC2v9j945/Imm9X7PS9a63zoXPr41/1KlQ6/HfPv72x/9Q8mQtPdR47fJstbo8FTGU/P/u109sb9vMN8un8R/9Y/vzvzn+tTn+n0r3f67LNyJ746u3Hzz+g5XGP7en/t9zIkbuLAx0qr+7/p/esU0341+3DXzQ9w0AAAAAAAAAAAAAAAAAAAAAAAAA9iITEYcjyeS30plMPl//Du9fx1imVK5Uj50vryzNpetqzz/NNB91Od7yPNSpxvPwm/kTu/J/jYhfRcRrw6O1fL5QLs31O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDjU4fv/U18O7yo80I8WAgAHYsQHOwA8bpJstt9NAAB6baTrkrmIGD3QtgAAvdH95z8A8Kjo/PnvwgAAPKru8/v/7v8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt15vTpdNn8bmO9kObnLq2uLJQvHZ8rVhbyiyuFfKG8fDE/Xy7Pl4r5Qnkxsh12dKX+o1QuX5yOpZXLk9VipTpZWV07u1heWaqevbA4O188WxzsYWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0K3K6trC5nipuJwmZksSPU4sfFbvh59LeyT2logr9f7b1z1/evIPv0l32tcAY2h7lBjty9gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD4MQAA//+KvR+l") munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x6, 0x6}) kernel console output (not intermixed with test programs): acity change from 0 to 512 [ 100.777191][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.790255][ T6705] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.816135][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.822288][ T6711] loop1: detected capacity change from 0 to 128 [ 100.907226][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 100.954698][ T6731] loop1: detected capacity change from 0 to 164 [ 100.962291][ T6731] Unable to read rock-ridge attributes [ 100.969898][ T6731] Unable to read rock-ridge attributes [ 101.033345][ T6743] loop1: detected capacity change from 0 to 512 [ 101.047004][ T6743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.059709][ T6743] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.102255][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.133739][ T6763] loop0: detected capacity change from 0 to 164 [ 101.142447][ T6763] Unable to read rock-ridge attributes [ 101.149901][ T6763] Unable to read rock-ridge attributes [ 101.153653][ T6765] loop5: detected capacity change from 0 to 128 [ 101.164089][ T6765] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.176635][ T6765] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.230667][ T5530] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.250720][ T6773] vti0: entered promiscuous mode [ 101.255876][ T6773] vti0: entered allmulticast mode [ 101.287474][ T6781] loop2: detected capacity change from 0 to 512 [ 101.307271][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.320171][ T6781] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.346511][ T6791] FAULT_INJECTION: forcing a failure. [ 101.346511][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 101.359251][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.5.1144 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 101.370013][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.380130][ T6791] Call Trace: [ 101.383472][ T6791] [ 101.386423][ T6791] dump_stack_lvl+0xf2/0x150 [ 101.391026][ T6791] dump_stack+0x15/0x20 [ 101.395238][ T6791] should_fail_ex+0x223/0x230 [ 101.399995][ T6791] ? __hw_addr_add_ex+0x13d/0x360 [ 101.405047][ T6791] should_failslab+0x8f/0xb0 [ 101.409637][ T6791] __kmalloc_cache_noprof+0x4b/0x2a0 [ 101.415018][ T6791] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 101.421122][ T6791] __hw_addr_add_ex+0x13d/0x360 [ 101.425991][ T6791] dev_addr_init+0xb2/0x120 [ 101.430568][ T6791] alloc_netdev_mqs+0x1c5/0x8e0 [ 101.435433][ T6791] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 101.440873][ T6791] rtnl_create_link+0x233/0x680 [ 101.445757][ T6791] rtnl_newlink+0xe12/0x1690 [ 101.450425][ T6791] ? __rcu_read_unlock+0x4e/0x70 [ 101.455439][ T6791] ? rtnl_newlink+0x361/0x1690 [ 101.460275][ T6791] ? selinux_capable+0x1f2/0x260 [ 101.465214][ T6791] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.470268][ T6791] rtnetlink_rcv_msg+0x6aa/0x710 [ 101.475200][ T6791] ? ref_tracker_free+0x3a5/0x410 [ 101.480312][ T6791] ? __dev_queue_xmit+0x161/0x2040 [ 101.485500][ T6791] ? ref_tracker_alloc+0x1f5/0x2f0 [ 101.490617][ T6791] netlink_rcv_skb+0x12c/0x230 [ 101.495527][ T6791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.501062][ T6791] rtnetlink_rcv+0x1c/0x30 [ 101.505489][ T6791] netlink_unicast+0x599/0x670 [ 101.510275][ T6791] netlink_sendmsg+0x5cc/0x6e0 [ 101.515058][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.520378][ T6791] __sock_sendmsg+0x140/0x180 [ 101.525065][ T6791] ____sys_sendmsg+0x312/0x410 [ 101.529883][ T6791] __sys_sendmsg+0x1d9/0x270 [ 101.534519][ T6791] __x64_sys_sendmsg+0x46/0x50 [ 101.539293][ T6791] x64_sys_call+0x2689/0x2d60 [ 101.544049][ T6791] do_syscall_64+0xc9/0x1c0 [ 101.548624][ T6791] ? clear_bhb_loop+0x55/0xb0 [ 101.553368][ T6791] ? clear_bhb_loop+0x55/0xb0 [ 101.558055][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.563983][ T6791] RIP: 0033:0x7f1a6c69e719 [ 101.568431][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.588050][ T6791] RSP: 002b:00007f1a6b311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.596452][ T6791] RAX: ffffffffffffffda RBX: 00007f1a6c855f80 RCX: 00007f1a6c69e719 [ 101.604414][ T6791] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 101.612452][ T6791] RBP: 00007f1a6b311090 R08: 0000000000000000 R09: 0000000000000000 [ 101.620483][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.628547][ T6791] R13: 0000000000000000 R14: 00007f1a6c855f80 R15: 00007ffc9185f9d8 [ 101.636549][ T6791] [ 101.643354][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.675772][ T6797] loop0: detected capacity change from 0 to 164 [ 101.688112][ T6797] Unable to read rock-ridge attributes [ 101.698402][ T6797] Unable to read rock-ridge attributes [ 101.938688][ T6831] loop5: detected capacity change from 0 to 1024 [ 101.949429][ T6831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.971900][ T6835] loop0: detected capacity change from 0 to 164 [ 101.987752][ T6835] Unable to read rock-ridge attributes [ 101.994905][ T6831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.018524][ T6837] loop2: detected capacity change from 0 to 128 [ 102.029400][ T6835] Unable to read rock-ridge attributes [ 102.053906][ T6837] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 102.075658][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.157439][ T6825] FAT-fs (loop2): FAT read failed (blocknr 128) [ 102.170121][ T6853] xt_hashlimit: max too large, truncated to 1048576 [ 102.176835][ T6853] xt_hashlimit: overflow, try lower: 0/0 [ 102.291357][ T6871] loop0: detected capacity change from 0 to 128 [ 102.308991][ T6871] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.327896][ T6874] loop5: detected capacity change from 0 to 164 [ 102.337821][ T6871] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.371512][ T6874] Unable to read rock-ridge attributes [ 102.381028][ T6874] Unable to read rock-ridge attributes [ 102.392165][ T6871] FAULT_INJECTION: forcing a failure. [ 102.392165][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 102.404895][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.0.1176 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 102.415613][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.425699][ T6871] Call Trace: [ 102.429132][ T6871] [ 102.432078][ T6871] dump_stack_lvl+0xf2/0x150 [ 102.436718][ T6871] dump_stack+0x15/0x20 [ 102.440885][ T6871] should_fail_ex+0x223/0x230 [ 102.445658][ T6871] ? ext4_alloc_inode+0x38/0x320 [ 102.450672][ T6871] should_failslab+0x8f/0xb0 [ 102.455277][ T6871] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 102.461092][ T6871] ext4_alloc_inode+0x38/0x320 [ 102.465881][ T6871] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 102.471389][ T6871] alloc_inode+0x3c/0x160 [ 102.475797][ T6871] iget_locked+0xf2/0x5d0 [ 102.480154][ T6871] __ext4_iget+0x17c/0x1dd0 [ 102.484672][ T6871] ext4_nfs_get_inode+0x32/0xa0 [ 102.489521][ T6871] ? __pfx_ext4_nfs_get_inode+0x10/0x10 [ 102.495109][ T6871] generic_fh_to_dentry+0x77/0xa0 [ 102.500186][ T6871] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 102.506029][ T6871] ext4_fh_to_dentry+0x33/0x40 [ 102.510818][ T6871] exportfs_decode_fh_raw+0xaf/0x480 [ 102.516104][ T6871] do_handle_open+0x44b/0x570 [ 102.520862][ T6871] __x64_sys_open_by_handle_at+0x46/0x50 [ 102.526526][ T6871] x64_sys_call+0x2909/0x2d60 [ 102.531363][ T6871] do_syscall_64+0xc9/0x1c0 [ 102.535884][ T6871] ? clear_bhb_loop+0x55/0xb0 [ 102.540550][ T6871] ? clear_bhb_loop+0x55/0xb0 [ 102.545230][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.551173][ T6871] RIP: 0033:0x7f30456ce719 [ 102.555640][ T6871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.575257][ T6871] RSP: 002b:00007f3044347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 102.583731][ T6871] RAX: ffffffffffffffda RBX: 00007f3045885f80 RCX: 00007f30456ce719 [ 102.591692][ T6871] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 102.599653][ T6871] RBP: 00007f3044347090 R08: 0000000000000000 R09: 0000000000000000 [ 102.607619][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.615634][ T6871] R13: 0000000000000000 R14: 00007f3045885f80 R15: 00007ffe308f47e8 [ 102.623663][ T6871] [ 102.648062][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.691359][ T6889] loop3: detected capacity change from 0 to 512 [ 102.705856][ T6895] FAULT_INJECTION: forcing a failure. [ 102.705856][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 102.718913][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.5.1185 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 102.729652][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.739703][ T6895] Call Trace: [ 102.742974][ T6895] [ 102.745901][ T6895] dump_stack_lvl+0xf2/0x150 [ 102.750544][ T6895] dump_stack+0x15/0x20 [ 102.754786][ T6895] should_fail_ex+0x223/0x230 [ 102.759491][ T6895] ? v9fs_mount+0x53/0x570 [ 102.763930][ T6895] should_failslab+0x8f/0xb0 [ 102.768516][ T6895] __kmalloc_cache_noprof+0x4b/0x2a0 [ 102.773880][ T6895] v9fs_mount+0x53/0x570 [ 102.778143][ T6895] ? __pfx_v9fs_mount+0x10/0x10 [ 102.783030][ T6895] legacy_get_tree+0x77/0xd0 [ 102.787716][ T6895] vfs_get_tree+0x56/0x1e0 [ 102.792153][ T6895] do_new_mount+0x227/0x690 [ 102.796738][ T6895] path_mount+0x49b/0xb30 [ 102.801084][ T6895] __se_sys_mount+0x27c/0x2d0 [ 102.805828][ T6895] __x64_sys_mount+0x67/0x80 [ 102.810434][ T6895] x64_sys_call+0x203e/0x2d60 [ 102.815122][ T6895] do_syscall_64+0xc9/0x1c0 [ 102.819669][ T6895] ? clear_bhb_loop+0x55/0xb0 [ 102.824413][ T6895] ? clear_bhb_loop+0x55/0xb0 [ 102.829143][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.835109][ T6895] RIP: 0033:0x7f1a6c69e719 [ 102.839518][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.859124][ T6895] RSP: 002b:00007f1a6b311038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.867613][ T6895] RAX: ffffffffffffffda RBX: 00007f1a6c855f80 RCX: 00007f1a6c69e719 [ 102.875723][ T6895] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 102.883735][ T6895] RBP: 00007f1a6b311090 R08: 0000000020000080 R09: 0000000000000000 [ 102.891772][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.899742][ T6895] R13: 0000000000000000 R14: 00007f1a6c855f80 R15: 00007ffc9185f9d8 [ 102.907718][ T6895] [ 102.946628][ T6904] loop2: detected capacity change from 0 to 512 [ 102.966641][ T6889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1184: bg 0: block 248: padding at end of block bitmap is not set [ 102.977861][ T6907] loop5: detected capacity change from 0 to 512 [ 102.987993][ T6889] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1184: Failed to acquire dquot type 1 [ 103.000270][ T6889] EXT4-fs (loop3): 1 truncate cleaned up [ 103.002217][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.006470][ T6889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.030866][ T6904] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.030939][ T6889] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.052579][ T6889] syz.3.1184 (6889) used greatest stack depth: 9584 bytes left [ 103.066736][ T6907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.079402][ T6907] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.080179][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.099647][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.120603][ T6916] loop2: detected capacity change from 0 to 512 [ 103.130798][ T6916] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 103.137669][ T6919] __nla_validate_parse: 6 callbacks suppressed [ 103.137730][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 103.139048][ T6916] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 103.164524][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.173884][ T6916] EXT4-fs (loop2): 1 truncate cleaned up [ 103.179941][ T6916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.209469][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.223662][ T6926] team0 (unregistering): Port device team_slave_0 removed [ 103.234916][ T6926] team0 (unregistering): Port device team_slave_1 removed [ 103.243412][ T6932] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.364892][ T6941] loop3: detected capacity change from 0 to 512 [ 103.378806][ T6941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.391995][ T6941] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.414587][ T6932] FAULT_INJECTION: forcing a failure. [ 103.414587][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 103.427288][ T6932] CPU: 0 UID: 0 PID: 6932 Comm: syz.2.1197 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 103.437998][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.448134][ T6932] Call Trace: [ 103.451427][ T6932] [ 103.454389][ T6932] dump_stack_lvl+0xf2/0x150 [ 103.459070][ T6932] dump_stack+0x15/0x20 [ 103.463300][ T6932] should_fail_ex+0x223/0x230 [ 103.468036][ T6932] ? do_proc_control+0x1c4/0x850 [ 103.473005][ T6932] should_failslab+0x8f/0xb0 [ 103.477619][ T6932] __kmalloc_cache_noprof+0x4b/0x2a0 [ 103.483010][ T6932] do_proc_control+0x1c4/0x850 [ 103.487799][ T6932] usbdev_ioctl+0x1bb3/0x3e00 [ 103.492509][ T6932] ? do_vfs_ioctl+0x96e/0x1530 [ 103.497296][ T6932] ? selinux_file_ioctl+0x2f7/0x380 [ 103.502524][ T6932] ? __fget_files+0x1d4/0x210 [ 103.507264][ T6932] ? __pfx_usbdev_ioctl+0x10/0x10 [ 103.512306][ T6932] __se_sys_ioctl+0xcd/0x140 [ 103.516925][ T6932] __x64_sys_ioctl+0x43/0x50 [ 103.521621][ T6932] x64_sys_call+0x15cc/0x2d60 [ 103.526397][ T6932] do_syscall_64+0xc9/0x1c0 [ 103.530954][ T6932] ? clear_bhb_loop+0x55/0xb0 [ 103.535657][ T6932] ? clear_bhb_loop+0x55/0xb0 [ 103.540366][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.546283][ T6932] RIP: 0033:0x7ff6e96ee719 [ 103.550698][ T6932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.570310][ T6932] RSP: 002b:00007ff6e8361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.578818][ T6932] RAX: ffffffffffffffda RBX: 00007ff6e98a5f80 RCX: 00007ff6e96ee719 [ 103.586800][ T6932] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000005 [ 103.594795][ T6932] RBP: 00007ff6e8361090 R08: 0000000000000000 R09: 0000000000000000 [ 103.602770][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.610764][ T6932] R13: 0000000000000000 R14: 00007ff6e98a5f80 R15: 00007fffafca8d58 [ 103.618761][ T6932] [ 103.623941][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.741235][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 103.811254][ T6953] loop2: detected capacity change from 0 to 512 [ 103.830754][ T6953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1205: bg 0: block 393: padding at end of block bitmap is not set [ 103.846569][ T6953] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 103.856660][ T6953] EXT4-fs (loop2): 2 truncates cleaned up [ 103.862760][ T6953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.889091][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.953052][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 103.960101][ T6961] FAULT_INJECTION: forcing a failure. [ 103.960101][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.975107][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.0.1208 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 103.985872][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.995931][ T6961] Call Trace: [ 103.999210][ T6961] [ 104.002146][ T6961] dump_stack_lvl+0xf2/0x150 [ 104.006748][ T6961] dump_stack+0x15/0x20 [ 104.010980][ T6961] should_fail_ex+0x223/0x230 [ 104.015680][ T6961] should_fail+0xb/0x10 [ 104.019895][ T6961] should_fail_usercopy+0x1a/0x20 [ 104.024934][ T6961] _copy_from_user+0x20/0xe0 [ 104.029537][ T6961] tls_setsockopt+0x3c3/0xcb0 [ 104.034241][ T6961] sock_common_setsockopt+0x64/0x80 [ 104.039590][ T6961] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.045497][ T6961] __sys_setsockopt+0x1cc/0x240 [ 104.050483][ T6961] __x64_sys_setsockopt+0x66/0x80 [ 104.055526][ T6961] x64_sys_call+0x278d/0x2d60 [ 104.060244][ T6961] do_syscall_64+0xc9/0x1c0 [ 104.064808][ T6961] ? clear_bhb_loop+0x55/0xb0 [ 104.069537][ T6961] ? clear_bhb_loop+0x55/0xb0 [ 104.074325][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.080295][ T6961] RIP: 0033:0x7f30456ce719 [ 104.084711][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.104345][ T6961] RSP: 002b:00007f3044347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.112767][ T6961] RAX: ffffffffffffffda RBX: 00007f3045885f80 RCX: 00007f30456ce719 [ 104.120736][ T6961] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 104.128768][ T6961] RBP: 00007f3044347090 R08: 0000000000000038 R09: 0000000000000000 [ 104.136731][ T6961] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 104.144697][ T6961] R13: 0000000000000000 R14: 00007f3045885f80 R15: 00007ffe308f47e8 [ 104.152667][ T6961] [ 104.166849][ T6961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1208'. [ 104.201121][ T6969] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.565622][ T29] kauditd_printk_skb: 1361 callbacks suppressed [ 104.565638][ T29] audit: type=1326 audit(1730377683.380:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 104.651836][ T29] audit: type=1326 audit(1730377683.420:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.675264][ T29] audit: type=1326 audit(1730377683.420:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.698797][ T29] audit: type=1326 audit(1730377683.420:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.722230][ T29] audit: type=1326 audit(1730377683.420:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.745715][ T29] audit: type=1326 audit(1730377683.420:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.769105][ T29] audit: type=1326 audit(1730377683.420:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.792535][ T29] audit: type=1326 audit(1730377683.420:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.815997][ T29] audit: type=1326 audit(1730377683.420:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.839491][ T29] audit: type=1326 audit(1730377683.420:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 104.976323][ T7002] syzkaller0: entered promiscuous mode [ 104.981854][ T7002] syzkaller0: entered allmulticast mode [ 105.006385][ T7008] loop0: detected capacity change from 0 to 164 [ 105.035633][ T7008] Unable to read rock-ridge attributes [ 105.053433][ T7008] Unable to read rock-ridge attributes [ 105.086246][ T7012] loop1: detected capacity change from 0 to 512 [ 105.127470][ T7012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.155700][ T7012] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.307177][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.417802][ T7035] loop3: detected capacity change from 0 to 1024 [ 105.470288][ T7043] syz.5.1239[7043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.470346][ T7043] syz.5.1239[7043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.496551][ T7035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.576044][ T7043] syz.5.1239[7043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.601548][ T7035] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.716055][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.836689][ T7064] loop5: detected capacity change from 0 to 512 [ 105.869144][ T7068] loop1: detected capacity change from 0 to 512 [ 105.932830][ T7068] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 105.976742][ T7068] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 105.986890][ T7064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.008504][ T7064] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.027190][ T7068] EXT4-fs (loop1): 1 truncate cleaned up [ 106.046326][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.063683][ T7080] loop3: detected capacity change from 0 to 164 [ 106.075807][ T7068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.102844][ T7080] Unable to read rock-ridge attributes [ 106.125284][ T7080] Unable to read rock-ridge attributes [ 106.134912][ T7084] FAULT_INJECTION: forcing a failure. [ 106.134912][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 106.147757][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.0.1253 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 106.158514][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.168574][ T7084] Call Trace: [ 106.171871][ T7084] [ 106.174855][ T7084] dump_stack_lvl+0xf2/0x150 [ 106.179468][ T7084] dump_stack+0x15/0x20 [ 106.183643][ T7084] should_fail_ex+0x223/0x230 [ 106.188443][ T7084] ? alloc_empty_file+0xd0/0x2f0 [ 106.193403][ T7084] should_failslab+0x8f/0xb0 [ 106.198011][ T7084] kmem_cache_alloc_noprof+0x4c/0x290 [ 106.203412][ T7084] alloc_empty_file+0xd0/0x2f0 [ 106.208270][ T7084] path_openat+0x6a/0x1fa0 [ 106.212769][ T7084] ? mntput+0x49/0x70 [ 106.216846][ T7084] ? _parse_integer_limit+0x167/0x180 [ 106.222312][ T7084] ? _parse_integer+0x27/0x30 [ 106.227076][ T7084] do_filp_open+0xf7/0x200 [ 106.231584][ T7084] alloc_bprm+0xd5/0x740 [ 106.235845][ T7084] ? should_fail_ex+0xd7/0x230 [ 106.240641][ T7084] do_execveat_common+0x134/0x800 [ 106.245855][ T7084] __x64_sys_execve+0x5a/0x70 [ 106.250639][ T7084] x64_sys_call+0x1277/0x2d60 [ 106.255377][ T7084] do_syscall_64+0xc9/0x1c0 [ 106.259931][ T7084] ? clear_bhb_loop+0x55/0xb0 [ 106.264769][ T7084] ? clear_bhb_loop+0x55/0xb0 [ 106.269463][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.275379][ T7084] RIP: 0033:0x7f30456ce719 [ 106.279861][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.299494][ T7084] RSP: 002b:00007f3044347038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 106.307933][ T7084] RAX: ffffffffffffffda RBX: 00007f3045885f80 RCX: 00007f30456ce719 [ 106.315989][ T7084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 106.323958][ T7084] RBP: 00007f3044347090 R08: 0000000000000000 R09: 0000000000000000 [ 106.331970][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.340025][ T7084] R13: 0000000000000000 R14: 00007f3045885f80 R15: 00007ffe308f47e8 [ 106.348009][ T7084] [ 106.479046][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.492621][ T7108] vti0: entered promiscuous mode [ 106.497722][ T7108] vti0: entered allmulticast mode [ 106.529685][ T7110] loop2: detected capacity change from 0 to 512 [ 106.605438][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.678110][ T7110] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.728723][ T7132] FAULT_INJECTION: forcing a failure. [ 106.728723][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.732734][ T7117] loop1: detected capacity change from 0 to 2048 [ 106.741792][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.5.1268 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 106.758894][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.768954][ T7132] Call Trace: [ 106.772297][ T7132] [ 106.775297][ T7132] dump_stack_lvl+0xf2/0x150 [ 106.780001][ T7132] dump_stack+0x15/0x20 [ 106.784194][ T7132] should_fail_ex+0x223/0x230 [ 106.788959][ T7132] should_fail+0xb/0x10 [ 106.793134][ T7132] should_fail_usercopy+0x1a/0x20 [ 106.798206][ T7132] _copy_to_user+0x20/0xa0 [ 106.802645][ T7132] simple_read_from_buffer+0xa0/0x110 [ 106.808048][ T7132] proc_fail_nth_read+0xf9/0x140 [ 106.813004][ T7132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.818569][ T7132] vfs_read+0x1a2/0x700 [ 106.822811][ T7132] ? __fget_files+0x1d4/0x210 [ 106.827696][ T7132] ksys_read+0xeb/0x1b0 [ 106.831872][ T7132] __x64_sys_read+0x42/0x50 [ 106.836475][ T7132] x64_sys_call+0x27d3/0x2d60 [ 106.841169][ T7132] do_syscall_64+0xc9/0x1c0 [ 106.845718][ T7132] ? clear_bhb_loop+0x55/0xb0 [ 106.850409][ T7132] ? clear_bhb_loop+0x55/0xb0 [ 106.855095][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.861020][ T7132] RIP: 0033:0x7f1a6c69d15c [ 106.865447][ T7132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 106.885138][ T7132] RSP: 002b:00007f1a6b311030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.893570][ T7132] RAX: ffffffffffffffda RBX: 00007f1a6c855f80 RCX: 00007f1a6c69d15c [ 106.901538][ T7132] RDX: 000000000000000f RSI: 00007f1a6b3110a0 RDI: 0000000000000006 [ 106.909504][ T7132] RBP: 00007f1a6b311090 R08: 0000000000000000 R09: 0000000000000000 [ 106.917537][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.925502][ T7132] R13: 0000000000000000 R14: 00007f1a6c855f80 R15: 00007ffc9185f9d8 [ 106.933572][ T7132] [ 106.995898][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.016867][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.473401][ T7152] loop2: detected capacity change from 0 to 512 [ 107.491534][ T7152] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 107.499992][ T7152] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 107.500273][ T7157] FAULT_INJECTION: forcing a failure. [ 107.500273][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 107.509773][ T7152] EXT4-fs (loop2): 1 truncate cleaned up [ 107.520749][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.5.1277 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 107.520778][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.526753][ T7152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.537028][ T7157] Call Trace: [ 107.537037][ T7157] [ 107.537045][ T7157] dump_stack_lvl+0xf2/0x150 [ 107.537074][ T7157] dump_stack+0x15/0x20 [ 107.574495][ T7157] should_fail_ex+0x223/0x230 [ 107.579191][ T7157] ? sock_alloc_inode+0x34/0xa0 [ 107.584074][ T7157] should_failslab+0x8f/0xb0 [ 107.588732][ T7157] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 107.594491][ T7157] sock_alloc_inode+0x34/0xa0 [ 107.599174][ T7157] ? __pfx_sock_alloc_inode+0x10/0x10 [ 107.604552][ T7157] alloc_inode+0x3c/0x160 [ 107.608879][ T7157] new_inode_pseudo+0x15/0x20 [ 107.613602][ T7157] do_accept+0xdb/0x390 [ 107.617762][ T7157] ? vfs_write+0x596/0x920 [ 107.622259][ T7157] ? __pfx_kfree_link+0x10/0x10 [ 107.627124][ T7157] __sys_accept4+0xc4/0x150 [ 107.631710][ T7157] __x64_sys_accept+0x44/0x50 [ 107.636572][ T7157] x64_sys_call+0x294f/0x2d60 [ 107.641294][ T7157] do_syscall_64+0xc9/0x1c0 [ 107.645799][ T7157] ? clear_bhb_loop+0x55/0xb0 [ 107.650481][ T7157] ? clear_bhb_loop+0x55/0xb0 [ 107.655277][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.661210][ T7157] RIP: 0033:0x7f1a6c69e719 [ 107.665621][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.685321][ T7157] RSP: 002b:00007f1a6b311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 107.693741][ T7157] RAX: ffffffffffffffda RBX: 00007f1a6c855f80 RCX: 00007f1a6c69e719 [ 107.701752][ T7157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 107.709867][ T7157] RBP: 00007f1a6b311090 R08: 0000000000000000 R09: 0000000000000000 [ 107.717835][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.725819][ T7157] R13: 0000000000000000 R14: 00007f1a6c855f80 R15: 00007ffc9185f9d8 [ 107.733795][ T7157] [ 107.742129][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.749522][ T7156] loop3: detected capacity change from 0 to 512 [ 107.774476][ T7156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.881294][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.910172][ T7156] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.913868][ T7171] loop1: detected capacity change from 0 to 512 [ 107.941882][ T7156] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 107.965678][ T7173] loop5: detected capacity change from 0 to 512 [ 107.979011][ T7171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.006504][ T7171] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.031385][ T7173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.048712][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.060858][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.087344][ T7173] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.098631][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.128700][ T7167] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1281: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 108.146209][ T7167] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.164546][ T7167] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1281: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 108.188687][ T7167] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.216968][ T7167] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1281: bg 0: block 18: invalid block bitmap [ 108.237444][ T7194] loop1: detected capacity change from 0 to 512 [ 108.241778][ T7167] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.1281: Failed to acquire dquot type 1 [ 108.244882][ T7194] journal_path: Lookup failure for './file1' [ 108.260924][ T7194] EXT4-fs: error: could not find journal device path [ 108.268045][ T7167] syz.5.1281 (7167) used greatest stack depth: 9368 bytes left [ 108.290748][ T7194] loop1: detected capacity change from 0 to 512 [ 108.298753][ T7194] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.313741][ T7194] EXT4-fs (loop1): invalid journal inode [ 108.327064][ T7194] loop1: detected capacity change from 0 to 256 [ 108.334411][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.344531][ T7194] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.495766][ T7213] loop1: detected capacity change from 0 to 512 [ 108.565283][ T7213] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 108.573677][ T7213] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 108.587434][ T7213] EXT4-fs (loop1): 1 truncate cleaned up [ 108.593488][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.675006][ T7229] loop2: detected capacity change from 0 to 2048 [ 108.681634][ T7229] EXT4-fs: Ignoring removed nobh option [ 108.707062][ T7211] syzkaller0: entered promiscuous mode [ 108.712617][ T7211] syzkaller0: entered allmulticast mode [ 108.736731][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.748947][ T7229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.801159][ T7229] FAULT_INJECTION: forcing a failure. [ 108.801159][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 108.813869][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.2.1304 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 108.824617][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.834749][ T7229] Call Trace: [ 108.838040][ T7229] [ 108.840973][ T7229] dump_stack_lvl+0xf2/0x150 [ 108.845585][ T7229] dump_stack+0x15/0x20 [ 108.849755][ T7229] should_fail_ex+0x223/0x230 [ 108.854488][ T7229] ? sidtab_sid2str_get+0xb8/0x140 [ 108.859684][ T7229] should_failslab+0x8f/0xb0 [ 108.864370][ T7229] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 108.870816][ T7229] ? vsnprintf+0xdd8/0xe30 [ 108.875287][ T7229] kmemdup_noprof+0x2a/0x60 [ 108.879815][ T7229] sidtab_sid2str_get+0xb8/0x140 [ 108.884770][ T7229] security_sid_to_context_core+0x1eb/0x2f0 [ 108.890688][ T7229] security_sid_to_context+0x27/0x30 [ 108.896034][ T7229] selinux_secid_to_secctx+0x22/0x30 [ 108.901346][ T7229] security_secid_to_secctx+0x48/0x90 [ 108.906740][ T7229] audit_log_task_context+0x8c/0x1b0 [ 108.912101][ T7229] audit_log_task+0xfb/0x180 [ 108.916787][ T7229] audit_seccomp+0x68/0x130 [ 108.921366][ T7229] __seccomp_filter+0x6fa/0x1180 [ 108.926364][ T7229] __secure_computing+0x9f/0x1c0 [ 108.931351][ T7229] syscall_trace_enter+0xd1/0x1f0 [ 108.936474][ T7229] ? fpregs_assert_state_consistent+0x83/0xa0 [ 108.942657][ T7229] do_syscall_64+0xaa/0x1c0 [ 108.947168][ T7229] ? clear_bhb_loop+0x55/0xb0 [ 108.951848][ T7229] ? clear_bhb_loop+0x55/0xb0 [ 108.956598][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.962544][ T7229] RIP: 0033:0x7ff6e96ed15c [ 108.967035][ T7229] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 108.986646][ T7229] RSP: 002b:00007ff6e8361030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.995150][ T7229] RAX: ffffffffffffffda RBX: 00007ff6e98a5f80 RCX: 00007ff6e96ed15c [ 109.003119][ T7229] RDX: 000000000000000f RSI: 00007ff6e83610a0 RDI: 0000000000000007 [ 109.011166][ T7229] RBP: 00007ff6e8361090 R08: 0000000000000000 R09: 0000000000000000 [ 109.019202][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.027335][ T7229] R13: 0000000000000000 R14: 00007ff6e98a5f80 R15: 00007fffafca8d58 [ 109.035402][ T7229] [ 109.068346][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.129039][ T7248] loop3: detected capacity change from 0 to 1024 [ 109.155407][ T7248] ext4: Bad value for 'sb' [ 109.160778][ T7255] syz.2.1307[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.160835][ T7255] syz.2.1307[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.186247][ T7255] syz.2.1307[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.267452][ T7256] hub 2-0:1.0: USB hub found [ 109.285612][ T7256] hub 2-0:1.0: 8 ports detected [ 109.338070][ T7255] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 109.819713][ T7273] loop2: detected capacity change from 0 to 512 [ 109.827922][ T7273] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 109.836117][ T7273] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 109.844938][ T7273] EXT4-fs (loop2): 1 truncate cleaned up [ 109.850999][ T7273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.875253][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.903981][ T7278] FAULT_INJECTION: forcing a failure. [ 109.903981][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 109.916719][ T7278] CPU: 0 UID: 0 PID: 7278 Comm: syz.2.1318 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 109.927421][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.937526][ T7278] Call Trace: [ 109.940792][ T7278] [ 109.943726][ T7278] dump_stack_lvl+0xf2/0x150 [ 109.948331][ T7278] dump_stack+0x15/0x20 [ 109.952503][ T7278] should_fail_ex+0x223/0x230 [ 109.957212][ T7278] ? security_file_alloc+0x32/0x100 [ 109.962453][ T7278] should_failslab+0x8f/0xb0 [ 109.967093][ T7278] kmem_cache_alloc_noprof+0x4c/0x290 [ 109.972488][ T7278] security_file_alloc+0x32/0x100 [ 109.977539][ T7278] alloc_empty_file+0x121/0x2f0 [ 109.982404][ T7278] path_openat+0x6a/0x1fa0 [ 109.986850][ T7278] ? _parse_integer_limit+0x167/0x180 [ 109.992355][ T7278] ? kstrtoull+0x110/0x140 [ 109.996791][ T7278] ? kstrtouint+0x77/0xc0 [ 110.001216][ T7278] ? kstrtouint_from_user+0xb0/0xe0 [ 110.006483][ T7278] do_filp_open+0xf7/0x200 [ 110.010934][ T7278] do_sys_openat2+0xab/0x120 [ 110.015539][ T7278] __x64_sys_openat+0xf3/0x120 [ 110.020309][ T7278] x64_sys_call+0x1025/0x2d60 [ 110.025070][ T7278] do_syscall_64+0xc9/0x1c0 [ 110.029583][ T7278] ? clear_bhb_loop+0x55/0xb0 [ 110.034294][ T7278] ? clear_bhb_loop+0x55/0xb0 [ 110.039004][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.044958][ T7278] RIP: 0033:0x7ff6e96ee719 [ 110.049403][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.069135][ T7278] RSP: 002b:00007ff6e8361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.077573][ T7278] RAX: ffffffffffffffda RBX: 00007ff6e98a5f80 RCX: 00007ff6e96ee719 [ 110.085693][ T7278] RDX: 0000000000470082 RSI: 0000000020000280 RDI: 0000000000000003 [ 110.093667][ T7278] RBP: 00007ff6e8361090 R08: 0000000000000000 R09: 0000000000000000 [ 110.101689][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.109696][ T7278] R13: 0000000000000000 R14: 00007ff6e98a5f80 R15: 00007fffafca8d58 [ 110.117677][ T7278] [ 110.128641][ T29] kauditd_printk_skb: 876 callbacks suppressed [ 110.128740][ T29] audit: type=1400 audit(1730377688.940:8807): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 110.201718][ T29] audit: type=1326 audit(1730377689.010:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.226206][ T29] audit: type=1326 audit(1730377689.020:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.249686][ T29] audit: type=1326 audit(1730377689.020:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.273143][ T29] audit: type=1326 audit(1730377689.020:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.296685][ T29] audit: type=1326 audit(1730377689.020:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.320142][ T29] audit: type=1326 audit(1730377689.020:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.343754][ T29] audit: type=1326 audit(1730377689.020:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.367249][ T29] audit: type=1326 audit(1730377689.020:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.390738][ T29] audit: type=1326 audit(1730377689.020:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30456ce719 code=0x7ffc0000 [ 110.415559][ T7304] FAULT_INJECTION: forcing a failure. [ 110.415559][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 110.428292][ T7304] CPU: 0 UID: 0 PID: 7304 Comm: syz.0.1327 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 110.439038][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.449111][ T7304] Call Trace: [ 110.452384][ T7304] [ 110.455310][ T7304] dump_stack_lvl+0xf2/0x150 [ 110.459938][ T7304] dump_stack+0x15/0x20 [ 110.464112][ T7304] should_fail_ex+0x223/0x230 [ 110.468801][ T7304] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 110.475125][ T7304] should_failslab+0x8f/0xb0 [ 110.479733][ T7304] __kmalloc_noprof+0xa5/0x370 [ 110.484554][ T7304] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 110.490731][ T7304] ? ns_capable+0x7d/0xb0 [ 110.495081][ T7304] genl_rcv_msg+0x470/0x6c0 [ 110.499585][ T7304] ? __pfx_wg_set_device+0x10/0x10 [ 110.504722][ T7304] ? ref_tracker_free+0x3a5/0x410 [ 110.509826][ T7304] ? __dev_queue_xmit+0x161/0x2040 [ 110.514945][ T7304] ? ref_tracker_alloc+0x1f5/0x2f0 [ 110.520105][ T7304] netlink_rcv_skb+0x12c/0x230 [ 110.524909][ T7304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.530104][ T7304] genl_rcv+0x28/0x40 [ 110.534099][ T7304] netlink_unicast+0x599/0x670 [ 110.538898][ T7304] netlink_sendmsg+0x5cc/0x6e0 [ 110.543720][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.549066][ T7304] __sock_sendmsg+0x140/0x180 [ 110.553748][ T7304] ____sys_sendmsg+0x312/0x410 [ 110.558531][ T7304] __sys_sendmsg+0x1d9/0x270 [ 110.563145][ T7304] __x64_sys_sendmsg+0x46/0x50 [ 110.567925][ T7304] x64_sys_call+0x2689/0x2d60 [ 110.572648][ T7304] do_syscall_64+0xc9/0x1c0 [ 110.577246][ T7304] ? clear_bhb_loop+0x55/0xb0 [ 110.582030][ T7304] ? clear_bhb_loop+0x55/0xb0 [ 110.586707][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.592735][ T7304] RIP: 0033:0x7f30456ce719 [ 110.597193][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.616801][ T7304] RSP: 002b:00007f3044347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.625212][ T7304] RAX: ffffffffffffffda RBX: 00007f3045885f80 RCX: 00007f30456ce719 [ 110.633179][ T7304] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 110.641148][ T7304] RBP: 00007f3044347090 R08: 0000000000000000 R09: 0000000000000000 [ 110.649127][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.657107][ T7304] R13: 0000000000000000 R14: 00007f3045885f80 R15: 00007ffe308f47e8 [ 110.665124][ T7304] [ 110.688692][ T7308] loop1: detected capacity change from 0 to 512 [ 110.697380][ T7312] loop0: detected capacity change from 0 to 512 [ 110.731052][ T7308] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 110.736107][ T7319] loop2: detected capacity change from 0 to 512 [ 110.739347][ T7308] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 110.747599][ T7312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.763354][ T7308] EXT4-fs (loop1): 1 truncate cleaned up [ 110.765971][ T7312] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.784711][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.819110][ T7319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.831781][ T7319] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.843207][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.844807][ T7331] FAULT_INJECTION: forcing a failure. [ 110.844807][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.865250][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.3.1337 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 110.875936][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.886030][ T7331] Call Trace: [ 110.889332][ T7331] [ 110.892291][ T7331] dump_stack_lvl+0xf2/0x150 [ 110.896906][ T7331] dump_stack+0x15/0x20 [ 110.901097][ T7331] should_fail_ex+0x223/0x230 [ 110.905804][ T7331] should_fail+0xb/0x10 [ 110.910005][ T7331] should_fail_usercopy+0x1a/0x20 [ 110.914606][ T7332] sctp: [Deprecated]: syz.5.1335 (pid 7332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.914606][ T7332] Use struct sctp_sack_info instead [ 110.915020][ T7331] _copy_from_user+0x20/0xe0 [ 110.935839][ T7331] copy_msghdr_from_user+0x54/0x2a0 [ 110.941057][ T7331] __sys_sendmsg+0x171/0x270 [ 110.945695][ T7331] __x64_sys_sendmsg+0x46/0x50 [ 110.945735][ T7331] x64_sys_call+0x2689/0x2d60 [ 110.945771][ T7331] do_syscall_64+0xc9/0x1c0 [ 110.945812][ T7331] ? clear_bhb_loop+0x55/0xb0 [ 110.964433][ T7331] ? clear_bhb_loop+0x55/0xb0 [ 110.969192][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.975215][ T7331] RIP: 0033:0x7efd8c0fe719 [ 110.979619][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.999261][ T7331] RSP: 002b:00007efd8ad77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.007665][ T7331] RAX: ffffffffffffffda RBX: 00007efd8c2b5f80 RCX: 00007efd8c0fe719 [ 111.015696][ T7331] RDX: 0000000000000004 RSI: 0000000020000780 RDI: 0000000000000005 [ 111.023813][ T7331] RBP: 00007efd8ad77090 R08: 0000000000000000 R09: 0000000000000000 [ 111.031793][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.039756][ T7331] R13: 0000000000000000 R14: 00007efd8c2b5f80 R15: 00007ffef1d212e8 [ 111.047775][ T7331] [ 111.052571][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.065605][ T7334] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.075478][ T7334] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.142410][ T7355] loop2: detected capacity change from 0 to 2048 [ 111.167178][ T7355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.174390][ T7359] kernel profiling enabled (shift: 0) [ 111.243495][ T7366] loop1: detected capacity change from 0 to 256 [ 111.266087][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.285144][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.293445][ T7369] rdma_rxe: rxe_newlink: failed to add vcan0 [ 111.299796][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.306712][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.313487][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.339395][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.349157][ T7366] FAT-fs (loop1): Directory bread(block 1285) failed [ 111.357254][ T7366] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 111.364120][ T7371] SELinux: failed to load policy [ 111.390076][ T7375] loop2: detected capacity change from 0 to 512 [ 111.410784][ T7359] ebtables: ebtables: counters copy to user failed while replacing table [ 111.420571][ T7375] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.443943][ T7381] loop5: detected capacity change from 0 to 512 [ 111.450550][ T7381] EXT4-fs: Ignoring removed orlov option [ 111.457529][ T7381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.492445][ T7381] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.518197][ T7381] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1351: bg 0: block 255: padding at end of block bitmap is not set [ 111.532293][ T7396] loop1: detected capacity change from 0 to 2048 [ 111.533375][ T7381] EXT4-fs (loop5): Remounting filesystem read-only [ 111.555265][ T7381] syzkaller1: entered promiscuous mode [ 111.560884][ T7381] syzkaller1: entered allmulticast mode [ 111.571002][ T7396] FAULT_INJECTION: forcing a failure. [ 111.571002][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 111.583705][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.1.1355 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 111.594401][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.604472][ T7396] Call Trace: [ 111.607843][ T7396] [ 111.610806][ T7396] dump_stack_lvl+0xf2/0x150 [ 111.615480][ T7396] dump_stack+0x15/0x20 [ 111.619632][ T7396] should_fail_ex+0x223/0x230 [ 111.624460][ T7396] ? __es_insert_extent+0x563/0xed0 [ 111.629708][ T7396] should_failslab+0x8f/0xb0 [ 111.634300][ T7396] kmem_cache_alloc_noprof+0x4c/0x290 [ 111.639734][ T7396] ? bpf_probe_read_compat_str+0xd2/0x130 [ 111.645461][ T7396] __es_insert_extent+0x563/0xed0 [ 111.650531][ T7396] ? bpf_trace_run2+0x123/0x1d0 [ 111.655466][ T7396] ? ___slab_alloc+0x136/0x980 [ 111.660246][ T7396] ext4_es_insert_extent+0x45a/0x1c80 [ 111.665639][ T7396] ? ext4_find_extent+0x172/0x7c0 [ 111.670728][ T7396] ? __kmalloc_noprof+0x165/0x370 [ 111.675840][ T7396] ext4_ext_map_blocks+0x1579/0x35c0 [ 111.681134][ T7396] ? strncpy_from_user_nofault+0xd9/0xe0 [ 111.686848][ T7396] ? invalidate_inode_pages2_range+0x6ea/0x730 [ 111.693056][ T7396] ? folio_mark_accessed+0x11b/0x360 [ 111.698366][ T7396] ext4_map_query_blocks+0x71/0x180 [ 111.703561][ T7396] ext4_map_blocks+0x238/0xcf0 [ 111.708337][ T7396] ? __ext4_journal_start_sb+0x130/0x340 [ 111.714023][ T7396] ext4_iomap_begin+0x4a9/0x5d0 [ 111.718888][ T7396] iomap_iter+0x3cc/0x800 [ 111.723328][ T7396] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 111.728702][ T7396] __iomap_dio_rw+0x697/0x1090 [ 111.733524][ T7396] ? __vfs_getxattr+0x29f/0x2b0 [ 111.738446][ T7396] iomap_dio_rw+0x40/0x90 [ 111.742780][ T7396] ext4_file_write_iter+0xa8c/0xe10 [ 111.748086][ T7396] do_iter_readv_writev+0x394/0x450 [ 111.753418][ T7396] vfs_writev+0x2d4/0x880 [ 111.757816][ T7396] ? proc_fail_nth_write+0x12a/0x150 [ 111.763104][ T7396] __se_sys_pwritev2+0x10c/0x1d0 [ 111.768049][ T7396] __x64_sys_pwritev2+0x78/0x90 [ 111.772968][ T7396] x64_sys_call+0x271f/0x2d60 [ 111.777721][ T7396] do_syscall_64+0xc9/0x1c0 [ 111.782228][ T7396] ? clear_bhb_loop+0x55/0xb0 [ 111.786914][ T7396] ? clear_bhb_loop+0x55/0xb0 [ 111.791585][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.797502][ T7396] RIP: 0033:0x7f91e477e719 [ 111.801904][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.821552][ T7396] RSP: 002b:00007f91e33f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 111.830053][ T7396] RAX: ffffffffffffffda RBX: 00007f91e4935f80 RCX: 00007f91e477e719 [ 111.838062][ T7396] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 111.846162][ T7396] RBP: 00007f91e33f1090 R08: 0000000000000000 R09: 0000000000000003 [ 111.854141][ T7396] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 111.862115][ T7396] R13: 0000000000000000 R14: 00007f91e4935f80 R15: 00007ffd4684f2d8 [ 111.870163][ T7396] [ 111.906444][ T7406] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1358'. [ 111.964182][ T7414] loop1: detected capacity change from 0 to 512 [ 111.983745][ T7414] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.012760][ T7410] veth0_vlan: entered allmulticast mode [ 112.243517][ T7445] loop1: detected capacity change from 0 to 512 [ 112.278845][ T7445] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 112.287658][ T7445] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 112.300648][ T7445] EXT4-fs (loop1): 1 truncate cleaned up [ 112.305537][ T7452] loop3: detected capacity change from 0 to 512 [ 112.325580][ T7452] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.401247][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1378'. [ 112.532133][ T7475] FAULT_INJECTION: forcing a failure. [ 112.532133][ T7475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.545323][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.1.1384 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 112.556010][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.566061][ T7475] Call Trace: [ 112.569329][ T7475] [ 112.572281][ T7475] dump_stack_lvl+0xf2/0x150 [ 112.576880][ T7475] dump_stack+0x15/0x20 [ 112.581043][ T7475] should_fail_ex+0x223/0x230 [ 112.585735][ T7475] should_fail+0xb/0x10 [ 112.589895][ T7475] should_fail_usercopy+0x1a/0x20 [ 112.594975][ T7475] _copy_from_user+0x20/0xe0 [ 112.599588][ T7475] __x64_sys_setrlimit+0x5f/0xc0 [ 112.604533][ T7475] x64_sys_call+0x296d/0x2d60 [ 112.609362][ T7475] do_syscall_64+0xc9/0x1c0 [ 112.613935][ T7475] ? clear_bhb_loop+0x55/0xb0 [ 112.618608][ T7475] ? clear_bhb_loop+0x55/0xb0 [ 112.623350][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.629253][ T7475] RIP: 0033:0x7f91e477e719 [ 112.633737][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.653342][ T7475] RSP: 002b:00007f91e33f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 112.661835][ T7475] RAX: ffffffffffffffda RBX: 00007f91e4935f80 RCX: 00007f91e477e719 [ 112.669803][ T7475] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0040000000000008 [ 112.677862][ T7475] RBP: 00007f91e33f1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.685841][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.693902][ T7475] R13: 0000000000000001 R14: 00007f91e4935f80 R15: 00007ffd4684f2d8 [ 112.701892][ T7475] [ 112.738921][ T7477] loop5: detected capacity change from 0 to 512 [ 112.754456][ T7477] ext4: Unknown parameter 'mask' [ 112.769510][ T7477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1386'. [ 112.778648][ T7477] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1386'. [ 112.787615][ T7477] netlink: 'syz.5.1386': attribute type 5 has an invalid length. [ 112.795524][ T7477] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1386'. [ 112.857698][ T7493] loop3: detected capacity change from 0 to 512 [ 112.887583][ T7493] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 112.897103][ T7493] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 112.939853][ T7493] EXT4-fs (loop3): 1 truncate cleaned up [ 113.035176][ T7522] FAULT_INJECTION: forcing a failure. [ 113.035176][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 113.047886][ T7522] CPU: 0 UID: 0 PID: 7522 Comm: syz.3.1403 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 113.058594][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.068724][ T7522] Call Trace: [ 113.072011][ T7522] [ 113.074984][ T7522] dump_stack_lvl+0xf2/0x150 [ 113.079604][ T7522] dump_stack+0x15/0x20 [ 113.083785][ T7522] should_fail_ex+0x223/0x230 [ 113.088504][ T7522] ? lsm_fill_user_ctx+0x89/0x190 [ 113.093554][ T7522] should_failslab+0x8f/0xb0 [ 