last executing test programs: 5m42.141298463s ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 5m42.025546305s ago: executing program 3 (id=162): unlink(&(0x7f0000000000)='./file1\x00') r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fb}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu<\t\t') 5m41.909145057s ago: executing program 3 (id=164): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 5m41.047731504s ago: executing program 3 (id=185): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000005700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0xb3, 0x400000) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = pidfd_getfd(r1, r1, 0x0) setns(r4, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 5m40.686170971s ago: executing program 3 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 5m40.341906897s ago: executing program 3 (id=201): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000040)=""/57, 0x39) getdents64(r1, &(0x7f0000000f80)=""/4093, 0xffd) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) getpriority(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 5m40.324329198s ago: executing program 32 (id=201): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000040)=""/57, 0x39) getdents64(r1, &(0x7f0000000f80)=""/4093, 0xffd) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) getpriority(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 2m22.706004129s ago: executing program 0 (id=2842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) r2 = socket$tipc(0x1e, 0x2, 0x0) accept(r2, 0x0, &(0x7f0000000000)) r3 = socket$rds(0x15, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ebe4bd6e98e4b8e3c624f4ec858e8ba162620d638898683985d4affcc59bf14e2ff4e4f2dcf1f3dd9e1465f1ce00b47f6a8cf5b215b678762b288030c3456f130454a616d1c86c65093b720d9f86144a65f09114444fdd2fb659f992b2e91201fd7465dd9aabe4d7ec87c182e6fcc80ca3577f20f04f8357447fa7e255f326390946e0c502e97699bc0a1ae11ce9c5c5bef23f4d529da3280deb464c26be903e9c8d4394d6409ca5853eb8783f7a3e3f91cc848c04c975de00b7493e5924443d0ca8e4e5068af3a9a610a5ccfbfa134dd42c90a092ccb2332f73461351bf3b01f405012f0e7482daef328672303e18c5889e9fed87b57366a2712e15245ba5307d56ebb69b7c1ea6d03d4c2d0be54b2d2667c7e36e1fbc001e8a9d0b431093f08bf2922416636ea6f6db2888ca94e7a2954928bfbdda5e143b9f921b36dd5618c35bebb32146b76fe9f8aec574a0f7ce1dfc3670b49e1120c9c39d35eee30c85410000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m22.547727712s ago: executing program 0 (id=2845): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b000100766574"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140006001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="18e657e8c7db845e000000000000000000009d25513c211db64e87f96763117e32c6332bb9c27bf23dbbdad823923192bfde85b9d3863ed2916fb028a67fc98b4bc7dd2a1dccbb4e3b3cb8d5a96e5df7236bb2eb83f3c5804d04b9143493a0dfdb85e75578d54d3e53241556298814cb4ba347bbec5a166c2c9b373a2089bc89fa42c4e331812e1b3eac68545c19bec1cafa2c8da9529cb205082730f583519550a6a68ce049500062905540ccc46c59d2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f8}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001300)=@ccm_128={{0x303}, "4ff2cdfd51629fbf", "1d3d5bbc49028e55c4f5ff21f24efebc", "13214f0e", "9681c279fd4cf5e1"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684a100d0000e96ca4b72643dd3689729568e9", '\\\v\x00:', "29a78ab9b0a4e8ae"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c76657273696f6e3d3970323030302c6d73697a653d3078303014303030303030303030303030362c6f626a5f726f6c653d2c7569643c", @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=r5, @ANYBLOB=',permit_directio,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000005124a70a000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.315798907s ago: executing program 0 (id=2851): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) 2m22.236020648s ago: executing program 0 (id=2853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(0x0, 0x147842, 0x126) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@errors_remount}, {@mblk_io_submit}, {@nodioread_nolock}, {@nolazytime}, {@nobarrier}, {@jqfmt_vfsv1}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x2, {0x2, 0xf0, 0x2}, 0xfe}, 0x18) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m21.582904311s ago: executing program 0 (id=2857): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 2m21.217320718s ago: executing program 0 (id=2861): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x2, 0x7, 0x1}, {0x1, 0x1, 0x1}], 0x10, 0xa}, 0x94) r1 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="495fd8b9a1fa40382e28644fe1b2779decf358169d4fd69ee9d7f8c868c2c3a7e8f52b04006dbe35538ff7e5534a76d4a24cb4a369e20e85c6a1fa13e68614859191fdfb4d893d689d7c68821c6c13fc1bb1138520255ef7a0c1bc4467e75905d0fde17b75d0b4916b95afaa7f69598e2ddefd827da05e6f6c78b9c7e9b014f39bbf43d9a173dd", 0x87, 0xffffffffffffffff) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r2, 0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0) keyctl$search(0xa, r1, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x0}, r2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='afs_cb_call\x00', r0, 0x0, 0x40000009}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x52b, &(0x7f0000001140)="$eJzs3c9vI1cdAPDveNdOdjdttqUHQNAubWFBq3U23nZV9QDtCSFUCdEjiG1IvNEqdhzFTmnCSqRXuCJRiRMc+QM498SdC4Ibl3JA4kcEapA4TDXjSeJN7MT7w3EUfz7SrN+bN/b3vU1mnv214xfAxLoWEdsRUYmI9yJittifFFu81d2y4z7debC4u/NgMYk0ffdfSd6e7Yue+2SuFI85HRHf/3bEj5OjcdubWysLjUZ9vajPdZprc+3NrZv3mwvL9eX6aq12Z/7OrTduv157hNFMH9v6UrNSlL78yR+3v/HTrFszxZ7ecTxN3aGX9+NkLkbEd0cRbAwuFOOpjLsjPJZSRDwfES/n5/9sXMh/mgDAeZams5HO9tYBgPOulOfAklK1yAXM5P92c3gvxOVSo9Xu3LjX2lhd6ubKrka5dO9+o36ryBVejXKS1efz8kG9dqh+OyKei4hfTl3K69XFVmNpfE97AGCiXTk0//93qlSqVsfdKwBg5I7/2AwAcB6Z/wFg8pj/AWDymP8BYPJ05/9Lj3q3NE1/NoruAACnwOt/AJg85n8AmCjfe+edbEt3i++/Xnp/c2Ol9f7NpXp7pdrcWKwuttbXqsut1nL+nT3Nkx6v0Wqtzb8WGx9c/eZauzPX3ty622xtrHbu5t/rfbdezo/aPoWRAQCDPPfSx39Jshn5zUv5Fj1rOZTH2jNg1Erj7gAwNhfG3QFgbKz2BZPr4DX+I38IQHoAzok+S/Q+ZLrfHwilaZqOrkvAiF3/gvw/TKqe/L9PAcOEOSn/n68N7E1COJfk/2FypWky7Jr/MeyBAMDZdkyO/+ppPg8BxmfA+//PF7e/K94c+OHS4SM+GmWvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GzbW/+3WizzOxOlUrUa8Uy+AFA5uXe/Ub8VEc9GxJ+nylNZff7g7m+Nq98AwJMo/T0p1v+6PvvqzENNL17ZL1Yi4ie/fvdXHyx0Out/iqgk/57a29/5qNhfOzHY9ChGAAAcb2+ezm97Xsh/uvNgcW87zf784+3us4Is7u5OJXb341+Mi/ntdJQj4vJ/kqLelfTkLp7E9ocR8fl+409iJs+BdJ+yHI6fxX7mVOOXHopfKRZoLhX/F597Cn2BSfPx290s5tHzrxTX8tv+5/90foV6csX1L3uoxd38GngQf+/6d2HA9e/asDFe+8N3uqVLR9s+jPjixYi92Ls915+9+MmA+K8OGf+vX3rx5UFt6W8irkf/+L2x5jrNtbn25tbN+82F5fpyfbVWuzN/59Ybt1+vzeU56rnBs8E/37zx7KC2bPyXB8SfPmH8Xx1y/L/9/3s/+Mox8b/+Sr/4pXjhmPjZnPi1IeMvXP79wNfdWfylo+NPhvn53xgy/id/21qK+PmQRwMAo9be3FpZaDTq6woTWvhRnIluDFfIfmXPQDf6Fr51WrEq0b/pF690z+lDTWn6WLEGXTGeRtYNOAv2T/qI+N+4OwMAAAAAAAAAAAAAAPR1Gn+xNO4xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH59FgAA//9d/9Oz") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000200), &(0x7f0000000500)=r5}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) 2m21.216937878s ago: executing program 33 (id=2861): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x2, 0x7, 0x1}, {0x1, 0x1, 0x1}], 0x10, 0xa}, 0x94) r1 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="495fd8b9a1fa40382e28644fe1b2779decf358169d4fd69ee9d7f8c868c2c3a7e8f52b04006dbe35538ff7e5534a76d4a24cb4a369e20e85c6a1fa13e68614859191fdfb4d893d689d7c68821c6c13fc1bb1138520255ef7a0c1bc4467e75905d0fde17b75d0b4916b95afaa7f69598e2ddefd827da05e6f6c78b9c7e9b014f39bbf43d9a173dd", 0x87, 0xffffffffffffffff) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r2, 0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0) keyctl$search(0xa, r1, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x0}, r2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='afs_cb_call\x00', r0, 0x0, 0x40000009}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x52b, &(0x7f0000001140)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000200), &(0x7f0000000500)=r5}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) 2.271012586s ago: executing program 4 (id=5294): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008000000000000000000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.245085337s ago: executing program 4 (id=5295): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x2, 0x7, 0x1}], 0x10, 0xa}, 0x94) r1 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="495fd8b9a1fa40382e28644fe1b2779decf358169d4fd69ee9d7f8c868c2c3a7e8f52b04006dbe35538ff7e5534a76d4a24cb4a369e20e85c6a1fa13e68614859191fdfb4d893d689d7c68821c6c13fc1bb1138520255ef7a0c1bc4467e75905d0fde17b75d0b4916b95afaa7f69598e2ddefd827da05e6f6c78b9c7e9b014f39bbf43d9a173dd", 0x87, 0xffffffffffffffff) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r2, 0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0) keyctl$search(0xa, r1, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x0}, r2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='afs_cb_call\x00', r0, 0x0, 0x40000009}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x52b, &(0x7f0000001140)="$eJzs3c9vI1cdAPDveNdOdjdttqUHQNAubWFBq3U23nZV9QDtCSFUCdEjiG1IvNEqdhzFTmnCSqRXuCJRiRMc+QM498SdC4Ibl3JA4kcEapA4TDXjSeJN7MT7w3EUfz7SrN+bN/b3vU1mnv214xfAxLoWEdsRUYmI9yJittifFFu81d2y4z7debC4u/NgMYk0ffdfSd6e7Yue+2SuFI85HRHf/3bEj5OjcdubWysLjUZ9vajPdZprc+3NrZv3mwvL9eX6aq12Z/7OrTduv157hNFMH9v6UrNSlL78yR+3v/HTrFszxZ7ecTxN3aGX9+NkLkbEd0cRbAwuFOOpjLsjPJZSRDwfES/n5/9sXMh/mgDAeZams5HO9tYBgPOulOfAklK1yAXM5P92c3gvxOVSo9Xu3LjX2lhd6ubKrka5dO9+o36ryBVejXKS1efz8kG9dqh+OyKei4hfTl3K69XFVmNpfE97AGCiXTk0//93qlSqVsfdKwBg5I7/2AwAcB6Z/wFg8pj/AWDymP8BYPJ05/9Lj3q3NE1/NoruAACnwOt/AJg85n8AmCjfe+edbEt3i++/Xnp/c2Ol9f7NpXp7pdrcWKwuttbXqsut1nL+nT3Nkx6v0Wqtzb8WGx9c/eZauzPX3ty622xtrHbu5t/rfbdezo/aPoWRAQCDPPfSx39Jshn5zUv5Fj1rOZTH2jNg1Erj7gAwNhfG3QFgbKz2BZPr4DX+I38IQHoAzok+S/Q+ZLrfHwilaZqOrkvAiF3/gvw/TKqe/L9PAcOEOSn/n68N7E1COJfk/2FypWky7Jr/MeyBAMDZdkyO/+ppPg8BxmfA+//PF7e/K94c+OHS4SM+GmWvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GzbW/+3WizzOxOlUrUa8Uy+AFA5uXe/Ub8VEc9GxJ+nylNZff7g7m+Nq98AwJMo/T0p1v+6PvvqzENNL17ZL1Yi4ie/fvdXHyx0Out/iqgk/57a29/5qNhfOzHY9ChGAAAcb2+ezm97Xsh/uvNgcW87zf784+3us4Is7u5OJXb341+Mi/ntdJQj4vJ/kqLelfTkLp7E9ocR8fl+409iJs+BdJ+yHI6fxX7mVOOXHopfKRZoLhX/F597Cn2BSfPx290s5tHzrxTX8tv+5/90foV6csX1L3uoxd38GngQf+/6d2HA9e/asDFe+8N3uqVLR9s+jPjixYi92Ls915+9+MmA+K8OGf+vX3rx5UFt6W8irkf/+L2x5jrNtbn25tbN+82F5fpyfbVWuzN/59Ybt1+vzeU56rnBs8E/37zx7KC2bPyXB8SfPmH8Xx1y/L/9/3s/+Mox8b/+Sr/4pXjhmPjZnPi1IeMvXP79wNfdWfylo+NPhvn53xgy/id/21qK+PmQRwMAo9be3FpZaDTq6woTWvhRnIluDFfIfmXPQDf6Fr51WrEq0b/pF690z+lDTWn6WLEGXTGeRtYNOAv2T/qI+N+4OwMAAAAAAAAAAAAAAPR1Gn+xNO4xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH59FgAA//9d/9Oz") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000200), &(0x7f0000000500)=r5}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffedf, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.08850679s ago: executing program 4 (id=5299): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r1) syz_usb_connect(0x0, 0x57, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.650613908s ago: executing program 6 (id=5308): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008000000000000000000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000103a7f461b296389d86daa12", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0500"/17], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0x20, &(0x7f0000001000)={&(0x7f0000000280)=""/82, 0x52, 0x0, &(0x7f0000001880)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 1.55837379s ago: executing program 6 (id=5311): socket(0x11, 0x800000003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1.496212691s ago: executing program 5 (id=5312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.238407646s ago: executing program 6 (id=5314): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x515a02, 0x52abe154ad664fa4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}], 0x20) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @private0, 0x5}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030362c636865636b3d7374726963742c2586f599e122c763b2756e687564652c636865636b3d7374726963742c6f76657272696465726f636b7065726d2c73686f776173736f630c73657373696f6e3d3078d0a06ffc7aae4e281b"], 0x1, 0x698, &(0x7f0000000a80)="$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") r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000202, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1.236321286s ago: executing program 4 (id=5315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socket$tipc(0x1e, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1.209269507s ago: executing program 5 (id=5316): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendto$inet6(r4, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.03783784s ago: executing program 1 (id=5319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) r2 = socket$tipc(0x1e, 0x2, 0x0) accept(r2, 0x0, &(0x7f0000000000)) r3 = socket$rds(0x15, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r11, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) 1.009082461s ago: executing program 5 (id=5320): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d39101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f8}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000300)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684a100d0000e96ca4b72643dd3689729568e9", '\\\v\x00:', "29a78ab9b0a4e8ae"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r2, &(0x7f0000000040), 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000540)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000005124a70a000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 903.355403ms ago: executing program 4 (id=5322): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$isdn(0x22, 0x3, 0x23) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='initcall_finish\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff019) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x70a6, 0xc000, 0x20040a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(r5, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x28, r9, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) 902.743293ms ago: executing program 5 (id=5323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socket$tipc(0x1e, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchdir(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 799.012264ms ago: executing program 1 (id=5324): socket(0x11, 0x800000003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 740.322205ms ago: executing program 1 (id=5325): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) syz_emit_ethernet(0xbe, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES64=r2, @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRES8=0x0], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xffa, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 679.610076ms ago: executing program 2 (id=5326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe300", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 624.374918ms ago: executing program 5 (id=5327): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x2, 0x7, 0x1}], 0x10, 0xa}, 0x94) r1 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="495fd8b9a1fa40382e28644fe1b2779decf358169d4fd69ee9d7f8c868c2c3a7e8f52b04006dbe35538ff7e5534a76d4a24cb4a369e20e85c6a1fa13e68614859191fdfb4d893d689d7c68821c6c13fc1bb1138520255ef7a0c1bc4467e75905d0fde17b75d0b4916b95afaa7f69598e2ddefd827da05e6f6c78b9c7e9b014f39bbf43d9a173dd", 0x87, 0xffffffffffffffff) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r2, 0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0) keyctl$search(0xa, r1, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x0}, r2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='afs_cb_call\x00', r0, 0x0, 0x40000009}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x52b, &(0x7f0000001140)="$eJzs3c9vI1cdAPDveNdOdjdttqUHQNAubWFBq3U23nZV9QDtCSFUCdEjiG1IvNEqdhzFTmnCSqRXuCJRiRMc+QM498SdC4Ibl3JA4kcEapA4TDXjSeJN7MT7w3EUfz7SrN+bN/b3vU1mnv214xfAxLoWEdsRUYmI9yJittifFFu81d2y4z7debC4u/NgMYk0ffdfSd6e7Yue+2SuFI85HRHf/3bEj5OjcdubWysLjUZ9vajPdZprc+3NrZv3mwvL9eX6aq12Z/7OrTduv157hNFMH9v6UrNSlL78yR+3v/HTrFszxZ7ecTxN3aGX9+NkLkbEd0cRbAwuFOOpjLsjPJZSRDwfES/n5/9sXMh/mgDAeZams5HO9tYBgPOulOfAklK1yAXM5P92c3gvxOVSo9Xu3LjX2lhd6ubKrka5dO9+o36ryBVejXKS1efz8kG9dqh+OyKei4hfTl3K69XFVmNpfE97AGCiXTk0//93qlSqVsfdKwBg5I7/2AwAcB6Z/wFg8pj/AWDymP8BYPJ05/9Lj3q3NE1/NoruAACnwOt/AJg85n8AmCjfe+edbEt3i++/Xnp/c2Ol9f7NpXp7pdrcWKwuttbXqsut1nL+nT3Nkx6v0Wqtzb8WGx9c/eZauzPX3ty622xtrHbu5t/rfbdezo/aPoWRAQCDPPfSx39Jshn5zUv5Fj1rOZTH2jNg1Erj7gAwNhfG3QFgbKz2BZPr4DX+I38IQHoAzok+S/Q+ZLrfHwilaZqOrkvAiF3/gvw/TKqe/L9PAcOEOSn/n68N7E1COJfk/2FypWky7Jr/MeyBAMDZdkyO/+ppPg8BxmfA+//PF7e/K94c+OHS4SM+GmWvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GzbW/+3WizzOxOlUrUa8Uy+AFA5uXe/Ub8VEc9GxJ+nylNZff7g7m+Nq98AwJMo/T0p1v+6PvvqzENNL17ZL1Yi4ie/fvdXHyx0Out/iqgk/57a29/5qNhfOzHY9ChGAAAcb2+ezm97Xsh/uvNgcW87zf784+3us4Is7u5OJXb341+Mi/ntdJQj4vJ/kqLelfTkLp7E9ocR8fl+409iJs+BdJ+yHI6fxX7mVOOXHopfKRZoLhX/F597Cn2BSfPx290s5tHzrxTX8tv+5/90foV6csX1L3uoxd38GngQf+/6d2HA9e/asDFe+8N3uqVLR9s+jPjixYi92Ls915+9+MmA+K8OGf+vX3rx5UFt6W8irkf/+L2x5jrNtbn25tbN+82F5fpyfbVWuzN/59Ybt1+vzeU56rnBs8E/37zx7KC2bPyXB8SfPmH8Xx1y/L/9/3s/+Mox8b/+Sr/4pXjhmPjZnPi1IeMvXP79wNfdWfylo+NPhvn53xgy/id/21qK+PmQRwMAo9be3FpZaDTq6woTWvhRnIluDFfIfmXPQDf6Fr51WrEq0b/pF690z+lDTWn6WLEGXTGeRtYNOAv2T/qI+N+4OwMAAAAAAAAAAAAAAPR1Gn+xNO4xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH59FgAA//9d/9Oz") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000200), &(0x7f0000000500)=r5}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffedf, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 526.885509ms ago: executing program 2 (id=5328): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc044) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) write$binfmt_misc(r0, 0x0, 0x0) 468.545471ms ago: executing program 1 (id=5329): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 468.363071ms ago: executing program 2 (id=5330): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendto$inet6(r4, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 384.504752ms ago: executing program 6 (id=5331): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d39101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b000100766574"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140006001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="18e657e8c7db845e000000000000000000009d25513c211db64e87f96763117e32c6332bb9c27bf23dbbdad823923192bfde85b9d3863ed2916fb028a67fc98b4bc7dd2a1dccbb4e3b3cb8d5a96e5df7236bb2eb83f3c5804d04b9143493a0dfdb85e75578d54d3e53241556298814cb4ba347bbec5a166c2c9b373a2089bc89fa42c4e331812e1b3eac68545c19bec1cafa2c8da9529cb205082730f583519550a6a68ce049500062905540ccc46c59d2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f8}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001300)=@ccm_128={{0x303}, "4ff2cdfd51629fbf", "1d3d5bbc49028e55c4f5ff21f24efebc", "13214f0e", "9681c279fd4cf5e1"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684a100d0000e96ca4b72643dd3689729568e9", '\\\v\x00:', "29a78ab9b0a4e8ae"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c76657273696f6e3d3970323030302c6d73697a653d3078303014303030303030303030303030362c6f626a5f726f6c653d2c7569643c", @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=r5, @ANYBLOB=',permit_directio,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000005124a70a000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 345.907453ms ago: executing program 5 (id=5332): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 322.263963ms ago: executing program 1 (id=5333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x2ca}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x500) 294.713214ms ago: executing program 6 (id=5334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) r2 = socket$tipc(0x1e, 0x2, 0x0) accept(r2, 0x0, &(0x7f0000000000)) r3 = socket$rds(0x15, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ebe4bd6e98e4b8e3c624f4ec858e8ba162620d638898683985d4affcc59bf14e2ff4e4f2dcf1f3dd9e1465f1ce00b47f6a8cf5b215b678762b288030c3456f130454a616d1c86c65093b720d9f86144a65f09114444fdd2fb659f992b2e91201fd7465dd9aabe4d7ec87c182e6fcc80ca3577f20f04f8357447fa7e255f326390946e0c502e97699bc0a1ae11ce9c5c5bef23f4d529da3280deb464c26be903e9c8d4394d6409ca5853eb8783f7a3e3f91cc848c04c975de00b7493e5924443d0ca8e4e5068af3a9a610a5ccfbfa134dd42c90a092ccb2332f73461351bf3b01f405012f0e7482daef328672303e18c5889e9fed87b57366a2712e15245ba5307d56ebb69b7c1ea6d03d4c2d0be54b2d2667c7e36e1fbc001e8a9d0b431093f08bf2922416636ea6f6db2888ca94e7a2954928bfbdda5e143b9f921b36dd5618c35bebb32146b76fe9f8aec574a0f7ce1dfc3670b49e1120c9c39d35eee30c85410000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r11, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) 269.943514ms ago: executing program 2 (id=5335): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200)='THAWED\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x200, &(0x7f0000000380)=""/137) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 208.536276ms ago: executing program 1 (id=5336): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460) 156.862157ms ago: executing program 2 (id=5337): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500db", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000e40)='ext4_es_lookup_extent_exit\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x5c1902, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x12, 0x13, 0x19, "edd3a682f4072addee9c14112122f46aa1bec83b20392f15eb20e8443c335148e584c6d397e0b4163e699f673df31d07bdf85a09ac037a942738229a800ac412", "299728ddfea814796006e767bad17f85aeed38cf52c9d1987b8d88967e4dc49481d5947a271cbb114178bc6af92095f670e75926cd489f3d717c4ad6103a20a3", "3684cd3a88216f86ee097b152098a2d252d8e324c6b9e5258f13702fc9c1f240"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x209b, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r4, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x10, 0x6, 0x10001) 84.500078ms ago: executing program 6 (id=5338): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5}, {0x2, 0x4, 0x4, 0xa}, {0x5, 0x2, 0x7, 0x1}, {0x1, 0x1, 0x1}], 0x10, 0xa}, 0x94) r1 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="495fd8b9a1fa40382e28644fe1b2779decf358169d4fd69ee9d7f8c868c2c3a7e8f52b04006dbe35538ff7e5534a76d4a24cb4a369e20e85c6a1fa13e68614859191fdfb4d893d689d7c68821c6c13fc1bb1138520255ef7a0c1bc4467e75905d0fde17b75d0b4916b95afaa7f69598e2ddefd827da05e6f6c78b9c7e9b014f39bbf43d9a173dd", 0x87, 0xffffffffffffffff) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r2, 0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0) keyctl$search(0xa, r1, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x0}, r2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='afs_cb_call\x00', r0, 0x0, 0x40000009}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x52b, &(0x7f0000001140)="$eJzs3c9vI1cdAPDveNdOdjdttqUHQNAubWFBq3U23nZV9QDtCSFUCdEjiG1IvNEqdhzFTmnCSqRXuCJRiRMc+QM498SdC4Ibl3JA4kcEapA4TDXjSeJN7MT7w3EUfz7SrN+bN/b3vU1mnv214xfAxLoWEdsRUYmI9yJittifFFu81d2y4z7debC4u/NgMYk0ffdfSd6e7Yue+2SuFI85HRHf/3bEj5OjcdubWysLjUZ9vajPdZprc+3NrZv3mwvL9eX6aq12Z/7OrTduv157hNFMH9v6UrNSlL78yR+3v/HTrFszxZ7ecTxN3aGX9+NkLkbEd0cRbAwuFOOpjLsjPJZSRDwfES/n5/9sXMh/mgDAeZams5HO9tYBgPOulOfAklK1yAXM5P92c3gvxOVSo9Xu3LjX2lhd6ubKrka5dO9+o36ryBVejXKS1efz8kG9dqh+OyKei4hfTl3K69XFVmNpfE97AGCiXTk0//93qlSqVsfdKwBg5I7/2AwAcB6Z/wFg8pj/AWDymP8BYPJ05/9Lj3q3NE1/NoruAACnwOt/AJg85n8AmCjfe+edbEt3i++/Xnp/c2Ol9f7NpXp7pdrcWKwuttbXqsut1nL+nT3Nkx6v0Wqtzb8WGx9c/eZauzPX3ty622xtrHbu5t/rfbdezo/aPoWRAQCDPPfSx39Jshn5zUv5Fj1rOZTH2jNg1Erj7gAwNhfG3QFgbKz2BZPr4DX+I38IQHoAzok+S/Q+ZLrfHwilaZqOrkvAiF3/gvw/TKqe/L9PAcOEOSn/n68N7E1COJfk/2FypWky7Jr/MeyBAMDZdkyO/+ppPg8BxmfA+//PF7e/K94c+OHS4SM+GmWvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GzbW/+3WizzOxOlUrUa8Uy+AFA5uXe/Ub8VEc9GxJ+nylNZff7g7m+Nq98AwJMo/T0p1v+6PvvqzENNL17ZL1Yi4ie/fvdXHyx0Out/iqgk/57a29/5qNhfOzHY9ChGAAAcb2+ezm97Xsh/uvNgcW87zf784+3us4Is7u5OJXb341+Mi/ntdJQj4vJ/kqLelfTkLp7E9ocR8fl+409iJs+BdJ+yHI6fxX7mVOOXHopfKRZoLhX/F597Cn2BSfPx290s5tHzrxTX8tv+5/90foV6csX1L3uoxd38GngQf+/6d2HA9e/asDFe+8N3uqVLR9s+jPjixYi92Ls915+9+MmA+K8OGf+vX3rx5UFt6W8irkf/+L2x5jrNtbn25tbN+82F5fpyfbVWuzN/59Ybt1+vzeU56rnBs8E/37zx7KC2bPyXB8SfPmH8Xx1y/L/9/3s/+Mox8b/+Sr/4pXjhmPjZnPi1IeMvXP79wNfdWfylo+NPhvn53xgy/id/21qK+PmQRwMAo9be3FpZaDTq6woTWvhRnIluDFfIfmXPQDf6Fr51WrEq0b/pF690z+lDTWn6WLEGXTGeRtYNOAv2T/qI+N+4OwMAAAAAAAAAAAAAAPR1Gn+xNO4xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH59FgAA//9d/9Oz") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000200), &(0x7f0000000500)=r5}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r12 = openat(0xffffffffffffff9c, 0x0, 0x181642, 0x148) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 68.609948ms ago: executing program 2 (id=5339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x2000, 0x8000) 0s ago: executing program 4 (id=5340): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) kernel console output (not intermixed with test programs): em 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.144777][T18771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.190833][T18779] loop2: detected capacity change from 0 to 512 [ 356.202034][T18779] EXT4-fs: Ignoring removed bh option [ 356.213750][T18781] tipc: Enabling of bearer rejected, failed to enable media [ 356.223346][T18781] syzkaller0: entered promiscuous mode [ 356.229275][T18781] syzkaller0: entered allmulticast mode [ 356.248194][T18779] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.4845: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 356.273703][T18779] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4845: Bad quota inode: 4, type: 1 [ 356.276486][T13572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.297045][T18779] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 356.315095][T12435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.328291][T18779] EXT4-fs (loop2): mount failed [ 356.427181][T18797] loop4: detected capacity change from 0 to 512 [ 356.431050][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 356.431071][ T29] audit: type=1326 audit(1758548744.303:29110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.474422][T18806] netlink: 'syz.2.4852': attribute type 21 has an invalid length. [ 356.486346][T18797] EXT4-fs: Ignoring removed bh option [ 356.514179][T18797] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.4849: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 356.536368][ T29] audit: type=1326 audit(1758548744.343:29111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.560256][ T29] audit: type=1326 audit(1758548744.353:29112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.584180][ T29] audit: type=1326 audit(1758548744.353:29113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.608546][ T29] audit: type=1326 audit(1758548744.383:29114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.632873][ T29] audit: type=1326 audit(1758548744.383:29115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.656602][ T29] audit: type=1326 audit(1758548744.383:29116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.665488][T18797] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.4849: Bad quota inode: 4, type: 1 [ 356.680425][ T29] audit: type=1326 audit(1758548744.383:29117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.715096][ T29] audit: type=1326 audit(1758548744.383:29118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.739273][ T29] audit: type=1326 audit(1758548744.383:29119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 356.749686][T18797] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 356.801714][T18802] syzkaller0: entered promiscuous mode [ 356.807320][T18802] syzkaller0: entered allmulticast mode [ 356.939110][T18797] EXT4-fs (loop4): mount failed [ 356.983836][T18821] loop2: detected capacity change from 0 to 512 [ 357.100982][T18821] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 357.110099][T18821] EXT4-fs (loop2): orphan cleanup on readonly fs [ 357.140045][T18821] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4855: corrupted inode contents [ 357.282954][T18825] loop6: detected capacity change from 0 to 4096 [ 357.297136][T18825] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 357.347561][T18825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.514676][T18821] EXT4-fs (loop2): Remounting filesystem read-only [ 357.531711][T18821] EXT4-fs (loop2): 1 truncate cleaned up [ 357.559927][T18830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4856'. [ 357.574532][ T8885] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 357.585354][ T8885] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 357.621578][T18835] loop4: detected capacity change from 0 to 2048 [ 357.662947][ T8885] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 357.666525][T18835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.693901][T12435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.694197][T18821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.730974][T13345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.752285][T18842] tipc: Enabling of bearer rejected, failed to enable media [ 357.761915][T18844] loop1: detected capacity change from 0 to 512 [ 357.768718][T18844] EXT4-fs: dax option not supported [ 357.782672][T18842] syzkaller0: entered promiscuous mode [ 357.788334][T18842] syzkaller0: entered allmulticast mode [ 357.828022][T18853] loop2: detected capacity change from 0 to 512 [ 357.837400][T18853] EXT4-fs: Ignoring removed bh option [ 357.859486][T18853] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.4862: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 357.880512][T18853] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4862: Bad quota inode: 4, type: 1 [ 357.900068][T18853] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 357.976862][T18853] EXT4-fs (loop2): mount failed [ 357.996739][T18869] loop6: detected capacity change from 0 to 512 [ 358.035303][T18869] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 358.035468][T18869] EXT4-fs (loop6): orphan cleanup on readonly fs [ 358.052530][T18875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.057192][T18875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.057503][T18869] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4865: Failed to acquire dquot type 1 [ 358.061821][T18869] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4865: bg 0: block 40: padding at end of block bitmap is not set [ 358.065374][T18869] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 358.070491][T18869] EXT4-fs (loop6): 1 truncate cleaned up [ 