113.098170][ T7522] __kmalloc_noprof+0xa5/0x370 [ 113.102976][ T7522] lsm_fill_user_ctx+0x89/0x190 [ 113.107916][ T7522] selinux_getselfattr+0x8a/0xe0 [ 113.112874][ T7522] security_getselfattr+0x258/0x590 [ 113.118155][ T7522] __x64_sys_lsm_get_self_attr+0x53/0x60 [ 113.123800][ T7522] x64_sys_call+0x27a1/0x2d60 [ 113.128494][ T7522] do_syscall_64+0xc9/0x1c0 [ 113.133065][ T7522] ? clear_bhb_loop+0x55/0xb0 [ 113.137868][ T7522] ? clear_bhb_loop+0x55/0xb0 [ 113.142563][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.148507][ T7522] RIP: 0033:0x7efd8c0fe719 [ 113.152929][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.172586][ T7522] RSP: 002b:00007efd8ad77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 113.181022][ T7522] RAX: ffffffffffffffda RBX: 00007efd8c2b5f80 RCX: 00007efd8c0fe719 [ 113.189006][ T7522] RDX: 0000000020001280 RSI: 00000000200004c0 RDI: 0000000000000069 [ 113.197036][ T7522] RBP: 00007efd8ad77090 R08: 0000000000000000 R09: 0000000000000000 [ 113.205014][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.213028][ T7522] R13: 0000000000000000 R14: 00007efd8c2b5f80 R15: 00007ffef1d212e8 [ 113.221046][ T7522] [ 113.327433][ T7545] loop1: detected capacity change from 0 to 512 [ 113.361548][ T7545] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 113.378489][ T7545] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 113.451012][ T7545] EXT4-fs (loop1): 1 truncate cleaned up [ 113.639438][ T7564] loop3: detected capacity change from 0 to 164 [ 113.652743][ T7564] Unable to read rock-ridge attributes [ 113.654912][ T7567] loop1: detected capacity change from 0 to 164 [ 113.665664][ T7564] Unable to read rock-ridge attributes [ 113.679822][ T7567] Unable to read rock-ridge attributes [ 113.687811][ T7567] Unable to read rock-ridge attributes [ 113.755045][ T7573] xt_hashlimit: max too large, truncated to 1048576 [ 113.960241][ T7587] SELinux: Context k is not valid (left unmapped). [ 114.037095][ T7596] loop3: detected capacity change from 0 to 164 [ 114.078640][ T7596] Unable to read rock-ridge attributes [ 114.092170][ T7596] Unable to read rock-ridge attributes [ 114.632470][ T7639] loop3: detected capacity change from 0 to 164 [ 114.647717][ T7639] Unable to read rock-ridge attributes [ 114.661243][ T7639] Unable to read rock-ridge attributes [ 114.665698][ T7641] loop1: detected capacity change from 0 to 512 [ 114.688312][ T7641] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 114.698921][ T7641] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 114.710849][ T7641] EXT4-fs (loop1): 1 truncate cleaned up [ 114.911938][ T7664] loop3: detected capacity change from 0 to 2048 [ 114.927903][ T7663] loop1: detected capacity change from 0 to 2048 [ 114.944829][ T7663] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 115.040638][ T7674] loop1: detected capacity change from 0 to 164 [ 115.058201][ T7674] Unable to read rock-ridge attributes [ 115.059992][ T7677] loop2: detected capacity change from 0 to 512 [ 115.064824][ T7674] Unable to read rock-ridge attributes [ 115.082763][ T7677] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 115.114164][ T7677] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 115.129456][ T7682] loop1: detected capacity change from 0 to 2048 [ 115.137329][ T7677] EXT4-fs (loop2): 1 truncate cleaned up [ 115.162188][ T7682] FAULT_INJECTION: forcing a failure. [ 115.162188][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 115.174990][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.1.1469 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 115.185670][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.195780][ T7682] Call Trace: [ 115.199093][ T7682] [ 115.202041][ T7682] dump_stack_lvl+0xf2/0x150 [ 115.206671][ T7682] dump_stack+0x15/0x20 [ 115.210879][ T7682] should_fail_ex+0x223/0x230 [ 115.215577][ T7682] ? __es_insert_extent+0x563/0xed0 [ 115.220948][ T7682] should_failslab+0x8f/0xb0 [ 115.225557][ T7682] kmem_cache_alloc_noprof+0x4c/0x290 [ 115.230958][ T7682] __es_insert_extent+0x563/0xed0 [ 115.236007][ T7682] ? check_map_func_compatibility+0xfa0/0x1060 [ 115.242251][ T7682] ext4_es_insert_extent+0x45a/0x1c80 [ 115.247654][ T7682] ? __kmalloc_noprof+0x165/0x370 [ 115.252710][ T7682] ext4_ext_map_blocks+0x1579/0x35c0 [ 115.258020][ T7682] ? invalidate_inode_pages2_range+0x6ea/0x730 [ 115.264177][ T7682] ? folio_mark_accessed+0x11b/0x360 [ 115.269589][ T7682] ext4_map_query_blocks+0x71/0x180 [ 115.274813][ T7682] ext4_map_blocks+0x238/0xcf0 [ 115.279599][ T7682] ? __ext4_journal_start_sb+0x130/0x340 [ 115.285314][ T7682] ext4_iomap_begin+0x4a9/0x5d0 [ 115.290193][ T7682] iomap_iter+0x3cc/0x800 [ 115.294535][ T7682] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 115.300005][ T7682] __iomap_dio_rw+0x697/0x1090 [ 115.304817][ T7682] ? __vfs_getxattr+0x29f/0x2b0 [ 115.309750][ T7682] iomap_dio_rw+0x40/0x90 [ 115.314090][ T7682] ext4_file_write_iter+0xa8c/0xe10 [ 115.319300][ T7682] do_iter_readv_writev+0x394/0x450 [ 115.324594][ T7682] vfs_writev+0x2d4/0x880 [ 115.329067][ T7682] ? proc_fail_nth_write+0x12a/0x150 [ 115.334426][ T7682] __se_sys_pwritev2+0x10c/0x1d0 [ 115.339396][ T7682] __x64_sys_pwritev2+0x78/0x90 [ 115.344245][ T7682] x64_sys_call+0x271f/0x2d60 [ 115.348930][ T7682] do_syscall_64+0xc9/0x1c0 [ 115.353521][ T7682] ? clear_bhb_loop+0x55/0xb0 [ 115.358189][ T7682] ? clear_bhb_loop+0x55/0xb0 [ 115.362881][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.368850][ T7682] RIP: 0033:0x7f91e477e719 [ 115.373271][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.392870][ T7682] RSP: 002b:00007f91e33f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 115.401287][ T7682] RAX: ffffffffffffffda RBX: 00007f91e4935f80 RCX: 00007f91e477e719 [ 115.409290][ T7682] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 115.417378][ T7682] RBP: 00007f91e33f1090 R08: 0000000000000000 R09: 0000000000000003 [ 115.425403][ T7682] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 115.433369][ T7682] R13: 0000000000000000 R14: 00007f91e4935f80 R15: 00007ffd4684f2d8 [ 115.441344][ T7682] [ 115.476140][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 115.476152][ T29] audit: type=1326 audit(1730377694.290:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.507827][ T29] audit: type=1326 audit(1730377694.320:9697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.531315][ T29] audit: type=1326 audit(1730377694.320:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.554837][ T29] audit: type=1326 audit(1730377694.320:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.587285][ T29] audit: type=1326 audit(1730377694.340:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.610910][ T29] audit: type=1326 audit(1730377694.340:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.634313][ T29] audit: type=1326 audit(1730377694.340:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.657731][ T29] audit: type=1326 audit(1730377694.340:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.681213][ T29] audit: type=1326 audit(1730377694.340:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.704631][ T29] audit: type=1326 audit(1730377694.340:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7689 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 115.801887][ T7707] loop3: detected capacity change from 0 to 2048 [ 115.839305][ T7707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1477'. [ 115.860768][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1477'. [ 115.995497][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 116.004419][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 116.033032][ T7722] 9pnet: Could not find request transport: f [ 116.605857][ T7774] loop3: detected capacity change from 0 to 512 [ 116.627114][ T7774] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.711814][ T7784] loop2: detected capacity change from 0 to 512 [ 116.745387][ T7784] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.764405][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 116.773641][ T7784] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.813306][ T7796] loop2: detected capacity change from 0 to 512 [ 116.830312][ T7796] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 116.838579][ T7796] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 116.855790][ T7796] EXT4-fs (loop2): 1 truncate cleaned up [ 117.038173][ T7810] loop3: detected capacity change from 0 to 512 [ 117.047173][ T7810] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 117.059847][ T7810] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 117.068521][ T7810] EXT4-fs (loop3): 1 truncate cleaned up [ 117.211090][ T7835] loop2: detected capacity change from 0 to 512 [ 117.239765][ T7835] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.311956][ T7853] usb usb9: usbfs: process 7853 (syz.1.1526) did not claim interface 0 before use [ 117.397193][ T7863] loop5: detected capacity change from 0 to 512 [ 117.437581][ T7863] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.474573][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1531'. [ 117.512577][ T7863] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.628609][ T7879] loop5: detected capacity change from 0 to 512 [ 117.656477][ T7879] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.744399][ T7897] usb usb9: usbfs: process 7897 (syz.1.1545) did not claim interface 0 before use [ 117.765591][ T7895] loop0: detected capacity change from 0 to 164 [ 117.786912][ T7895] Unable to read rock-ridge attributes [ 117.801896][ T7895] Unable to read rock-ridge attributes [ 117.950705][ T7905] loop1: detected capacity change from 0 to 512 [ 117.986011][ T7905] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 118.004640][ T7905] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 118.029980][ T7905] EXT4-fs (loop1): 1 truncate cleaned up [ 118.212044][ T7923] loop3: detected capacity change from 0 to 1024 [ 118.220473][ T7923] ext4: Bad value for 'sb' [ 118.226847][ T7928] usb usb9: usbfs: process 7928 (syz.0.1558) did not claim interface 0 before use [ 118.858731][ T7951] loop5: detected capacity change from 0 to 512 [ 118.900868][ T7951] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 118.918458][ T7951] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 118.939214][ T7951] EXT4-fs (loop5): 1 truncate cleaned up [ 119.081403][ T7964] loop5: detected capacity change from 0 to 164 [ 119.101410][ T7969] loop1: detected capacity change from 0 to 164 [ 119.116476][ T7969] Unable to read rock-ridge attributes [ 119.123870][ T7969] Unable to read rock-ridge attributes [ 119.139429][ T7964] Unable to read rock-ridge attributes [ 119.149732][ T7964] Unable to read rock-ridge attributes [ 119.215517][ T7975] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.230233][ T7979] usb usb9: usbfs: process 7979 (syz.5.1575) did not claim interface 0 before use [ 119.406414][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 119.415349][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 119.432202][ T7992] loop3: detected capacity change from 0 to 512 [ 119.452818][ T7992] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 119.460954][ T7992] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 119.462329][ T7990] 9pnet: Could not find request transport: f [ 119.478982][ T7998] loop1: detected capacity change from 0 to 512 [ 119.486964][ T7992] EXT4-fs (loop3): 1 truncate cleaned up [ 119.489541][ T7998] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 119.521041][ T7998] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 119.549384][ T7998] EXT4-fs (loop1): 1 truncate cleaned up [ 119.562347][ T8001] loop3: detected capacity change from 0 to 164 [ 119.572457][ T8001] Unable to read rock-ridge attributes [ 119.601784][ T8001] Unable to read rock-ridge attributes [ 119.604797][ T8003] loop5: detected capacity change from 0 to 2048 [ 119.662968][ T8007] loop3: detected capacity change from 0 to 512 [ 119.700620][ T8007] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.723765][ T8003] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1584'. [ 119.748223][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 119.769253][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1584'. [ 119.781131][ T8013] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.796786][ T8007] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.908446][ T8020] usb usb9: usbfs: process 8020 (syz.1.1589) did not claim interface 0 before use [ 119.972585][ T8029] loop5: detected capacity change from 0 to 512 [ 119.980301][ T8029] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 119.988479][ T8029] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 119.997743][ T8029] EXT4-fs (loop5): 1 truncate cleaned up [ 120.091918][ T8045] loop1: detected capacity change from 0 to 164 [ 120.093733][ T8043] loop3: detected capacity change from 0 to 512 [ 120.105301][ T8045] Unable to read rock-ridge attributes [ 120.112345][ T8045] Unable to read rock-ridge attributes [ 120.119389][ T8043] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.137416][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 120.146869][ T8043] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.162368][ T8055] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 120.188464][ T8059] loop1: detected capacity change from 0 to 512 [ 120.210159][ T8059] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.225737][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 120.235410][ T8059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.266716][ T8065] usb usb9: usbfs: process 8065 (syz.1.1607) did not claim interface 0 before use [ 120.281101][ T8067] loop3: detected capacity change from 0 to 512 [ 120.289441][ T8067] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 120.297756][ T8067] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 120.306597][ T8067] EXT4-fs (loop3): 1 truncate cleaned up [ 120.480478][ T8097] loop2: detected capacity change from 0 to 512 [ 120.488954][ T8097] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 120.497465][ T8097] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 120.506570][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 120.506583][ T29] audit: type=1326 audit(1730377699.330:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.2.