358.071556][T18869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.136136][T12435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.290286][T18886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.297805][T18886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.308134][T18886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.315747][T18886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.377067][T18890] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4871'. [ 358.390880][T18892] macsec1: entered promiscuous mode [ 358.396234][T18892] bridge0: entered promiscuous mode [ 358.402283][T18892] bridge0: port 3(macsec1) entered blocking state [ 358.408841][T18892] bridge0: port 3(macsec1) entered disabled state [ 358.445637][T18892] macsec1: entered allmulticast mode [ 358.450962][T18892] bridge0: entered allmulticast mode [ 358.493740][T18892] macsec1: left allmulticast mode [ 358.498990][T18892] bridge0: left allmulticast mode [ 358.499065][T18897] loop5: detected capacity change from 0 to 512 [ 358.511155][T18892] bridge0: left promiscuous mode [ 358.538214][T18901] loop6: detected capacity change from 0 to 512 [ 358.545291][T18901] EXT4-fs: Ignoring removed bh option [ 358.562435][T18897] EXT4-fs: Ignoring removed bh option [ 358.591608][T18901] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4877: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.622406][T18901] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.4877: Bad quota inode: 4, type: 1 [ 358.645361][T18905] loop1: detected capacity change from 0 to 512 [ 358.652920][T18901] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 358.671578][T18905] EXT4-fs: Ignoring removed bh option [ 358.705824][T18897] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.4875: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.748300][T18901] EXT4-fs (loop6): mount failed [ 358.754627][T18905] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.4878: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.783916][T18897] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.4875: Bad quota inode: 4, type: 1 [ 358.795286][T18905] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.4878: Bad quota inode: 4, type: 1 [ 358.796949][T18897] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 358.807429][T18905] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 358.836616][T18905] EXT4-fs (loop1): mount failed [ 358.842348][T18897] EXT4-fs (loop5): mount failed [ 358.848419][T12603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.910102][T18914] syzkaller0: entered promiscuous mode [ 358.915792][T18914] syzkaller0: entered allmulticast mode [ 359.027507][T18924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4884'. [ 359.057344][T18926] loop1: detected capacity change from 0 to 512 [ 359.071260][T18926] EXT4-fs (loop1): failed to initialize system zone (-117) [ 359.071346][T18926] EXT4-fs (loop1): mount failed [ 359.131825][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4887'. [ 359.181831][T18936] bridge0: entered promiscuous mode [ 359.187547][T18936] macsec1: entered promiscuous mode [ 359.194072][T18936] bridge0: port 3(macsec1) entered blocking state [ 359.200878][T18936] bridge0: port 3(macsec1) entered disabled state [ 359.209980][T18939] loop1: detected capacity change from 0 to 512 [ 359.213345][T18940] loop5: detected capacity change from 0 to 2048 [ 359.217662][T18939] EXT4-fs: Ignoring removed bh option [ 359.228652][T18936] macsec1: entered allmulticast mode [ 359.233998][T18936] bridge0: entered allmulticast mode [ 359.247119][T18943] FAULT_INJECTION: forcing a failure. [ 359.247119][T18943] name failslab, interval 1, probability 0, space 0, times 0 [ 359.260079][T18943] CPU: 0 UID: 0 PID: 18943 Comm: syz.4.4892 Not tainted syzkaller #0 PREEMPT(voluntary) [ 359.260111][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.260131][T18943] Call Trace: [ 359.260140][T18943] [ 359.260150][T18943] __dump_stack+0x1d/0x30 [ 359.260178][T18943] dump_stack_lvl+0xe8/0x140 [ 359.260204][T18943] dump_stack+0x15/0x1b [ 359.260225][T18943] should_fail_ex+0x265/0x280 [ 359.260306][T18943] should_failslab+0x8c/0xb0 [ 359.260339][T18943] kmem_cache_alloc_node_noprof+0x57/0x320 [ 359.260375][T18943] ? __alloc_skb+0x101/0x320 [ 359.260399][T18943] __alloc_skb+0x101/0x320 [ 359.260443][T18943] ? audit_log_start+0x365/0x6c0 [ 359.260522][T18943] audit_log_start+0x380/0x6c0 [ 359.260556][T18943] audit_seccomp+0x48/0x100 [ 359.260588][T18943] ? __seccomp_filter+0x68c/0x10d0 [ 359.260616][T18943] __seccomp_filter+0x69d/0x10d0 [ 359.260721][T18943] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 359.260794][T18943] ? vfs_write+0x7e8/0x960 [ 359.260819][T18943] ? __rcu_read_unlock+0x4f/0x70 [ 359.260841][T18943] ? __fget_files+0x184/0x1c0 [ 359.260874][T18943] __secure_computing+0x82/0x150 [ 359.260972][T18943] syscall_trace_enter+0xcf/0x1e0 [ 359.261001][T18943] do_syscall_64+0xac/0x200 [ 359.261042][T18943] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 359.261072][T18943] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 359.261124][T18943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.261151][T18943] RIP: 0033:0x7feba18deec9 [ 359.261170][T18943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.261196][T18943] RSP: 002b:00007feba033f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 359.261220][T18943] RAX: ffffffffffffffda RBX: 00007feba1b35fa0 RCX: 00007feba18deec9 [ 359.261235][T18943] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000417000 [ 359.261247][T18943] RBP: 00007feba033f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.261262][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.261278][T18943] R13: 00007feba1b36038 R14: 00007feba1b35fa0 R15: 00007ffe794a16b8 [ 359.261302][T18943] [ 359.261667][T18936] macsec1: left allmulticast mode [ 359.307009][T18948] netlink: 'syz.4.4893': attribute type 21 has an invalid length. [ 359.311515][T18936] bridge0: left allmulticast mode [ 359.332835][T18939] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.4891: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 359.355853][T18940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.357846][T18939] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.4891: Bad quota inode: 4, type: 1 [ 359.385374][T18936] bridge0: left promiscuous mode [ 359.412845][T18939] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.571582][T18939] EXT4-fs (loop1): mount failed [ 359.644667][T18959] loop1: detected capacity change from 0 to 512 [ 359.693640][T18959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.738352][T18959] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.750692][T18968] loop2: detected capacity change from 0 to 512 [ 359.803416][T18966] syzkaller0: entered promiscuous mode [ 359.809083][T18966] syzkaller0: entered allmulticast mode [ 359.820074][T18958] loop4: detected capacity change from 0 to 8192 [ 359.833259][T18968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.864427][T18968] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.874695][T13572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.939381][T18974] serio: Serial port ptm0 [ 359.997566][T13345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.026479][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4899'. [ 360.108689][T18984] FAULT_INJECTION: forcing a failure. [ 360.108689][T18984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.124818][T18984] CPU: 1 UID: 0 PID: 18984 Comm: syz.6.4902 Not tainted syzkaller #0 PREEMPT(voluntary) [ 360.124903][T18984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.124917][T18984] Call Trace: [ 360.124926][T18984] [ 360.124934][T18984] __dump_stack+0x1d/0x30 [ 360.124963][T18984] dump_stack_lvl+0xe8/0x140 [ 360.124988][T18984] dump_stack+0x15/0x1b [ 360.125012][T18984] should_fail_ex+0x265/0x280 [ 360.125046][T18984] should_fail+0xb/0x20 [ 360.125122][T18984] should_fail_usercopy+0x1a/0x20 [ 360.125184][T18984] _copy_to_iter+0xd2/0xe70 [ 360.125227][T18984] ? xas_load+0x413/0x430 [ 360.125262][T18984] ? xas_load+0x413/0x430 [ 360.125378][T18984] ? __rcu_read_unlock+0x4f/0x70 [ 360.125408][T18984] ? xa_load+0xb1/0xe0 [ 360.125427][T18984] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 360.125468][T18984] __skb_datagram_iter+0xc6/0x690 [ 360.125541][T18984] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 360.125572][T18984] skb_copy_datagram_iter+0x3d/0x110 [ 360.125609][T18984] unix_stream_read_actor+0x43/0x70 [ 360.125717][T18984] unix_stream_read_generic+0x6ae/0x1580 [ 360.125852][T18984] unix_stream_recvmsg+0xc3/0xf0 [ 360.125884][T18984] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 360.125913][T18984] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 360.125974][T18984] sock_recvmsg+0x139/0x170 [ 360.126011][T18984] ____sys_recvmsg+0xf5/0x280 [ 360.126057][T18984] ___sys_recvmsg+0x11f/0x370 [ 360.126116][T18984] __x64_sys_recvmsg+0xd1/0x160 [ 360.126211][T18984] x64_sys_call+0x2b42/0x2ff0 [ 360.126237][T18984] do_syscall_64+0xd2/0x200 [ 360.126277][T18984] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 360.126346][T18984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 360.126390][T18984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.126421][T18984] RIP: 0033:0x7eff3edeeec9 [ 360.126442][T18984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.126489][T18984] RSP: 002b:00007eff3d84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 360.126512][T18984] RAX: ffffffffffffffda RBX: 00007eff3f045fa0 RCX: 00007eff3edeeec9 [ 360.126530][T18984] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 360.126547][T18984] RBP: 00007eff3d84f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.126614][T18984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.126631][T18984] R13: 00007eff3f046038 R14: 00007eff3f045fa0 R15: 00007ffdedae07c8 [ 360.126656][T18984] [ 360.410630][T18986] lo speed is unknown, defaulting to 1000 [ 360.438860][T14019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.470723][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4900'. [ 360.484295][T18988] netlink: 'syz.5.4904': attribute type 21 has an invalid length. [ 360.594977][T18997] tipc: Enabling of bearer rejected, failed to enable media [ 360.615261][T19003] bridge0: entered promiscuous mode [ 360.620646][T19003] macsec1: entered promiscuous mode [ 360.639922][T19003] bridge0: port 3(macsec1) entered blocking state [ 360.646683][T19003] bridge0: port 3(macsec1) entered disabled state [ 360.653702][T19003] macsec1: entered allmulticast mode [ 360.659078][T19003] bridge0: entered allmulticast mode [ 360.668232][T19004] loop6: detected capacity change from 0 to 512 [ 360.677071][T19003] macsec1: left allmulticast mode [ 360.682787][T19003] bridge0: left allmulticast mode [ 360.691817][T19003] bridge0: left promiscuous mode [ 360.710150][T18997] syzkaller0: entered promiscuous mode [ 360.715903][T18997] syzkaller0: entered allmulticast mode [ 360.733006][T19004] EXT4-fs: Ignoring removed bh option [ 360.746334][T19004] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4910: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 360.770737][T19004] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.4910: Bad quota inode: 4, type: 1 [ 360.811847][T19004] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.832789][T19006] syzkaller0: entered promiscuous mode [ 360.838787][T19006] syzkaller0: entered allmulticast mode [ 360.931616][T19004] EXT4-fs (loop6): mount failed [ 360.994153][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4913'. [ 361.233678][T19022] loop2: detected capacity change from 0 to 512 [ 361.269549][T19026] loop1: detected capacity change from 0 to 1024 [ 361.303384][T19026] EXT4-fs: Ignoring removed orlov option [ 361.352759][T19022] EXT4-fs (loop2): failed to initialize system zone (-117) [ 361.362974][T19022] EXT4-fs (loop2): mount failed [ 361.369191][T19030] loop6: detected capacity change from 0 to 1024 [ 361.379019][T19030] EXT4-fs: Ignoring removed orlov option [ 361.392269][T19030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.407873][T19030] FAULT_INJECTION: forcing a failure. [ 361.407873][T19030] name failslab, interval 1, probability 0, space 0, times 0 [ 361.413817][T19026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.421221][T19030] CPU: 1 UID: 0 PID: 19030 Comm: syz.6.4917 Not tainted syzkaller #0 PREEMPT(voluntary) [ 361.421262][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.421281][T19030] Call Trace: [ 361.421290][T19030] [ 361.421302][T19030] __dump_stack+0x1d/0x30 [ 361.421409][T19030] dump_stack_lvl+0xe8/0x140 [ 361.421438][T19030] dump_stack+0x15/0x1b [ 361.421461][T19030] should_fail_ex+0x265/0x280 [ 361.421523][T19030] ? alloc_pipe_info+0xae/0x350 [ 361.421559][T19030] should_failslab+0x8c/0xb0 [ 361.421595][T19030] __kmalloc_cache_noprof+0x4c/0x320 [ 361.421650][T19030] alloc_pipe_info+0xae/0x350 [ 361.421687][T19030] splice_direct_to_actor+0x592/0x680 [ 361.421766][T19030] ? kstrtouint_from_user+0x9f/0xf0 [ 361.421793][T19030] ? __pfx_direct_splice_actor+0x10/0x10 [ 361.421817][T19030] ? __rcu_read_unlock+0x4f/0x70 [ 361.421848][T19030] ? get_pid_task+0x96/0xd0 [ 361.421930][T19030] ? avc_policy_seqno+0x15/0x30 [ 361.421993][T19030] ? selinux_file_permission+0x1e4/0x320 [ 361.422028][T19030] do_splice_direct+0xda/0x150 [ 361.422057][T19030] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 361.422095][T19030] do_sendfile+0x380/0x650 [ 361.422222][T19030] __x64_sys_sendfile64+0x105/0x150 [ 361.422283][T19030] x64_sys_call+0x2bb0/0x2ff0 [ 361.422314][T19030] do_syscall_64+0xd2/0x200 [ 361.422374][T19030] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 361.422408][T19030] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 361.422453][T19030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.422528][T19030] RIP: 0033:0x7eff3edeeec9 [ 361.422553][T19030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.422652][T19030] RSP: 002b:00007eff3d84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 361.422679][T19030] RAX: ffffffffffffffda RBX: 00007eff3f045fa0 RCX: 00007eff3edeeec9 [ 361.422723][T19030] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 361.422739][T19030] RBP: 00007eff3d84f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.422757][T19030] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 361.422775][T19030] R13: 00007eff3f046038 R14: 00007eff3f045fa0 R15: 00007ffdedae07c8 [ 361.422803][T19030] [ 361.497272][T19036] loop2: detected capacity change from 0 to 512 [ 361.587530][T12435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.645214][T19037] loop4: detected capacity change from 0 to 8192 [ 361.704776][T19039] netlink: 'syz.6.4919': attribute type 21 has an invalid length. [ 361.723003][T19036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.745109][T19036] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.840421][T13345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.846399][T19037] serio: Serial port ptm0 [ 361.869432][T19046] loop6: detected capacity change from 0 to 2048 [ 361.888029][T19046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.909778][T19048] syzkaller0: entered promiscuous mode [ 361.915529][T19048] syzkaller0: entered allmulticast mode [ 361.925157][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 361.925214][ T29] audit: type=1326 audit(1758548749.803:29336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 361.957137][ T29] audit: type=1326 audit(1758548749.833:29337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 361.984908][ T29] audit: type=1326 audit(1758548749.853:29338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.009107][ T29] audit: type=1326 audit(1758548749.853:29339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.032911][ T29] audit: type=1326 audit(1758548749.853:29340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.057572][ T29] audit: type=1326 audit(1758548749.853:29341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.081805][ T29] audit: type=1326 audit(1758548749.853:29342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.105534][ T29] audit: type=1326 audit(1758548749.853:29343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.129261][ T29] audit: type=1326 audit(1758548749.853:29344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.134143][T19046] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4922: bg 0: block 234: padding at end of block bitmap is not set [ 362.153232][ T29] audit: type=1326 audit(1758548749.853:29345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19045 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 362.193466][T13572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.213983][T19046] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 362.226680][T19046] EXT4-fs (loop6): This should not happen!! Data will be lost [ 362.226680][T19046] [ 362.292741][T12435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.293632][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 362.337379][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4925'. [ 362.497029][T16580] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 362.515494][T16580] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.683758][T19084] netlink: 'syz.2.4932': attribute type 21 has an invalid length. [ 362.693170][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4931'. [ 362.749040][T19090] loop2: detected capacity change from 0 to 512 [ 362.751622][T19089] loop4: detected capacity change from 0 to 512 [ 362.762370][T19090] EXT4-fs: Ignoring removed bh option [ 362.808825][T19092] syzkaller0: entered promiscuous mode [ 362.810959][T19090] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.4934: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 362.814450][T19092] syzkaller0: entered allmulticast mode [ 362.840472][T19090] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4934: Bad quota inode: 4, type: 1 [ 362.853339][T19089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.867010][T19090] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 362.875118][T19089] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.904700][T19090] EXT4-fs (loop2): mount failed [ 362.986256][T19100] loop2: detected capacity change from 0 to 512 [ 363.015954][T19100] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 363.027257][T12603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.037920][T19100] EXT4-fs (loop2): orphan cleanup on readonly fs [ 363.046771][T19100] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4937: corrupted inode contents [ 363.063178][T19100] EXT4-fs (loop2): Remounting filesystem read-only [ 363.070913][T19100] EXT4-fs (loop2): 1 truncate cleaned up [ 363.078218][T10388] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 363.089363][T10388] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 363.139532][T10388] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 363.151093][T19100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.164541][T19100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.188317][T19119] netlink: 'syz.6.4944': attribute type 21 has an invalid length. [ 363.196393][T19116] loop4: detected capacity change from 0 to 512 [ 363.226898][T19116] EXT4-fs (loop4): failed to initialize system zone (-117) [ 363.238675][T19116] EXT4-fs (loop4): mount failed [ 363.296442][T19127] loop2: detected capacity change from 0 to 512 [ 363.318482][T19127] EXT4-fs: Ignoring removed bh option [ 363.347010][T19131] loop1: detected capacity change from 0 to 2048 [ 363.370955][T19127] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.4947: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 363.381370][T19135] loop4: detected capacity change from 0 to 512 [ 363.393740][T19127] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4947: Bad quota inode: 4, type: 1 [ 363.414332][T19127] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 363.415930][T19131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.440338][T19127] EXT4-fs (loop2): mount failed [ 363.447443][T19135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.462805][T19135] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.533072][T13572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.545169][T12603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.578156][T19152] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4954'. [ 363.599812][T19150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4952'. [ 363.615628][T19154] netlink: 'syz.4.4956': attribute type 21 has an invalid length. [ 363.637639][T19156] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 363.674658][T19159] loop1: detected capacity change from 0 to 2048 [ 363.703975][T19156] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.726553][T19159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.752313][T19156] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.808828][T19156] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.895778][T19156] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.906577][T19172] loop2: detected capacity change from 0 to 512 [ 363.928002][T19172] EXT4-fs: Ignoring removed bh option [ 363.935915][T19174] loop6: detected capacity change from 0 to 512 [ 363.950471][T19174] EXT4-fs: Ignoring removed bh option [ 363.970529][T19172] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.4960: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 364.000986][T19174] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4961: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 364.016807][T19172] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4960: Bad quota inode: 4, type: 1 [ 364.037384][T19174] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.4961: Bad quota inode: 4, type: 1 [ 364.067221][T19172] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.077737][T19174] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.096344][T10388] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.104925][T19174] EXT4-fs (loop6): mount failed [ 364.120498][T19172] EXT4-fs (loop2): mount failed [ 364.127925][T10388] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.139342][T10388] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.158232][T10388] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.204337][T19184] loop6: detected capacity change from 0 to 512 [ 364.220548][T19184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.242465][T19184] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.252521][T19190] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4966'. [ 364.296019][T19192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4967'. [ 364.300342][T12435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.330676][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4969'. [ 364.347802][T19196] netlink: 'syz.6.4968': attribute type 21 has an invalid length. [ 364.378620][T19199] loop2: detected capacity change from 0 to 512 [ 364.386411][T19199] EXT4-fs: Ignoring removed bh option [ 364.416560][T19199] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.4970: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 364.454332][T19199] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4970: Bad quota inode: 4, type: 1 [ 364.474062][T19199] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.502157][T19199] EXT4-fs (loop2): mount failed [ 364.529017][T13572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.552037][T19207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.581001][T19207] bridge_slave_0: left allmulticast mode [ 364.586759][T19207] bridge_slave_0: left promiscuous mode [ 364.592571][T19207] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.613007][T19207] bridge_slave_1: left allmulticast mode [ 364.618975][T19207] bridge_slave_1: left promiscuous mode [ 364.624811][T19207] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.638010][T19220] loop5: detected capacity change from 0 to 512 [ 364.653888][T19221] loop1: detected capacity change from 0 to 512 [ 364.665144][T19207] bond0: (slave bond_slave_0): Releasing backup interface [ 364.684322][T19207] bond0: (slave bond_slave_1): Releasing backup interface [ 364.693312][T19223] loop2: detected capacity change from 0 to 512 [ 364.704545][T19221] EXT4-fs: Ignoring removed bh option [ 364.712303][T19207] team0: Port device team_slave_0 removed [ 364.716342][T19220] EXT4-fs (loop5): failed to initialize system zone (-117) [ 364.738561][T19220] EXT4-fs (loop5): mount failed [ 364.776008][T19207] team0: Port device team_slave_1 removed [ 364.785608][T19223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.803884][T19221] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.4974: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 364.837054][T19223] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.862689][T19221] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.4974: Bad quota inode: 4, type: 1 [ 364.908139][T19239] loop5: detected capacity change from 0 to 512 [ 364.915720][T19240] netlink: 'syz.4.4982': attribute type 21 has an invalid length. [ 364.928864][T19221] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.934629][T19239] EXT4-fs: Ignoring removed bh option [ 364.961094][T19221] EXT4-fs (loop1): mount failed [ 364.993561][T13345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.021061][T19239] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.4981: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 365.044623][T19246] loop4: detected capacity change from 0 to 2048 [ 365.052856][T19239] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.4981: Bad quota inode: 4, type: 1 [ 365.075608][T19239] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 365.096275][T19246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.115863][T19239] EXT4-fs (loop5): mount failed [ 365.121668][T19254] loop6: detected capacity change from 0 to 512 [ 365.131931][T19254] EXT4-fs: Ignoring removed bh option [ 365.182404][T19256] syzkaller0: entered promiscuous mode [ 365.188006][T19256] syzkaller0: entered allmulticast mode [ 365.202211][T19254] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4987: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 365.222602][T19254] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.4987: Bad quota inode: 4, type: 1 [ 365.235988][T19254] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 365.253631][T19254] EXT4-fs (loop6): mount failed [ 365.316766][T19265] loop5: detected capacity change from 0 to 128 [ 365.343972][T19265] EXT4-fs: Ignoring removed nobh option [ 365.369738][T19265] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.379643][T19273] netlink: 'syz.2.4993': attribute type 21 has an invalid length. [ 365.390025][T19270] loop6: detected capacity change from 0 to 2048 [ 365.397063][T19265] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.431844][T19270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.445609][T14019] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.479978][T19280] loop2: detected capacity change from 0 to 512 [ 365.483252][T19278] loop5: detected capacity change from 0 to 2048 [ 365.514094][T19278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.528356][T19280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.542023][T19280] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.562959][T19278] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4994: bg 0: block 234: padding at end of block bitmap is not set [ 365.579668][T19278] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 365.592874][T19278] EXT4-fs (loop5): This should not happen!! Data will be lost [ 365.592874][T19278] [ 365.687547][T19290] loop2: detected capacity change from 0 to 512 [ 365.716717][T19290] EXT4-fs (loop2): failed to initialize system zone (-117) [ 365.724494][T19290] EXT4-fs (loop2): mount failed [ 365.725508][T19293] __nla_validate_parse: 3 callbacks suppressed [ 365.725526][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4998'. [ 365.812780][T19297] loop2: detected capacity change from 0 to 512 [ 365.824115][T19297] EXT4-fs (loop2): failed to initialize system zone (-117) [ 365.834119][T19299] loop5: detected capacity change from 0 to 2048 [ 365.838959][T19297] EXT4-fs (loop2): mount failed [ 365.870407][T19299] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5001: bg 0: block 234: padding at end of block bitmap is not set [ 365.918704][T19299] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 365.931326][T19299] EXT4-fs (loop5): This should not happen!! Data will be lost [ 365.931326][T19299] [ 365.963107][T19305] loop4: detected capacity change from 0 to 512 [ 365.976615][T19306] syzkaller0: entered promiscuous mode [ 365.982317][T19306] syzkaller0: entered allmulticast mode [ 366.000864][T19310] loop2: detected capacity change from 0 to 128 [ 366.007843][T19305] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 366.023941][T19305] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.032039][T19310] EXT4-fs: Ignoring removed nobh option [ 366.067016][T19310] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.080339][T19305] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5002: corrupted inode contents [ 366.108013][T19305] EXT4-fs (loop4): Remounting filesystem read-only [ 366.115270][T19305] EXT4-fs (loop4): 1 truncate cleaned up [ 366.121926][T10403] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.134261][T10403] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.145978][T19316] loop5: detected capacity change from 0 to 2048 [ 366.158690][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'. [ 366.163409][T10403] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 366.205780][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'. [ 366.273020][T19316] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5006: bg 0: block 234: padding at end of block bitmap is not set [ 366.273258][T19316] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 366.273358][T19316] EXT4-fs (loop5): This should not happen!! Data will be lost [ 366.273358][T19316] [ 366.320665][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'. [ 366.433430][T19335] loop4: detected capacity change from 0 to 512 [ 366.440327][T19343] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5014'. [ 366.454000][T19344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5016'. [ 366.483706][T19340] loop1: detected capacity change from 0 to 512 [ 366.496062][T19335] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 366.499633][T19347] loop5: detected capacity change from 0 to 128 [ 366.504618][T19335] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.512020][T19343] loop6: detected capacity change from 0 to 1024 [ 366.513522][T19343] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 366.542894][T19335] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5012: corrupted inode contents [ 366.547401][T19347] EXT4-fs: Ignoring removed nobh option [ 366.579040][T19335] EXT4-fs (loop4): Remounting filesystem read-only [ 366.593720][T19347] ext4 filesystem being mounted at /329/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.595052][T19335] EXT4-fs (loop4): 1 truncate cleaned up [ 366.613052][T10381] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.625450][T10381] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.640869][T10381] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 366.654721][T19340] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 366.669497][T19340] EXT4-fs (loop1): orphan cleanup on readonly fs [ 366.680430][T19340] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5013: corrupted inode contents [ 366.714775][T19358] syzkaller0: entered promiscuous mode [ 366.720825][T19358] syzkaller0: entered allmulticast mode [ 366.732722][T19340] EXT4-fs (loop1): Remounting filesystem read-only [ 366.739997][T19340] EXT4-fs (loop1): 1 truncate cleaned up [ 366.746764][ T8885] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.748417][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.757791][ T8885] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.766491][ T8885] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 366.778480][T19360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.798790][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.806491][T19360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.900305][T19363] syzkaller0: entered promiscuous mode [ 366.906185][T19363] syzkaller0: entered allmulticast mode [ 366.935401][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 366.935421][ T29] audit: type=1326 audit(1758548754.813:29691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.4.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba18deec9 code=0x7ffc0000 [ 366.967212][ T29] audit: type=1326 audit(1758548754.813:29692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.4.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba18deec9 code=0x7ffc0000 [ 367.010604][ T29] audit: type=1326 audit(1758548754.813:29693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b628eec9 code=0x7ffc0000 [ 367.034683][ T29] audit: type=1326 audit(1758548754.813:29694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b628eec9 code=0x7ffc0000 [ 367.054713][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5023'. [ 367.059998][ T29] audit: type=1326 audit(1758548754.823:29695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f40b628eec9 code=0x7ffc0000 [ 367.088918][T19370] loop5: detected capacity change from 0 to 1024 [ 367.097308][ T29] audit: type=1326 audit(1758548754.823:29696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b628eec9 code=0x7ffc0000 [ 367.129077][ T29] audit: type=1326 audit(1758548754.843:29697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b628eec9 code=0x7ffc0000 [ 367.130258][T19370] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 367.173195][ T29] audit: type=1326 audit(1758548754.903:29698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.6.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 367.198150][ T29] audit: type=1326 audit(1758548754.903:29699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.6.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 367.223668][ T29] audit: type=1326 audit(1758548754.903:29700): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.6.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3edeeec9 code=0x7ffc0000 [ 367.283797][T19380] loop4: detected capacity change from 0 to 512 [ 367.338268][T19388] loop5: detected capacity change from 0 to 128 [ 367.345490][T19388] EXT4-fs: Ignoring removed nobh option [ 367.352282][T19380] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.354268][T19382] macsec1: entered promiscuous mode [ 367.369159][T19382] bridge0: entered promiscuous mode [ 367.377228][T19382] bridge0: port 3(macsec1) entered blocking state [ 367.384226][T19382] bridge0: port 3(macsec1) entered disabled state [ 367.391673][T19382] macsec1: entered allmulticast mode [ 367.397318][T19382] bridge0: entered allmulticast mode [ 367.405269][T19388] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.416714][T19382] macsec1: left allmulticast mode [ 367.422231][T19382] bridge0: left allmulticast mode [ 367.455123][T19382] bridge0: left promiscuous mode [ 367.482259][T19397] loop5: detected capacity change from 0 to 512 [ 367.512821][T19397] EXT4-fs (loop5): failed to initialize system zone (-117) [ 367.523214][T19397] EXT4-fs (loop5): mount failed [ 367.556918][T19404] syzkaller0: entered promiscuous mode [ 367.562441][T19404] syzkaller0: entered allmulticast mode [ 367.577949][T19405] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.591768][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5035'. [ 367.721445][T19418] loop2: detected capacity change from 0 to 512 [ 367.730258][T19418] EXT4-fs: Ignoring removed bh option [ 367.751126][T19418] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.5040: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 367.771996][T19418] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.5040: Bad quota inode: 4, type: 1 [ 367.784205][T19418] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 367.805805][T19426] loop4: detected capacity change from 0 to 128 [ 367.806636][T19418] EXT4-fs (loop2): mount failed [ 367.814456][T19426] EXT4-fs: Ignoring removed nobh option [ 367.834463][T19426] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.903368][T19432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.910755][T19432] IPv6: NLM_F_CREATE should be set when creating new route [ 367.921819][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5044'. [ 367.962224][T19438] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5047'. [ 367.986103][T19440] loop2: detected capacity change from 0 to 1024 [ 367.993831][T19440] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 368.015922][T19442] syzkaller0: entered promiscuous mode [ 368.023170][T19442] syzkaller0: entered allmulticast mode [ 368.136957][T19450] loop6: detected capacity change from 0 to 2048 [ 368.179116][T19450] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5052: bg 0: block 234: padding at end of block bitmap is not set [ 368.199169][T19450] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 368.201325][T19455] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 368.213916][T19450] EXT4-fs (loop6): This should not happen!! Data will be lost [ 368.213916][T19450] [ 368.293630][T19459] loop6: detected capacity change from 0 to 512 [ 368.302329][T19459] EXT4-fs (loop6): failed to initialize system zone (-117) [ 368.310176][T19459] EXT4-fs (loop6): mount failed [ 368.399190][T19474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.406618][T19474] IPv6: NLM_F_CREATE should be set when creating new route [ 368.468267][T19484] loop1: detected capacity change from 0 to 1024 [ 368.476702][T19484] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 368.534290][T19491] syzkaller0: entered promiscuous mode [ 368.540333][T19491] syzkaller0: entered allmulticast mode [ 368.632006][T19495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.639416][T19495] IPv6: NLM_F_CREATE should be set when creating new route [ 368.698139][T19499] bridge0: entered promiscuous mode [ 368.703818][T19499] macsec1: entered promiscuous mode [ 368.711727][T19499] bridge0: port 3(macsec1) entered blocking state [ 368.718275][T19499] bridge0: port 3(macsec1) entered disabled state [ 368.725466][T19499] macsec1: entered allmulticast mode [ 368.731530][T19499] bridge0: entered allmulticast mode [ 368.737714][T19499] macsec1: left allmulticast mode [ 368.746908][T19499] bridge0: left allmulticast mode [ 368.754032][T19499] bridge0: left promiscuous mode [ 368.823850][T19503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 368.893316][T19505] loop4: detected capacity change from 0 to 8192 [ 368.958652][T19507] serio: Serial port ptm0 [ 369.025801][T19509] loop2: detected capacity change from 0 to 512 [ 369.046647][T19509] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 369.054944][T19509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 369.064646][T19509] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5069: corrupted inode contents [ 369.078448][T19509] EXT4-fs (loop2): Remounting filesystem read-only [ 369.085716][T19509] EXT4-fs (loop2): 1 truncate cleaned up [ 369.092056][T10428] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.103139][T10428] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.115963][T10428] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 369.258049][T19519] loop2: detected capacity change from 0 to 2048 [ 369.467040][T19528] syzkaller0: entered promiscuous mode [ 369.474072][T19528] syzkaller0: entered allmulticast mode [ 369.636889][T19536] loop6: detected capacity change from 0 to 128 [ 369.670128][T19536] EXT4-fs: Ignoring removed nobh option [ 369.715314][T19543] loop1: detected capacity change from 0 to 512 [ 369.734289][T19536] ext4 filesystem being mounted at /457/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.748819][T19543] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.828968][T19550] macsec1: entered promiscuous mode [ 369.834488][T19550] bridge0: entered promiscuous mode [ 369.851927][T19550] bridge0: port 3(macsec1) entered blocking state [ 369.858773][T19550] bridge0: port 3(macsec1) entered disabled state [ 369.894966][T19550] macsec1: entered allmulticast mode [ 369.900402][T19550] bridge0: entered allmulticast mode [ 369.920871][T19550] macsec1: left allmulticast mode [ 369.926502][T19550] bridge0: left allmulticast mode [ 369.931966][T19560] loop4: detected capacity change from 0 to 512 [ 369.932521][T19557] loop1: detected capacity change from 0 to 512 [ 369.941946][T19560] EXT4-fs: Ignoring removed bh option [ 369.956673][T19550] bridge0: left promiscuous mode [ 369.963729][T19557] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 369.972853][T19557] EXT4-fs (loop1): orphan cleanup on readonly fs [ 369.981807][T19557] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5080: corrupted inode contents [ 369.983751][T19560] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.5079: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 369.994743][T19557] EXT4-fs (loop1): Remounting filesystem read-only [ 370.019846][T19557] EXT4-fs (loop1): 1 truncate cleaned up [ 370.031289][T10403] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.041177][T19560] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5079: Bad quota inode: 4, type: 1 [ 370.042740][T10403] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.054272][T19560] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.066471][T10403] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 370.093370][T19560] EXT4-fs (loop4): mount failed [ 370.211336][T19580] loop2: detected capacity change from 0 to 512 [ 370.236951][T19580] EXT4-fs: Ignoring removed bh option [ 370.245668][T19585] syzkaller0: entered promiscuous mode [ 370.251384][T19585] syzkaller0: entered allmulticast mode [ 370.285703][T19580] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.5084: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 370.312537][T19580] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.5084: Bad quota inode: 4, type: 1 [ 370.332250][T19580] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.350430][T19580] EXT4-fs (loop2): mount failed [ 370.357670][T19589] syzkaller0: entered promiscuous mode [ 370.363401][T19589] syzkaller0: entered allmulticast mode [ 370.562398][T19618] loop6: detected capacity change from 0 to 512 [ 370.587268][T19618] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.601089][T19614] syzkaller0: entered promiscuous mode [ 370.607059][T19614] syzkaller0: entered allmulticast mode [ 370.675757][T19626] loop5: detected capacity change from 0 to 512 [ 370.682993][T19626] EXT4-fs: Ignoring removed bh option [ 370.694489][T19628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.701997][T19628] IPv6: NLM_F_CREATE should be set when creating new route [ 370.712988][T19626] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.5095: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 370.732103][T19626] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5095: Bad quota inode: 4, type: 1 [ 370.745088][T19626] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.760553][T19626] EXT4-fs (loop5): mount failed [ 370.774135][T19632] loop6: detected capacity change from 0 to 512 [ 370.792260][T19632] EXT4-fs (loop6): failed to initialize system zone (-117) [ 370.800152][T19632] EXT4-fs (loop6): mount failed [ 370.881940][T19641] loop5: detected capacity change from 0 to 2048 [ 370.893514][T19639] loop6: detected capacity change from 0 to 2048 [ 370.920639][T19641] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5099: bg 0: block 234: padding at end of block bitmap is not set [ 370.942723][T19641] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 370.955761][T19641] EXT4-fs (loop5): This should not happen!! Data will be lost [ 370.955761][T19641] [ 371.011299][T19651] loop1: detected capacity change from 0 to 1024 [ 371.026234][T19653] loop5: detected capacity change from 0 to 512 [ 371.043236][T19651] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 371.085539][T19653] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.088465][T19663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.103768][T19663] IPv6: NLM_F_CREATE should be set when creating new route [ 371.113882][T19663] __nla_validate_parse: 6 callbacks suppressed [ 371.113902][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5106'. [ 371.153274][T19665] loop6: detected capacity change from 0 to 512 [ 371.172706][T19667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5108'. [ 371.185500][T19665] EXT4-fs (loop6): failed to initialize system zone (-117) [ 371.201783][T19665] EXT4-fs (loop6): mount failed [ 371.251768][T19672] loop1: detected capacity change from 0 to 512 [ 371.289158][T19672] EXT4-fs: Ignoring removed bh option [ 371.293311][T19676] loop2: detected capacity change from 0 to 2048 [ 371.336295][T19672] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.5109: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 371.362580][T19672] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5109: Bad quota inode: 4, type: 1 [ 371.375566][T19683] 9pnet_virtio: no channels available for device [ 371.378776][T19672] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 371.399417][T19672] EXT4-fs (loop1): mount failed [ 371.463725][T19693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.471197][T19693] IPv6: NLM_F_CREATE should be set when creating new route [ 371.482975][T19696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.490847][T19696] IPv6: NLM_F_CREATE should be set when creating new route [ 371.527741][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5120'. [ 371.555811][T19698] loop1: detected capacity change from 0 to 512 [ 371.598269][T19698] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.651195][T19712] loop4: detected capacity change from 0 to 2048 [ 371.720253][T19718] 9pnet_virtio: no channels available for device [ 371.810751][T19723] loop6: detected capacity change from 0 to 512 [ 