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff6e96ee719 code=0x7ffc0000 [ 120.540688][ T8097] EXT4-fs (loop2): 1 truncate cleaned up [ 120.583012][ T29] audit: type=1326 audit(1730377699.390:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.607906][ T29] audit: type=1326 audit(1730377699.390:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.631507][ T29] audit: type=1326 audit(1730377699.390:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.650539][ T8109] usb usb9: usbfs: process 8109 (syz.1.1625) did not claim interface 0 before use [ 120.655209][ T29] audit: type=1326 audit(1730377699.390:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.655233][ T29] audit: type=1326 audit(1730377699.390:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.711800][ T29] audit: type=1326 audit(1730377699.390:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.735384][ T29] audit: type=1326 audit(1730377699.390:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.758982][ T29] audit: type=1326 audit(1730377699.390:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.782586][ T29] audit: type=1326 audit(1730377699.390:10460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f91e477e719 code=0x7ffc0000 [ 120.945450][ T8131] loop3: detected capacity change from 0 to 512 [ 120.963450][ T8131] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 120.972312][ T8131] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 120.982214][ T8131] EXT4-fs (loop3): 1 truncate cleaned up [ 121.015888][ T8142] loop5: detected capacity change from 0 to 164 [ 121.023887][ T8142] Unable to read rock-ridge attributes [ 121.035260][ T8142] Unable to read rock-ridge attributes [ 121.073739][ T8153] usb usb9: usbfs: process 8153 (syz.5.1642) did not claim interface 0 before use [ 121.141513][ T8165] loop3: detected capacity change from 0 to 164 [ 121.149514][ T8165] Unable to read rock-ridge attributes [ 121.156789][ T8165] Unable to read rock-ridge attributes [ 121.205557][ T8173] loop0: detected capacity change from 0 to 512 [ 121.238178][ T8173] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 121.246749][ T8173] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 121.256511][ T8173] EXT4-fs (loop0): 1 truncate cleaned up [ 121.265724][ T8179] loop1: detected capacity change from 0 to 164 [ 121.266054][ T8177] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 121.283540][ T8179] Unable to read rock-ridge attributes [ 121.291134][ T8179] Unable to read rock-ridge attributes [ 121.361292][ T8194] loop0: detected capacity change from 0 to 164 [ 121.367660][ T8193] loop1: detected capacity change from 0 to 1024 [ 121.368022][ T8193] ext4: Bad value for 'sb' [ 121.381424][ T8194] Unable to read rock-ridge attributes [ 121.388445][ T8194] Unable to read rock-ridge attributes [ 121.410912][ T8199] usb usb9: usbfs: process 8199 (syz.0.1661) did not claim interface 0 before use [ 121.940508][ T8211] loop0: detected capacity change from 0 to 512 [ 121.948377][ T8211] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 121.956454][ T8211] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 121.965597][ T8211] EXT4-fs (loop0): 1 truncate cleaned up [ 121.992358][ T8214] loop0: detected capacity change from 0 to 164 [ 122.000228][ T8214] Unable to read rock-ridge attributes [ 122.006857][ T8214] Unable to read rock-ridge attributes [ 122.039419][ T8216] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.089915][ T8222] loop3: detected capacity change from 0 to 2048 [ 122.107391][ T8222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1670'. [ 122.116498][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1670'. [ 122.226462][ T8233] loop0: detected capacity change from 0 to 512 [ 122.286960][ T8233] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.323812][ T8233] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.382966][ T8251] loop0: detected capacity change from 0 to 1024 [ 122.389989][ T8251] ext4: Bad value for 'sb' [ 123.283492][ T8279] loop5: detected capacity change from 0 to 1024 [ 123.290421][ T8279] ext4: Bad value for 'sb' [ 123.643813][ T8297] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.852940][ T8302] loop3: detected capacity change from 0 to 1024 [ 123.859629][ T8302] ext4: Bad value for 'sb' [ 123.890690][ T8305] loop1: detected capacity change from 0 to 164 [ 123.910335][ T8305] Unable to read rock-ridge attributes [ 123.916971][ T8305] Unable to read rock-ridge attributes [ 124.045979][ T8327] loop2: detected capacity change from 0 to 164 [ 124.053238][ T8327] Unable to read rock-ridge attributes [ 124.060146][ T8327] Unable to read rock-ridge attributes [ 124.248442][ T8329] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.536407][ T8344] loop2: detected capacity change from 0 to 164 [ 124.546268][ T8344] Unable to read rock-ridge attributes [ 124.552959][ T8344] Unable to read rock-ridge attributes [ 124.573848][ T8350] loop0: detected capacity change from 0 to 512 [ 124.585839][ T8350] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.591650][ T8356] loop2: detected capacity change from 0 to 512 [ 124.600970][ T8350] __nla_validate_parse: 1 callbacks suppressed [ 124.600986][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 124.604506][ T8356] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 124.609033][ T8350] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.619481][ T8356] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 124.626978][ T8358] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1718'. [ 124.636552][ T8356] EXT4-fs (loop2): 1 truncate cleaned up [ 124.774742][ T8377] loop0: detected capacity change from 0 to 2048 [ 124.794483][ T8377] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1730'. [ 124.803575][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1730'. [ 124.836428][ T8389] loop2: detected capacity change from 0 to 1024 [ 124.843225][ T8389] ext4: Bad value for 'sb' [ 124.870378][ T8393] loop0: detected capacity change from 0 to 512 [ 124.908065][ T8393] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 124.922882][ T8393] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 124.937800][ T8393] EXT4-fs (loop0): 1 truncate cleaned up [ 125.451964][ T8425] usb usb9: usbfs: process 8425 (syz.5.1749) did not claim interface 0 before use [ 125.559480][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 125.581109][ T8434] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.594040][ T29] kauditd_printk_skb: 977 callbacks suppressed [ 125.594054][ T29] audit: type=1326 audit(1730377704.400:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.623914][ T29] audit: type=1326 audit(1730377704.400:11439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.647401][ T29] audit: type=1326 audit(1730377704.400:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.670989][ T29] audit: type=1326 audit(1730377704.400:11441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.694510][ T29] audit: type=1326 audit(1730377704.400:11442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.718114][ T29] audit: type=1326 audit(1730377704.400:11443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.741597][ T29] audit: type=1326 audit(1730377704.400:11444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.770243][ T29] audit: type=1326 audit(1730377704.400:11445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.793914][ T29] audit: type=1326 audit(1730377704.400:11446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.817421][ T29] audit: type=1326 audit(1730377704.400:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.5.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 125.845803][ T8441] loop0: detected capacity change from 0 to 512 [ 125.863836][ T8441] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 125.872952][ T8441] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 125.882144][ T8441] EXT4-fs (loop0): 1 truncate cleaned up [ 125.882588][ T8447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1756'. [ 125.932298][ T8449] loop0: detected capacity change from 0 to 512 [ 125.955733][ T8449] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 125.964055][ T8449] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 125.973620][ T8449] EXT4-fs (loop0): 1 truncate cleaned up [ 126.019521][ T8459] loop0: detected capacity change from 0 to 164 [ 126.036439][ T8459] Unable to read rock-ridge attributes [ 126.046644][ T8459] Unable to read rock-ridge attributes [ 126.086475][ T8467] usb usb9: usbfs: process 8467 (syz.0.1763) did not claim interface 0 before use [ 126.158727][ T8475] loop5: detected capacity change from 0 to 1024 [ 126.170267][ T8475] ext4: Bad value for 'sb' [ 126.583921][ T8491] loop0: detected capacity change from 0 to 2048 [ 126.628875][ T8491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1772'. [ 126.701115][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'. [ 126.913860][ T8514] loop2: detected capacity change from 0 to 512 [ 126.946832][ T8514] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 126.960543][ T8514] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 126.981769][ T8514] EXT4-fs (loop2): 1 truncate cleaned up [ 127.143199][ T8523] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 127.214998][ T8532] loop1: detected capacity change from 0 to 2048 [ 127.254654][ T8532] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1787'. [ 127.303969][ T8551] loop2: detected capacity change from 0 to 1024 [ 127.329848][ T8551] ext4: Bad value for 'sb' [ 127.483182][ T8573] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 127.921483][ T8611] usb usb9: usbfs: process 8611 (syz.5.1816) did not claim interface 0 before use [ 127.971751][ T8615] loop1: detected capacity change from 0 to 512 [ 127.979694][ T8615] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 127.989564][ T8615] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 128.001870][ T8615] EXT4-fs (loop1): 1 truncate cleaned up [ 128.187766][ T8630] loop5: detected capacity change from 0 to 1024 [ 128.199698][ T8632] loop2: detected capacity change from 0 to 2048 [ 128.228676][ T8632] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1825'. [ 128.244026][ T8630] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 128.302596][ T5530] EXT4-fs unmount: 95 callbacks suppressed [ 128.302614][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.330845][ T8646] usb usb9: usbfs: process 8646 (syz.2.1830) did not claim interface 0 before use [ 128.404835][ T8654] loop1: detected capacity change from 0 to 512 [ 128.429958][ T8654] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 128.444044][ T8654] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 128.479451][ T8654] EXT4-fs (loop1): 1 truncate cleaned up [ 128.488339][ T8654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.563138][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.607575][ T8666] loop2: detected capacity change from 0 to 2048 [ 128.616881][ T8668] loop1: detected capacity change from 0 to 164 [ 128.624654][ T8668] Unable to read rock-ridge attributes [ 128.631396][ T8668] Unable to read rock-ridge attributes [ 128.649541][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.693799][ T8673] loop1: detected capacity change from 0 to 512 [ 128.715822][ T8673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.739850][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.765146][ T8673] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.851891][ T8685] loop0: detected capacity change from 0 to 1024 [ 128.870257][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.898572][ T8685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.957554][ T8685] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 128.985906][ T8690] loop2: detected capacity change from 0 to 2048 [ 129.027583][ T8690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.070121][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.085823][ T8690] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1844: bg 0: block 234: padding at end of block bitmap is not set [ 129.108518][ T8690] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 129.121009][ T8690] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.121009][ T8690] [ 129.138499][ T8702] EXT4-fs (loop2): shut down requested (0) [ 129.144085][ T8703] usb usb9: usbfs: process 8703 (syz.0.1846) did not claim interface 0 before use [ 129.158620][ T8690] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 129.181634][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.229591][ T8706] loop2: detected capacity change from 0 to 164 [ 129.252608][ T8706] Unable to read rock-ridge attributes [ 129.265513][ T8706] Unable to read rock-ridge attributes [ 129.551702][ T8726] loop1: detected capacity change from 0 to 1024 [ 129.580924][ T8726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.611266][ T8726] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 129.652806][ T8740] loop5: detected capacity change from 0 to 164 [ 129.676601][ T8741] loop0: detected capacity change from 0 to 2048 [ 129.691194][ T8740] Unable to read rock-ridge attributes [ 129.730296][ T8740] Unable to read rock-ridge attributes [ 129.743008][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.763210][ T8741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.799852][ T8741] __nla_validate_parse: 3 callbacks suppressed [ 129.799866][ T8741] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1862'. [ 129.815129][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1862'. [ 129.941130][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.956590][ T8756] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.055643][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 130.151181][ T8776] loop5: detected capacity change from 0 to 164 [ 130.172119][ T8776] Unable to read rock-ridge attributes [ 130.185648][ T8776] Unable to read rock-ridge attributes [ 130.249762][ T8786] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.433865][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 130.614389][ T29] kauditd_printk_skb: 1140 callbacks suppressed [ 130.614416][ T29] audit: type=1326 audit(1730377709.400:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.624766][ T8809] loop5: detected capacity change from 0 to 2048 [ 130.644243][ T29] audit: type=1326 audit(1730377709.400:12589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.674068][ T29] audit: type=1326 audit(1730377709.400:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.697643][ T29] audit: type=1326 audit(1730377709.400:12591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.721142][ T29] audit: type=1326 audit(1730377709.400:12592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.744667][ T29] audit: type=1326 audit(1730377709.410:12593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.768258][ T29] audit: type=1326 audit(1730377709.410:12594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.771060][ T8813] loop2: detected capacity change from 0 to 164 [ 130.791726][ T29] audit: type=1326 audit(1730377709.410:12595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.791762][ T29] audit: type=1326 audit(1730377709.410:12596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.844950][ T29] audit: type=1326 audit(1730377709.410:12597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 130.876316][ T8813] Unable to read rock-ridge attributes [ 130.877442][ T8809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.903030][ T8813] Unable to read rock-ridge attributes [ 130.943528][ T8809] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1889: bg 0: block 234: padding at end of block bitmap is not set [ 130.959141][ T8809] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 130.971522][ T8809] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.971522][ T8809] [ 130.984690][ T8809] EXT4-fs (loop5): shut down requested (0) [ 131.088690][ T8827] loop2: detected capacity change from 0 to 512 [ 131.113183][ T8827] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 131.126464][ T8827] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 131.207797][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 131.217972][ T8827] EXT4-fs (loop2): 1 truncate cleaned up [ 131.224004][ T8827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.275071][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.289540][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.342943][ T8836] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 131.486741][ T8855] loop1: detected capacity change from 0 to 2048 [ 131.514937][ T8853] loop5: detected capacity change from 0 to 164 [ 131.534471][ T8853] Unable to read rock-ridge attributes [ 131.545566][ T8853] Unable to read rock-ridge attributes [ 131.552464][ T8855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.619224][ T8855] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1908'. [ 131.645798][ T8865] loop5: detected capacity change from 0 to 512 [ 131.663562][ T8865] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 131.671903][ T8865] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 131.687916][ T8865] EXT4-fs (loop5): 1 truncate cleaned up [ 131.694008][ T8865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.714859][ T8868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1911'. [ 131.723906][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1911'. [ 131.756412][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.812450][ T8873] loop1: detected capacity change from 0 to 1024 [ 131.842920][ T8873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.855595][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.866595][ T8871] loop0: detected capacity change from 0 to 2048 [ 131.916159][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.946366][ T8871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.967392][ T8878] loop5: detected capacity change from 0 to 2048 [ 131.973887][ T8871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1914: bg 0: block 234: padding at end of block bitmap is not set [ 132.005617][ T8886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1917'. [ 132.016008][ T8878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.035884][ T8871] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 132.048321][ T8871] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.048321][ T8871] [ 132.111622][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.173821][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.232087][ T8903] loop0: detected capacity change from 0 to 164 [ 132.258815][ T8903] Unable to read rock-ridge attributes [ 132.270094][ T8903] Unable to read rock-ridge attributes [ 132.318315][ T8912] loop0: detected capacity change from 0 to 512 [ 132.337565][ T8912] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 132.354998][ T8912] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 132.379603][ T8912] EXT4-fs (loop0): 1 truncate cleaned up [ 132.391132][ T8916] loop5: detected capacity change from 0 to 1024 [ 132.402407][ T8912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.460347][ T8916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.502707][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.534106][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.583491][ T8925] usb usb9: usbfs: process 8925 (syz.0.1931) did not claim interface 0 before use [ 132.595957][ T8929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1933'. [ 132.702970][ T8943] loop0: detected capacity change from 0 to 1024 [ 132.726850][ T8943] ext4: Bad value for 'sb' [ 132.758967][ T8951] loop5: detected capacity change from 0 to 512 [ 132.783319][ T8954] loop3: detected capacity change from 0 to 164 [ 132.802450][ T8951] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 132.811941][ T8951] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 132.823900][ T8951] EXT4-fs (loop5): 1 truncate cleaned up [ 132.833363][ T8951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.924912][ T8954] Unable to read rock-ridge attributes [ 132.931370][ T8954] Unable to read rock-ridge attributes [ 132.937480][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.151750][ T8970] usb usb9: usbfs: process 8970 (syz.3.1950) did not claim interface 0 before use [ 133.218966][ T8968] loop5: detected capacity change from 0 to 1024 [ 133.296229][ T8968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.392804][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.431114][ T8977] loop2: detected capacity change from 0 to 164 [ 133.447407][ T8977] Unable to read rock-ridge attributes [ 133.463408][ T8977] Unable to read rock-ridge attributes [ 133.529256][ T8992] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.775674][ T9015] usb usb9: usbfs: process 9015 (syz.5.1968) did not claim interface 0 before use [ 133.986963][ T9028] loop1: detected capacity change from 0 to 1024 [ 134.003208][ T9030] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 134.010739][ T9028] ext4: Bad value for 'sb' [ 134.247497][ T9047] loop2: detected capacity change from 0 to 2048 [ 134.287614][ T9047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.290747][ T9049] loop5: detected capacity change from 0 to 512 [ 134.309630][ T9047] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1980: bg 0: block 234: padding at end of block bitmap is not set [ 134.337826][ T9049] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 134.360972][ T9049] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 134.371828][ T9047] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 134.384236][ T9047] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.384236][ T9047] [ 134.409077][ T9049] EXT4-fs (loop5): 1 truncate cleaned up [ 134.425056][ T9049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.460011][ T9055] EXT4-fs (loop2): shut down requested (0) [ 134.507570][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.521593][ T9047] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 134.619423][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.658319][ T9064] usb usb9: usbfs: process 9064 (syz.3.1985) did not claim interface 0 before use [ 134.674424][ T9062] loop5: detected capacity change from 0 to 164 [ 134.712055][ T9062] Unable to read rock-ridge attributes [ 134.733727][ T9062] Unable to read rock-ridge attributes [ 134.781496][ T9066] loop2: detected capacity change from 0 to 2048 [ 134.864909][ T9066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.942919][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.979008][ T9091] loop2: detected capacity change from 0 to 512 [ 134.994101][ T9093] __nla_validate_parse: 6 callbacks suppressed [ 134.994116][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1997'. [ 135.014899][ T9091] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 135.028189][ T9091] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 135.045379][ T9091] EXT4-fs (loop2): 1 truncate cleaned up [ 135.059939][ T9091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.074293][ T9099] loop5: detected capacity change from 0 to 164 [ 135.108481][ T9099] Unable to read rock-ridge attributes [ 135.116190][ T9103] usb usb9: usbfs: process 9103 (syz.3.2001) did not claim interface 0 before use [ 135.134746][ T9099] Unable to read rock-ridge attributes [ 135.147617][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.377033][ T9132] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.401090][ T9134] loop3: detected capacity change from 0 to 164 [ 135.421774][ T9134] Unable to read rock-ridge attributes [ 135.449859][ T9134] Unable to read rock-ridge attributes [ 135.467193][ T9144] usb usb9: usbfs: process 9144 (syz.1.2018) did not claim interface 0 before use [ 135.510388][ T9151] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2022'. [ 135.632004][ T29] kauditd_printk_skb: 848 callbacks suppressed [ 135.632020][ T29] audit: type=1326 audit(1730377714.430:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 135.661852][ T29] audit: type=1326 audit(1730377714.430:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 135.685487][ T29] audit: type=1326 audit(1730377714.430:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8c0fe719 code=0x7ffc0000 [ 135.708983][ T29] audit: type=1326 audit(1730377714.430:13449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.720514][ T9170] loop3: detected capacity change from 0 to 2048 [ 135.732629][ T29] audit: type=1326 audit(1730377714.500:13450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.762361][ T29] audit: type=1326 audit(1730377714.500:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.771172][ T9167] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.785867][ T29] audit: type=1326 audit(1730377714.500:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.819678][ T29] audit: type=1326 audit(1730377714.500:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.836277][ T9175] loop1: detected capacity change from 0 to 512 [ 135.843242][ T29] audit: type=1326 audit(1730377714.500:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.873059][ T29] audit: type=1326 audit(1730377714.500:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.5.