371.830147][T19726] loop4: detected capacity change from 0 to 512 [ 371.847399][T19726] EXT4-fs: Ignoring removed bh option [ 371.867608][T19728] loop2: detected capacity change from 0 to 512 [ 371.883343][T19723] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 371.907786][T19728] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 371.927050][T19726] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.5131: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 371.945150][T19728] EXT4-fs (loop2): orphan cleanup on readonly fs [ 371.953209][T19741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.958791][T19723] EXT4-fs (loop6): orphan cleanup on readonly fs [ 371.960665][T19741] IPv6: NLM_F_CREATE should be set when creating new route [ 371.980590][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5135'. [ 371.989577][T19726] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5131: Bad quota inode: 4, type: 1 [ 371.992088][T19728] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5132: corrupted inode contents [ 372.015365][T19726] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 372.032087][T19726] EXT4-fs (loop4): mount failed [ 372.035103][T19723] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.5130: corrupted inode contents [ 372.039441][T19728] EXT4-fs (loop2): Remounting filesystem read-only [ 372.054731][T19743] loop1: detected capacity change from 0 to 512 [ 372.058420][T19728] EXT4-fs (loop2): 1 truncate cleaned up [ 372.069371][T10403] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.070086][T19723] EXT4-fs (loop6): Remounting filesystem read-only [ 372.080051][T10403] __quota_error: 406 callbacks suppressed [ 372.080128][T10403] Quota error (device loop2): write_blk: dquota write failed [ 372.088658][T19723] EXT4-fs (loop6): 1 truncate cleaned up [ 372.092409][T10403] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 372.108319][T19743] EXT4-fs (loop1): inodes count not valid: 1 vs 32 [ 372.116112][T10403] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.133637][T10403] Quota error (device loop2): write_blk: dquota write failed [ 372.141269][T10403] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 372.151972][T10403] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 372.162520][T10403] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 372.196668][T10403] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 372.220796][T10403] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.231578][T10403] Quota error (device loop6): write_blk: dquota write failed [ 372.239382][T10403] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 372.249420][T10403] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.260100][T10403] Quota error (device loop6): write_blk: dquota write failed [ 372.267602][T10403] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 372.288250][T10403] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 372.406557][T19757] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5141'. [ 372.409960][T19757] loop6: detected capacity change from 0 to 512 [ 372.414922][T19757] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 372.415132][T19757] EXT4-fs (loop6): orphan cleanup on readonly fs [ 372.416182][T19757] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.5141: Failed to acquire dquot type 1 [ 372.416635][T19757] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5141: bg 0: block 40: padding at end of block bitmap is not set [ 372.416801][T19757] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 372.417018][T19757] EXT4-fs (loop6): 1 truncate cleaned up [ 372.447733][T19765] loop1: detected capacity change from 0 to 512 [ 372.448093][T19765] EXT4-fs: Ignoring removed bh option [ 372.457653][T19765] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.5144: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 372.457899][T19765] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5144: Bad quota inode: 4, type: 1 [ 372.458076][T19765] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 372.458304][T19765] EXT4-fs (loop1): mount failed [ 372.490616][T19771] loop6: detected capacity change from 0 to 512 [ 372.529508][T19773] loop1: detected capacity change from 0 to 1024 [ 372.588079][T19771] EXT4-fs (loop6): failed to initialize system zone (-117) [ 372.625785][T19771] EXT4-fs (loop6): mount failed [ 372.699493][T19780] syzkaller0: entered promiscuous mode [ 372.705311][T19780] syzkaller0: entered allmulticast mode [ 372.711743][T19778] loop6: detected capacity change from 0 to 2048 [ 372.752056][T19778] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5148: bg 0: block 234: padding at end of block bitmap is not set [ 372.767565][T19778] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 372.780653][T19778] EXT4-fs (loop6): This should not happen!! Data will be lost [ 372.780653][T19778] [ 372.872326][T19790] loop4: detected capacity change from 0 to 512 [ 372.889123][T19790] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 372.897789][T19790] EXT4-fs (loop4): orphan cleanup on readonly fs [ 372.922718][T19790] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5153: corrupted inode contents [ 372.942941][T19790] EXT4-fs (loop4): Remounting filesystem read-only [ 372.955455][T19790] EXT4-fs (loop4): 1 truncate cleaned up [ 372.962003][T10403] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.973171][T10403] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.985886][T10403] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 373.014657][T19802] FAULT_INJECTION: forcing a failure. [ 373.014657][T19802] name failslab, interval 1, probability 0, space 0, times 0 [ 373.028370][T19802] CPU: 1 UID: 0 PID: 19802 Comm: syz.6.5157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 373.028406][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.028420][T19802] Call Trace: [ 373.028425][T19802] [ 373.028432][T19802] __dump_stack+0x1d/0x30 [ 373.028454][T19802] dump_stack_lvl+0xe8/0x140 [ 373.028473][T19802] dump_stack+0x15/0x1b [ 373.028491][T19802] should_fail_ex+0x265/0x280 [ 373.028536][T19802] should_failslab+0x8c/0xb0 [ 373.028568][T19802] kmem_cache_alloc_noprof+0x50/0x310 [ 373.028596][T19802] ? vm_area_alloc+0x2c/0xb0 [ 373.028631][T19802] vm_area_alloc+0x2c/0xb0 [ 373.028668][T19802] mmap_region+0xaa2/0x1630 [ 373.028717][T19802] do_mmap+0x9b3/0xbe0 [ 373.028758][T19802] vm_mmap_pgoff+0x17a/0x2e0 [ 373.028799][T19802] ksys_mmap_pgoff+0xc2/0x310 [ 373.028832][T19802] ? __x64_sys_mmap+0x49/0x70 [ 373.028861][T19802] x64_sys_call+0x14a3/0x2ff0 [ 373.028887][T19802] do_syscall_64+0xd2/0x200 [ 373.028925][T19802] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 373.028954][T19802] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.028987][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.029008][T19802] RIP: 0033:0x7eff3edeef03 [ 373.029022][T19802] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 373.029040][T19802] RSP: 002b:00007eff3d84ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 373.029061][T19802] RAX: ffffffffffffffda RBX: 00000000000004fc RCX: 00007eff3edeef03 [ 373.029077][T19802] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 373.029092][T19802] RBP: 0000200000001282 R08: 00000000ffffffff R09: 0000000000000000 [ 373.029106][T19802] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 373.029117][T19802] R13: 00007eff3d84eef0 R14: 00007eff3d84eeb0 R15: 00002000000000c0 [ 373.029137][T19802] [ 373.305545][T19813] tipc: Enabled bearer , priority 0 [ 373.316205][T19813] tipc: Resetting bearer [ 373.324097][T19812] tipc: Disabling bearer [ 373.349568][T19811] loop4: detected capacity change from 0 to 2048 [ 373.357129][T19816] loop1: detected capacity change from 0 to 2048 [ 373.375778][T19807] loop2: detected capacity change from 0 to 8192 [ 373.457674][T19811] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5161: bg 0: block 234: padding at end of block bitmap is not set [ 373.458542][T19816] SELinux: failed to load policy [ 373.492818][T19811] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 373.505426][T19811] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.505426][T19811] [ 373.522535][T19824] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 373.537371][T19807] serio: Serial port ptm0 [ 373.556790][T19824] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.586414][T19828] loop1: detected capacity change from 0 to 2048 [ 373.619809][T19824] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.678253][T19828] FAULT_INJECTION: forcing a failure. [ 373.678253][T19828] name failslab, interval 1, probability 0, space 0, times 0 [ 373.691563][T19828] CPU: 0 UID: 0 PID: 19828 Comm: syz.1.5165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 373.691596][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.691613][T19828] Call Trace: [ 373.691622][T19828] [ 373.691633][T19828] __dump_stack+0x1d/0x30 [ 373.691688][T19828] dump_stack_lvl+0xe8/0x140 [ 373.691715][T19828] dump_stack+0x15/0x1b [ 373.691738][T19828] should_fail_ex+0x265/0x280 [ 373.691770][T19828] should_failslab+0x8c/0xb0 [ 373.691799][T19828] __kmalloc_cache_node_noprof+0x54/0x320 [ 373.691871][T19828] ? __get_vm_area_node+0x106/0x1d0 [ 373.691951][T19828] __get_vm_area_node+0x106/0x1d0 [ 373.691984][T19828] __vmalloc_node_range_noprof+0x273/0xe00 [ 373.692025][T19828] ? sel_write_load+0x158/0x380 [ 373.692065][T19828] ? __rcu_read_unlock+0x4f/0x70 [ 373.692154][T19828] ? sel_write_load+0x158/0x380 [ 373.692186][T19828] vmalloc_noprof+0x82/0xc0 [ 373.692228][T19828] ? sel_write_load+0x158/0x380 [ 373.692286][T19828] sel_write_load+0x158/0x380 [ 373.692320][T19828] ? __pfx_sel_write_load+0x10/0x10 [ 373.692361][T19828] vfs_write+0x266/0x960 [ 373.692390][T19828] ? __rcu_read_unlock+0x4f/0x70 [ 373.692449][T19828] ? __fget_files+0x184/0x1c0 [ 373.692487][T19828] ksys_write+0xda/0x1a0 [ 373.692519][T19828] __x64_sys_write+0x40/0x50 [ 373.692548][T19828] x64_sys_call+0x27fe/0x2ff0 [ 373.692616][T19828] do_syscall_64+0xd2/0x200 [ 373.692659][T19828] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 373.692690][T19828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.692792][T19828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.692818][T19828] RIP: 0033:0x7f40b628eec9 [ 373.692876][T19828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.692900][T19828] RSP: 002b:00007f40b4cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.692925][T19828] RAX: ffffffffffffffda RBX: 00007f40b64e5fa0 RCX: 00007f40b628eec9 [ 373.692942][T19828] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000004 [ 373.693034][T19828] RBP: 00007f40b4cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.693069][T19828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.693087][T19828] R13: 00007f40b64e6038 R14: 00007f40b64e5fa0 R15: 00007ffeb692d0c8 [ 373.693120][T19828] [ 373.693338][T19828] syz.1.5165: vmalloc error: size 24639, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 373.826713][T19844] loop4: detected capacity change from 0 to 512 [ 373.828553][T19828] ,cpuset= [ 373.833619][T19844] EXT4-fs: Ignoring removed bh option [ 373.837969][T19828] /,mems_allowed=0 [ 373.966468][T19828] CPU: 0 UID: 0 PID: 19828 Comm: syz.1.5165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 373.966580][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.966597][T19828] Call Trace: [ 373.966613][T19828] [ 373.966624][T19828] __dump_stack+0x1d/0x30 [ 373.966686][T19828] dump_stack_lvl+0xe8/0x140 [ 373.966710][T19828] dump_stack+0x15/0x1b [ 373.966731][T19828] warn_alloc+0x12b/0x1a0 [ 373.966826][T19828] __vmalloc_node_range_noprof+0x297/0xe00 [ 373.966925][T19828] ? __rcu_read_unlock+0x4f/0x70 [ 373.966958][T19828] ? sel_write_load+0x158/0x380 [ 373.966992][T19828] vmalloc_noprof+0x82/0xc0 [ 373.967034][T19828] ? sel_write_load+0x158/0x380 [ 373.967222][T19828] sel_write_load+0x158/0x380 [ 373.967257][T19828] ? __pfx_sel_write_load+0x10/0x10 [ 373.967284][T19828] vfs_write+0x266/0x960 [ 373.967377][T19828] ? __rcu_read_unlock+0x4f/0x70 [ 373.967403][T19828] ? __fget_files+0x184/0x1c0 [ 373.967467][T19828] ksys_write+0xda/0x1a0 [ 373.967500][T19828] __x64_sys_write+0x40/0x50 [ 373.967527][T19828] x64_sys_call+0x27fe/0x2ff0 [ 373.967556][T19828] do_syscall_64+0xd2/0x200 [ 373.967612][T19828] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 373.967652][T19828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.967694][T19828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.967720][T19828] RIP: 0033:0x7f40b628eec9 [ 373.967736][T19828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.967758][T19828] RSP: 002b:00007f40b4cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.967863][T19828] RAX: ffffffffffffffda RBX: 00007f40b64e5fa0 RCX: 00007f40b628eec9 [ 373.967879][T19828] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000004 [ 373.967891][T19828] RBP: 00007f40b4cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.967904][T19828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.967916][T19828] R13: 00007f40b64e6038 R14: 00007f40b64e5fa0 R15: 00007ffeb692d0c8 [ 373.967939][T19828] [ 373.968163][T19828] Mem-Info: [ 374.005068][T19844] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.5171: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 374.009304][T19828] active_anon:10396 inactive_anon:1 isolated_anon:0 [ 374.009304][T19828] active_file:23436 inactive_file:2537 isolated_file:0 [ 374.009304][T19828] unevictable:1024 dirty:635 writeback:2 [ 374.009304][T19828] slab_reclaimable:3544 slab_unreclaimable:16014 [ 374.009304][T19828] mapped:30246 shmem:3074 pagetables:1698 [ 374.009304][T19828] sec_pagetables:0 bounce:0 [ 374.009304][T19828] kernel_misc_reclaimable:0 [ 374.009304][T19828] free:1842804 free_pcp:34217 free_cma:0 [ 374.013927][T19844] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5171: Bad quota inode: 4, type: 1 [ 374.020480][T19828] Node 0 active_anon:41584kB inactive_anon:4kB active_file:93744kB inactive_file:10148kB unevictable:4096kB isolated(anon):0kB isolated(file):0kB mapped:120984kB dirty:2540kB writeback:8kB shmem:12296kB kernel_stack:5152kB pagetables:6792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.026554][T19844] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 374.030634][T19828] Node 0 [ 374.035383][T19844] EXT4-fs (loop4): mount failed [ 374.040292][T19828] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.342855][T19828] lowmem_reserve[]: 0 2883 7862 7862 [ 374.348462][T19828] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 374.379264][T19828] lowmem_reserve[]: 0 0 4978 4978 [ 374.384563][T19828] Node 0 Normal free:4406568kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41584kB inactive_anon:4kB active_file:93744kB inactive_file:10148kB unevictable:4096kB writepending:2548kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:133304kB local_pcp:67124kB free_cma:0kB [ 374.417696][T19828] lowmem_reserve[]: 0 0 0 0 [ 374.422481][T19828] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.435795][T19828] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 374.452424][T19828] Node 0 Normal: 112*4kB (UME) 347*8kB (UM) 220*16kB (UM) 236*32kB (UME) 93*64kB (UM) 151*128kB (UME) 69*256kB (UM) 17*512kB (M) 7*1024kB (UME) 26*2048kB (UME) 1045*4096kB (UM) = 4406680kB [ 374.471468][T19828] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 374.480841][T19828] 28995 total pagecache pages [ 374.485672][T19828] 2 pages in swap cache [ 374.489936][T19828] Free swap = 124988kB [ 374.494263][T19828] Total swap = 124996kB [ 374.498649][T19828] 2097051 pages RAM [ 374.502516][T19828] 0 pages HighMem/MovableOnly [ 374.507329][T19828] 80446 pages reserved [ 374.539210][T19848] loop5: detected capacity change from 0 to 1024 [ 374.546956][T19824] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.585806][T19848] EXT4-fs: Ignoring removed nobh option [ 374.591511][T19848] EXT4-fs: Ignoring removed bh option [ 374.597133][T19848] EXT4-fs: Ignoring removed nobh option [ 374.618714][T19848] FAULT_INJECTION: forcing a failure. [ 374.618714][T19848] name failslab, interval 1, probability 0, space 0, times 0 [ 374.631819][T19848] CPU: 1 UID: 0 PID: 19848 Comm: syz.5.5173 Not tainted syzkaller #0 PREEMPT(voluntary) [ 374.631851][T19848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.631865][T19848] Call Trace: [ 374.631873][T19848] [ 374.631893][T19848] __dump_stack+0x1d/0x30 [ 374.631919][T19848] dump_stack_lvl+0xe8/0x140 [ 374.631944][T19848] dump_stack+0x15/0x1b [ 374.631965][T19848] should_fail_ex+0x265/0x280 [ 374.632071][T19848] should_failslab+0x8c/0xb0 [ 374.632104][T19848] __kmalloc_noprof+0xa5/0x3e0 [ 374.632180][T19848] ? ext4_find_extent+0x16b/0x7a0 [ 374.632266][T19848] ext4_find_extent+0x16b/0x7a0 [ 374.632291][T19848] ? folio_mark_accessed+0x240/0x3d0 [ 374.632358][T19848] ext4_ext_map_blocks+0x11f/0x38a0 [ 374.632418][T19848] ? bdev_getblk+0x66/0x3b0 [ 374.632448][T19848] ? __rcu_read_unlock+0x4f/0x70 [ 374.632494][T19848] ? ext4_get_group_desc+0x16b/0x190 [ 374.632597][T19848] ? folio_mark_accessed+0x240/0x3d0 [ 374.632650][T19848] ext4_map_query_blocks+0xa8/0x480 [ 374.632696][T19848] ext4_map_blocks+0x330/0xd00 [ 374.632749][T19848] _ext4_get_block+0x10a/0x350 [ 374.632780][T19848] ext4_get_block+0x39/0x50 [ 374.632815][T19848] ext4_block_write_begin+0x5e5/0xc00 [ 374.632890][T19848] ? __pfx_ext4_get_block+0x10/0x10 [ 374.633008][T19848] ext4_convert_inline_data_to_extent+0x3df/0x7d0 [ 374.633048][T19848] ext4_try_to_write_inline_data+0x54/0x90 [ 374.633083][T19848] ext4_write_begin+0x1b3/0xeb0 [ 374.633116][T19848] ext4_da_write_begin+0x1fb/0x6e0 [ 374.633211][T19848] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 374.633249][T19848] generic_perform_write+0x184/0x490 [ 374.633278][T19848] ext4_buffered_write_iter+0x1ee/0x3c0 [ 374.633372][T19848] ext4_file_write_iter+0x383/0xf00 [ 374.633416][T19848] ? 0xffffffff81000000 [ 374.633434][T19848] ? __rcu_read_unlock+0x4f/0x70 [ 374.633465][T19848] ? avc_policy_seqno+0x15/0x30 [ 374.633580][T19848] ? selinux_file_permission+0x1e4/0x320 [ 374.633614][T19848] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 374.633669][T19848] vfs_write+0x527/0x960 [ 374.633704][T19848] __x64_sys_pwrite64+0xfd/0x150 [ 374.633738][T19848] x64_sys_call+0xc4d/0x2ff0 [ 374.633845][T19848] do_syscall_64+0xd2/0x200 [ 374.633884][T19848] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 374.633959][T19848] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 374.634001][T19848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.634085][T19848] RIP: 0033:0x7fc0debceec9 [ 374.634159][T19848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.634185][T19848] RSP: 002b:00007fc0dd62f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 374.634211][T19848] RAX: ffffffffffffffda RBX: 00007fc0dee25fa0 RCX: 00007fc0debceec9 [ 374.634226][T19848] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000007 [ 374.634240][T19848] RBP: 00007fc0dd62f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.634252][T19848] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 374.634266][T19848] R13: 00007fc0dee26038 R14: 00007fc0dee25fa0 R15: 00007ffd58f6d658 [ 374.634432][T19848] [ 374.954324][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5175'. [ 374.957011][T19848] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 374.979852][T19852] tipc: Enabled bearer , priority 0 [ 375.001882][T19824] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.040738][T19852] tipc: Resetting bearer [ 375.048606][T19851] tipc: Disabling bearer [ 375.058248][T19858] loop2: detected capacity change from 0 to 8192 [ 375.112426][T19865] netlink: 'syz.2.5180': attribute type 21 has an invalid length. [ 375.168584][T10388] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.201323][T10388] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.210459][T10388] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.220703][T10388] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.234650][T19867] loop5: detected capacity change from 0 to 2048 [ 375.251371][T19874] loop2: detected capacity change from 0 to 512 [ 375.319389][T19871] loop6: detected capacity change from 0 to 1024 [ 375.402990][T19874] EXT4-fs (loop2): failed to initialize system zone (-117) [ 375.425739][T19871] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 375.477428][T19874] EXT4-fs (loop2): mount failed [ 375.500123][T19867] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5178: bg 0: block 234: padding at end of block bitmap is not set [ 375.613558][T19867] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 375.626248][T19867] EXT4-fs (loop5): This should not happen!! Data will be lost [ 375.626248][T19867] [ 375.742456][T19890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.749866][T19890] IPv6: NLM_F_CREATE should be set when creating new route [ 375.771922][T19887] syzkaller0: entered promiscuous mode [ 375.777659][T19887] syzkaller0: entered allmulticast mode [ 375.788772][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5186'. [ 375.860809][T19901] netlink: 'syz.6.5192': attribute type 21 has an invalid length. [ 375.921421][T19905] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 375.968473][T19905] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.999815][T19911] loop6: detected capacity change from 0 to 2048 [ 376.044418][T19916] syzkaller0: entered promiscuous mode [ 376.050082][T19916] syzkaller0: entered allmulticast mode [ 376.059315][T19905] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.068396][T19911] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5196: bg 0: block 234: padding at end of block bitmap is not set [ 376.084618][T19911] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 376.098938][T19911] EXT4-fs (loop6): This should not happen!! Data will be lost [ 376.098938][T19911] [ 376.141207][T19915] syzkaller0: entered promiscuous mode [ 376.146889][T19915] syzkaller0: entered allmulticast mode [ 376.156768][T19905] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.196555][T19926] loop6: detected capacity change from 0 to 512 [ 376.206997][T19926] EXT4-fs: Ignoring removed bh option [ 376.217522][T19926] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5200: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 376.236616][T19926] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5200: Bad quota inode: 4, type: 1 [ 376.248386][T19926] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 376.249521][T19905] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.264097][T19926] EXT4-fs (loop6): mount failed [ 376.308668][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5200'. [ 376.331392][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'. [ 376.332472][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.367668][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.380158][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.395469][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.429029][T19938] qrtr: Invalid version 183 [ 376.443366][T19936] loop2: detected capacity change from 0 to 512 [ 376.463558][T19936] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 376.472471][T19936] EXT4-fs (loop2): orphan cleanup on readonly fs [ 376.494694][T19936] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5204: corrupted inode contents [ 376.517412][T19936] EXT4-fs (loop2): Remounting filesystem read-only [ 376.524627][T19936] EXT4-fs (loop2): 1 truncate cleaned up [ 376.530808][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 376.541493][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 376.560073][T19948] loop1: detected capacity change from 0 to 128 [ 376.567534][T19948] EXT4-fs: Ignoring removed nobh option [ 376.573532][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 376.620219][T19948] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.640931][T19952] loop2: detected capacity change from 0 to 512 [ 376.648200][T19952] EXT4-fs: Ignoring removed bh option [ 376.679768][T19952] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.5209: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 376.698785][T19952] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.5209: Bad quota inode: 4, type: 1 [ 376.710801][T19952] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 376.749776][T19952] EXT4-fs (loop2): mount failed [ 376.810325][T19957] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 376.893059][T19963] IPv6: Can't replace route, no match found [ 376.937073][T19965] FAULT_INJECTION: forcing a failure. [ 376.937073][T19965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.950390][T19965] CPU: 0 UID: 0 PID: 19965 Comm: syz.2.5214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 376.950423][T19965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.950440][T19965] Call Trace: [ 376.950450][T19965] [ 376.950534][T19965] __dump_stack+0x1d/0x30 [ 376.950557][T19965] dump_stack_lvl+0xe8/0x140 [ 376.950576][T19965] dump_stack+0x15/0x1b [ 376.950598][T19965] should_fail_ex+0x265/0x280 [ 376.950631][T19965] should_fail+0xb/0x20 [ 376.950699][T19965] should_fail_usercopy+0x1a/0x20 [ 376.950733][T19965] _copy_from_user+0x1c/0xb0 [ 376.950765][T19965] ___sys_sendmsg+0xc1/0x1d0 [ 376.950811][T19965] __x64_sys_sendmsg+0xd4/0x160 [ 376.950907][T19965] x64_sys_call+0x191e/0x2ff0 [ 376.950940][T19965] do_syscall_64+0xd2/0x200 [ 376.950992][T19965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 376.951023][T19965] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 376.951135][T19965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.951164][T19965] RIP: 0033:0x7f023c7beec9 [ 376.951198][T19965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.951217][T19965] RSP: 002b:00007f023b227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.951237][T19965] RAX: ffffffffffffffda RBX: 00007f023ca15fa0 RCX: 00007f023c7beec9 [ 376.951250][T19965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 376.951294][T19965] RBP: 00007f023b227090 R08: 0000000000000000 R09: 0000000000000000 [ 376.951310][T19965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.951326][T19965] R13: 00007f023ca16038 R14: 00007f023ca15fa0 R15: 00007ffcb5698b58 [ 376.951346][T19965] [ 377.145091][T19968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.153206][T19968] IPv6: NLM_F_CREATE should be set when creating new route [ 377.169586][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5216'. [ 377.204917][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 377.204935][ T29] audit: type=1326 audit(1758548765.073:30494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.239867][T19970] loop4: detected capacity change from 0 to 512 [ 377.251907][T19970] EXT4-fs: Ignoring removed bh option [ 377.257592][ T29] audit: type=1326 audit(1758548765.073:30495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.282736][ T29] audit: type=1326 audit(1758548765.083:30496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.306634][ T29] audit: type=1326 audit(1758548765.083:30497): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.333576][T19978] loop2: detected capacity change from 0 to 2048 [ 377.360397][ T29] audit: type=1326 audit(1758548765.233:30498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.2.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.386394][T19970] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.5215: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 377.421830][ T29] audit: type=1326 audit(1758548765.233:30499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.2.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.446228][ T29] audit: type=1326 audit(1758548765.233:30500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.2.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.470435][ T29] audit: type=1326 audit(1758548765.233:30501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.2.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.494495][ T29] audit: type=1326 audit(1758548765.233:30502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.2.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.520373][ T29] audit: type=1326 audit(1758548765.233:30503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.2.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f023c7beec9 code=0x7ffc0000 [ 377.524955][T19970] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5215: Bad quota inode: 4, type: 1 [ 377.564628][T19984] loop6: detected capacity change from 0 to 512 [ 377.580569][T19984] EXT4-fs: Ignoring removed bh option [ 377.604881][T19970] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.620439][T19970] EXT4-fs (loop4): mount failed [ 377.685749][T19984] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5222: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 377.713233][T19984] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5222: Bad quota inode: 4, type: 1 [ 377.720341][T19988] syzkaller0: entered promiscuous mode [ 377.726228][T19984] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.730154][T19988] syzkaller0: entered allmulticast mode [ 377.755876][T19995] loop4: detected capacity change from 0 to 512 [ 377.763287][T19984] EXT4-fs (loop6): mount failed [ 377.773238][T19995] EXT4-fs (loop4): failed to initialize system zone (-117) [ 377.784602][T19995] EXT4-fs (loop4): mount failed [ 377.809331][T19993] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 377.884658][T20006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.892395][T20006] IPv6: NLM_F_CREATE should be set when creating new route [ 377.914546][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5229'. [ 377.951180][T20009] loop4: detected capacity change from 0 to 2048 [ 377.973686][T20017] loop1: detected capacity change from 0 to 128 [ 378.003481][T20017] EXT4-fs: Ignoring removed nobh option [ 378.029562][T20017] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.068128][T20024] lo speed is unknown, defaulting to 1000 [ 378.074396][T20025] loop5: detected capacity change from 0 to 2048 [ 378.146759][T20025] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5236: bg 0: block 234: padding at end of block bitmap is not set [ 378.166374][T20025] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 117 [ 378.179316][T20025] EXT4-fs (loop5): This should not happen!! Data will be lost [ 378.179316][T20025] [ 378.192390][T20034] loop4: detected capacity change from 0 to 512 [ 378.217200][T20034] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 378.226012][T20034] EXT4-fs (loop4): orphan cleanup on readonly fs [ 378.235819][T20034] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5238: corrupted inode contents [ 378.248494][T20034] EXT4-fs (loop4): Remounting filesystem read-only [ 378.256039][T20034] EXT4-fs (loop4): 1 truncate cleaned