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6c69e719 code=0x7ffc0000 [ 135.903846][ T9175] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 135.914015][ T9175] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 135.924115][ T9170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.929984][ T9175] EXT4-fs (loop1): 1 truncate cleaned up [ 135.942523][ T9175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.959558][ T9177] loop5: detected capacity change from 0 to 164 [ 135.987500][ T9177] Unable to read rock-ridge attributes [ 135.996026][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.005443][ T9177] Unable to read rock-ridge attributes [ 136.011785][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.111840][ T9189] xt_hashlimit: max too large, truncated to 1048576 [ 136.204726][ T9200] usb usb9: usbfs: process 9200 (syz.2.2043) did not claim interface 0 before use [ 136.233415][ T9202] loop3: detected capacity change from 0 to 2048 [ 136.248357][ T9206] loop1: detected capacity change from 0 to 2048 [ 136.260333][ T9204] loop5: detected capacity change from 0 to 2048 [ 136.268090][ T9206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.283923][ T9206] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2042: bg 0: block 234: padding at end of block bitmap is not set [ 136.300100][ T9212] loop0: detected capacity change from 0 to 512 [ 136.300146][ T9206] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 136.309879][ T9204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.318863][ T9206] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.318863][ T9206] [ 136.331428][ T9202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.344595][ T9212] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 136.358767][ T9204] EXT4-fs (loop5): shut down requested (0) [ 136.361875][ T9212] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 136.370551][ T9206] EXT4-fs (loop1): shut down requested (0) [ 136.380584][ T9212] EXT4-fs (loop0): 1 truncate cleaned up [ 136.386971][ T9212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.400172][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.421211][ T9206] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 136.429704][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.453794][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.477114][ T9221] loop3: detected capacity change from 0 to 1024 [ 136.487168][ T9223] loop0: detected capacity change from 0 to 164 [ 136.504290][ T9227] loop5: detected capacity change from 0 to 2048 [ 136.511394][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.511914][ T9221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.521111][ T9223] Unable to read rock-ridge attributes [ 136.540878][ T9223] Unable to read rock-ridge attributes [ 136.541685][ T9221] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 136.578993][ T9237] xt_hashlimit: max too large, truncated to 1048576 [ 136.583547][ T9227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.613810][ T9227] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2050'. [ 136.630214][ T9245] netlink: 2208 bytes leftover after parsing attributes in process `syz.2.2058'. [ 136.635604][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2050'. [ 136.661554][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.662693][ T9243] loop1: detected capacity change from 0 to 2048 [ 136.677891][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.693644][ T9247] loop0: detected capacity change from 0 to 512 [ 136.708218][ T9243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.731865][ T9247] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 136.733686][ T9256] loop5: detected capacity change from 0 to 2048 [ 136.740738][ T9247] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 136.755054][ T9247] EXT4-fs (loop0): 1 truncate cleaned up [ 136.760981][ T9247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.793366][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.820566][ T9264] loop2: detected capacity change from 0 to 164 [ 136.822549][ T9266] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.839061][ T9264] Unable to read rock-ridge attributes [ 136.846424][ T9264] Unable to read rock-ridge attributes [ 136.880695][ T9256] EXT4-fs (loop5): shut down requested (0) [ 136.897051][ T9269] loop0: detected capacity change from 0 to 1024 [ 136.949718][ T9269] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 136.996112][ T9281] xt_hashlimit: max too large, truncated to 1048576 [ 137.037123][ T9283] loop1: detected capacity change from 0 to 2048 [ 137.056279][ T9288] netlink: 2208 bytes leftover after parsing attributes in process `syz.5.2071'. [ 137.065727][ T9285] loop0: detected capacity change from 0 to 2048 [ 137.099327][ T9290] loop2: detected capacity change from 0 to 2048 [ 137.111471][ T9283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2073: bg 0: block 234: padding at end of block bitmap is not set [ 137.130151][ T9285] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2072'. [ 137.142522][ T9283] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 117 [ 137.145301][ T9294] loop5: detected capacity change from 0 to 512 [ 137.154888][ T9283] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.154888][ T9283] [ 137.173297][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2072'. [ 137.183419][ T9294] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 137.192577][ T9294] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 137.222637][ T9294] EXT4-fs (loop5): 1 truncate cleaned up [ 137.341611][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 137.380539][ T9317] loop5: detected capacity change from 0 to 1024 [ 137.410098][ T9317] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 137.502164][ T9329] loop2: detected capacity change from 0 to 2048 [ 137.513640][ T9332] loop5: detected capacity change from 0 to 2048 [ 137.526281][ T9333] loop1: detected capacity change from 0 to 2048 [ 137.538944][ T9332] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2088'. [ 137.556874][ T9339] usb usb9: usbfs: process 9339 (syz.3.2090) did not claim interface 0 before use [ 137.689414][ T9353] loop1: detected capacity change from 0 to 164 [ 137.704839][ T9353] Unable to read rock-ridge attributes [ 137.730254][ T9353] Unable to read rock-ridge attributes [ 137.779652][ T9364] loop1: detected capacity change from 0 to 512 [ 137.812116][ T9364] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 137.822119][ T9364] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 137.834151][ T9370] loop5: detected capacity change from 0 to 2048 [ 137.851287][ T9364] EXT4-fs (loop1): 1 truncate cleaned up [ 137.951865][ T9383] loop1: detected capacity change from 0 to 1024 [ 137.962017][ T9387] loop2: detected capacity change from 0 to 164 [ 137.970248][ T9387] Unable to read rock-ridge attributes [ 137.978975][ T9387] Unable to read rock-ridge attributes [ 137.997542][ T9383] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 138.108032][ T9406] loop5: detected capacity change from 0 to 512 [ 138.128431][ T9406] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 138.200867][ T9406] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 138.210880][ T9415] loop1: detected capacity change from 0 to 2048 [ 138.218092][ T9404] loop3: detected capacity change from 0 to 2048 [ 138.232690][ T9406] EXT4-fs (loop5): 1 truncate cleaned up [ 138.279604][ T9428] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.328614][ T9434] loop5: detected capacity change from 0 to 1024 [ 138.372774][ T9434] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 138.501058][ T9460] loop0: detected capacity change from 0 to 512 [ 138.512128][ T9465] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.523618][ T9460] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 138.545873][ T9460] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 138.552063][ T9464] loop2: detected capacity change from 0 to 2048 [ 138.582358][ T9473] loop3: detected capacity change from 0 to 2048 [ 138.583347][ T9460] EXT4-fs (loop0): 1 truncate cleaned up [ 138.716089][ T9495] loop3: detected capacity change from 0 to 2048 [ 138.750360][ T9505] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.856603][ T9513] loop2: detected capacity change from 0 to 1024 [ 138.865939][ T9513] ext4: Bad value for 'sb' [ 138.897714][ T9519] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.976745][ T9495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2153: bg 0: block 234: padding at end of block bitmap is not set [ 139.009598][ T9495] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 139.012804][ T9523] loop1: detected capacity change from 0 to 512 [ 139.022270][ T9495] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.022270][ T9495] [ 139.050014][ T9523] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 139.058203][ T9523] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 139.065914][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 139.067246][ T9523] EXT4-fs (loop1): 1 truncate cleaned up [ 139.078891][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.078891][ T40] [ 139.094217][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 139.100270][ T40] EXT4-fs (loop3): Free/Dirty block details [ 139.106203][ T40] EXT4-fs (loop3): free_blocks=0 [ 139.111129][ T40] EXT4-fs (loop3): dirty_blocks=6144 [ 139.116512][ T40] EXT4-fs (loop3): Block reservation details [ 139.122584][ T40] EXT4-fs (loop3): i_reserved_data_blocks=384 [ 139.161397][ T9527] loop1: detected capacity change from 0 to 2048 [ 139.199749][ T9527] EXT4-fs (loop1): shut down requested (0) [ 139.205986][ T9527] ================================================================== [ 139.214055][ T9527] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 139.221288][ T9527] [ 139.223608][ T9527] race at unknown origin, with assert no writes to 0xffff8881001cb1e8 of 4 bytes by task 9527 on cpu 1: [ 139.234693][ T9527] dequeue_entities+0x6df/0x760 [ 139.239537][ T9527] pick_next_task_fair+0x7d/0x410 [ 139.244547][ T9527] __schedule+0x284/0x940 [ 139.248883][ T9527] schedule+0x55/0xc0 [ 139.252855][ T9527] synchronize_rcu_expedited+0x611/0x7a0 [ 139.258510][ T9527] synchronize_rcu+0x46/0x320 [ 139.263176][ T9527] rcu_sync_enter+0x125/0x170 [ 139.267836][ T9527] percpu_down_write+0x22/0x220 [ 139.272688][ T9527] freeze_super+0x354/0x910 [ 139.277202][ T9527] fs_bdev_freeze+0xfc/0x1e0 [ 139.281794][ T9527] bdev_freeze+0x8b/0x120 [ 139.286119][ T9527] ext4_force_shutdown+0x1b8/0x340 [ 139.291215][ T9527] ext4_ioctl+0x1225/0x2dd0 [ 139.295712][ T9527] __se_sys_ioctl+0xcd/0x140 [ 139.300342][ T9527] __x64_sys_ioctl+0x43/0x50 [ 139.304944][ T9527] x64_sys_call+0x15cc/0x2d60 [ 139.309616][ T9527] do_syscall_64+0xc9/0x1c0 [ 139.314108][ T9527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.320006][ T9527] [ 139.322347][ T9527] value changed: 0x00000000 -> 0x00000001 [ 139.328053][ T9527] [ 139.330363][ T9527] Reported by Kernel Concurrency Sanitizer on: [ 139.336521][ T9527] CPU: 1 UID: 0 PID: 9527 Comm: syz.1.2163 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 139.347201][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.357256][ T9527] ==================================================================