up [ 378.262632][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.273498][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.284668][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 378.332846][T20041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.353768][T20041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.397035][T20043] syzkaller0: entered promiscuous mode [ 378.402630][T20043] syzkaller0: entered allmulticast mode [ 378.440040][T20049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.447331][T20049] IPv6: NLM_F_CREATE should be set when creating new route [ 378.456646][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5244'. [ 378.487865][T20051] tipc: Enabled bearer , priority 0 [ 378.497762][T20051] syzkaller0: entered promiscuous mode [ 378.503303][T20051] syzkaller0: entered allmulticast mode [ 378.516440][T20050] tipc: Resetting bearer [ 378.529582][T20050] tipc: Disabling bearer [ 378.529639][T20053] loop2: detected capacity change from 0 to 2048 [ 378.610993][T20057] loop2: detected capacity change from 0 to 4096 [ 378.762541][T20041] FAULT_INJECTION: forcing a failure. [ 378.762541][T20041] name failslab, interval 1, probability 0, space 0, times 0 [ 378.775531][T20041] CPU: 1 UID: 0 PID: 20041 Comm: syz.4.5240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 378.775565][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.775580][T20041] Call Trace: [ 378.775587][T20041] [ 378.775595][T20041] __dump_stack+0x1d/0x30 [ 378.775617][T20041] dump_stack_lvl+0xe8/0x140 [ 378.775638][T20041] dump_stack+0x15/0x1b [ 378.775663][T20041] should_fail_ex+0x265/0x280 [ 378.775690][T20041] should_failslab+0x8c/0xb0 [ 378.775722][T20041] __kmalloc_noprof+0xa5/0x3e0 [ 378.775816][T20041] ? iovec_from_user+0x84/0x210 [ 378.775866][T20041] iovec_from_user+0x84/0x210 [ 378.775943][T20041] __import_iovec+0xf3/0x540 [ 378.775978][T20041] import_iovec+0x61/0x80 [ 378.776057][T20041] vfs_writev+0xfb/0x8b0 [ 378.776109][T20041] do_writev+0xe7/0x210 [ 378.776147][T20041] __x64_sys_writev+0x45/0x50 [ 378.776174][T20041] x64_sys_call+0x1e9a/0x2ff0 [ 378.776233][T20041] do_syscall_64+0xd2/0x200 [ 378.776275][T20041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 378.776302][T20041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 378.776375][T20041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.776398][T20041] RIP: 0033:0x7feba18deec9 [ 378.776416][T20041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.776437][T20041] RSP: 002b:00007feba033f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 378.776535][T20041] RAX: ffffffffffffffda RBX: 00007feba1b35fa0 RCX: 00007feba18deec9 [ 378.776552][T20041] RDX: 1000000000000156 RSI: 0000200000000040 RDI: 0000000000000003 [ 378.776566][T20041] RBP: 00007feba033f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.776577][T20041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.776589][T20041] R13: 00007feba1b36038 R14: 00007feba1b35fa0 R15: 00007ffe794a16b8 [ 378.776610][T20041] [ 378.985863][T20061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1363 sclass=netlink_audit_socket pid=20061 comm=syz.2.5248 [ 379.032300][T20065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5249'. [ 379.049499][T20061] loop2: detected capacity change from 0 to 2048 [ 379.079232][T20067] loop1: detected capacity change from 0 to 512 [ 379.086659][T20067] EXT4-fs: Ignoring removed bh option [ 379.108205][T20067] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.5250: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 379.127100][T20067] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5250: Bad quota inode: 4, type: 1 [ 379.139706][T20067] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 379.155204][T20067] EXT4-fs (loop1): mount failed [ 379.201589][T20071] bridge0: entered promiscuous mode [ 379.207524][T20071] macsec1: entered promiscuous mode [ 379.214703][T20071] bridge0: port 1(macsec1) entered blocking state [ 379.221267][T20071] bridge0: port 1(macsec1) entered disabled state [ 379.227964][T20071] macsec1: entered allmulticast mode [ 379.233275][T20071] bridge0: entered allmulticast mode [ 379.239241][T20071] macsec1: left allmulticast mode [ 379.244310][T20071] bridge0: left allmulticast mode [ 379.250382][T20071] bridge0: left promiscuous mode [ 379.397667][T20075] loop1: detected capacity change from 0 to 512 [ 379.405222][T20075] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 379.565910][T20078] netlink: 'syz.2.5253': attribute type 39 has an invalid length. [ 379.629525][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5256'. [ 379.668014][T20086] loop2: detected capacity change from 0 to 2048 [ 379.794564][T20092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5260'. [ 379.839462][T20096] loop2: detected capacity change from 0 to 512 [ 379.847613][T20096] EXT4-fs: Ignoring removed bh option [ 379.858808][T20098] loop4: detected capacity change from 0 to 512 [ 379.873469][T20098] EXT4-fs (loop4): failed to initialize system zone (-117) [ 379.880982][T20098] EXT4-fs (loop4): mount failed [ 379.888588][T20096] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.5261: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 379.907590][T20096] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.5261: Bad quota inode: 4, type: 1 [ 379.918899][T20096] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 379.934403][T20096] EXT4-fs (loop2): mount failed [ 380.016779][T20112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.046830][T20116] loop2: detected capacity change from 0 to 1024 [ 380.052383][T20115] loop6: detected capacity change from 0 to 2048 [ 380.060437][T20116] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 380.076547][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 380.144032][T20123] loop2: detected capacity change from 0 to 512 [ 380.166042][T20123] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 380.183377][T20123] EXT4-fs (loop2): orphan cleanup on readonly fs [ 380.192830][T20123] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5270: corrupted inode contents [ 380.212644][T20123] EXT4-fs (loop2): Remounting filesystem read-only [ 380.219862][T20123] EXT4-fs (loop2): 1 truncate cleaned up [ 380.228286][ T8885] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.239133][ T8885] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.257197][ T8885] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 380.258265][T20130] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5271'. [ 380.272256][T20132] FAULT_INJECTION: forcing a failure. [ 380.272256][T20132] name failslab, interval 1, probability 0, space 0, times 0 [ 380.289877][T20132] CPU: 1 UID: 0 PID: 20132 Comm: syz.4.5274 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.289917][T20132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.289949][T20132] Call Trace: [ 380.289956][T20132] [ 380.289965][T20132] __dump_stack+0x1d/0x30 [ 380.289992][T20132] dump_stack_lvl+0xe8/0x140 [ 380.290013][T20132] dump_stack+0x15/0x1b [ 380.290029][T20132] should_fail_ex+0x265/0x280 [ 380.290058][T20132] should_failslab+0x8c/0xb0 [ 380.290154][T20132] kmem_cache_alloc_node_noprof+0x57/0x320 [ 380.290192][T20132] ? __alloc_skb+0x101/0x320 [ 380.290223][T20132] __alloc_skb+0x101/0x320 [ 380.290293][T20132] ? audit_log_start+0x365/0x6c0 [ 380.290333][T20132] audit_log_start+0x380/0x6c0 [ 380.290376][T20132] audit_seccomp+0x48/0x100 [ 380.290406][T20132] ? __seccomp_filter+0x68c/0x10d0 [ 380.290508][T20132] __seccomp_filter+0x69d/0x10d0 [ 380.290539][T20132] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.290575][T20132] ? vfs_write+0x7e8/0x960 [ 380.290604][T20132] ? __rcu_read_unlock+0x4f/0x70 [ 380.290687][T20132] ? __fget_files+0x184/0x1c0 [ 380.290724][T20132] __secure_computing+0x82/0x150 [ 380.290817][T20132] syscall_trace_enter+0xcf/0x1e0 [ 380.290898][T20132] do_syscall_64+0xac/0x200 [ 380.290939][T20132] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 380.290963][T20132] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 380.291106][T20132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.291130][T20132] RIP: 0033:0x7feba18deec9 [ 380.291145][T20132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.291164][T20132] RSP: 002b:00007feba033f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 380.291184][T20132] RAX: ffffffffffffffda RBX: 00007feba1b35fa0 RCX: 00007feba18deec9 [ 380.291225][T20132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000004af [ 380.291237][T20132] RBP: 00007feba033f090 R08: 0000000000000000 R09: 0000000000000000 [ 380.291250][T20132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.291288][T20132] R13: 00007feba1b36038 R14: 00007feba1b35fa0 R15: 00007ffe794a16b8 [ 380.291308][T20132] [ 380.524724][T20139] loop6: detected capacity change from 0 to 512 [ 380.536992][T20139] EXT4-fs: Ignoring removed bh option [ 380.576097][T20139] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5275: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 380.599958][T20149] loop1: detected capacity change from 0 to 512 [ 380.606675][T20139] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5275: Bad quota inode: 4, type: 1 [ 380.621079][T20139] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 380.651267][T20139] EXT4-fs (loop6): mount failed [ 380.661343][T20151] syzkaller0: entered promiscuous mode [ 380.665794][T20149] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 380.666926][T20151] syzkaller0: entered allmulticast mode [ 380.685231][T20155] loop2: detected capacity change from 0 to 2048 [ 380.694182][T20149] EXT4-fs (loop1): mount failed [ 380.723955][T20149] SELinux: Context system_u:object_r:devtty_t:s0 is not valid (left unmapped). [ 380.794799][T20161] loop6: detected capacity change from 0 to 512 [ 380.832466][T20161] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.881000][T20169] netlink: 'syz.1.5285': attribute type 5 has an invalid length. [ 380.937459][T20176] FAULT_INJECTION: forcing a failure. [ 380.937459][T20176] name failslab, interval 1, probability 0, space 0, times 0 [ 380.950363][T20176] CPU: 0 UID: 0 PID: 20176 Comm: syz.6.5288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.950398][T20176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.950414][T20176] Call Trace: [ 380.950421][T20176] [ 380.950429][T20176] __dump_stack+0x1d/0x30 [ 380.950504][T20176] dump_stack_lvl+0xe8/0x140 [ 380.950528][T20176] dump_stack+0x15/0x1b [ 380.950550][T20176] should_fail_ex+0x265/0x280 [ 380.950575][T20176] should_failslab+0x8c/0xb0 [ 380.950605][T20176] kmem_cache_alloc_noprof+0x50/0x310 [ 380.950642][T20176] ? skb_clone+0x151/0x1f0 [ 380.950772][T20176] skb_clone+0x151/0x1f0 [ 380.950806][T20176] __netlink_deliver_tap+0x2c9/0x500 [ 380.950914][T20176] netlink_unicast+0x66b/0x690 [ 380.950946][T20176] netlink_sendmsg+0x58b/0x6b0 [ 380.950980][T20176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.951122][T20176] __sock_sendmsg+0x142/0x180 [ 380.951155][T20176] ____sys_sendmsg+0x31e/0x4e0 [ 380.951190][T20176] ___sys_sendmsg+0x17b/0x1d0 [ 380.951240][T20176] __x64_sys_sendmsg+0xd4/0x160 [ 380.951277][T20176] x64_sys_call+0x191e/0x2ff0 [ 380.951370][T20176] do_syscall_64+0xd2/0x200 [ 380.951404][T20176] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 380.951470][T20176] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 380.951555][T20176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.951582][T20176] RIP: 0033:0x7eff3edeeec9 [ 380.951598][T20176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.951616][T20176] RSP: 002b:00007eff3d84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.951640][T20176] RAX: ffffffffffffffda RBX: 00007eff3f045fa0 RCX: 00007eff3edeeec9 [ 380.951656][T20176] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000006 [ 380.951670][T20176] RBP: 00007eff3d84f090 R08: 0000000000000000 R09: 0000000000000000 [ 380.951744][T20176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.951760][T20176] R13: 00007eff3f046038 R14: 00007eff3f045fa0 R15: 00007ffdedae07c8 [ 380.951779][T20176] [ 381.471440][T20189] loop2: detected capacity change from 0 to 2048 [ 381.530479][T20196] loop5: detected capacity change from 0 to 1024 [ 381.538027][T20197] loop4: detected capacity change from 0 to 512 [ 381.538423][T20197] EXT4-fs: Ignoring removed bh option [ 381.546241][T20196] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 381.589556][T20197] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.5295: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 381.589871][T20197] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5295: Bad quota inode: 4, type: 1 [ 381.589981][T20197] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 381.590199][T20197] EXT4-fs (loop4): mount failed [ 381.668623][T20204] netlink: 'syz.5.5297': attribute type 5 has an invalid length. [ 381.761240][T20212] loop1: detected capacity change from 0 to 512 [ 381.824523][T20212] EXT4-fs (loop1): failed to initialize system zone (-117) [ 381.834757][T20212] EXT4-fs (loop1): mount failed [ 381.928013][T20226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.934515][T20227] loop5: detected capacity change from 0 to 512 [ 381.935310][T20226] IPv6: NLM_F_CREATE should be set when creating new route [ 381.952611][T20222] syzkaller0: entered promiscuous mode [ 381.958379][T20222] syzkaller0: entered allmulticast mode [ 381.970644][T20227] EXT4-fs: Ignoring removed bh option [ 382.003032][T20227] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.5306: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 382.036789][T20227] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5306: Bad quota inode: 4, type: 1 [ 382.048444][T20227] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 382.064238][T20227] EXT4-fs (loop5): mount failed [ 382.101268][T20235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.117689][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5308'. [ 382.121527][T20237] loop1: detected capacity change from 0 to 512 [ 382.133980][T20237] EXT4-fs: Ignoring removed bh option [ 382.160554][T20237] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.5309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 382.195618][T20237] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5309: Bad quota inode: 4, type: 1 [ 382.215534][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 382.215548][ T29] audit: type=1326 audit(1758548770.093:31073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.250265][T20246] netlink: 'syz.5.5312': attribute type 5 has an invalid length. [ 382.252259][ T29] audit: type=1326 audit(1758548770.123:31074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.283686][ T29] audit: type=1326 audit(1758548770.123:31075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.284233][T20237] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 382.307683][ T29] audit: type=1326 audit(1758548770.123:31076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.346909][ T29] audit: type=1326 audit(1758548770.123:31077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.371608][ T29] audit: type=1326 audit(1758548770.123:31078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.372394][T20237] EXT4-fs (loop1): mount failed [ 382.395415][ T29] audit: type=1326 audit(1758548770.123:31079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.424933][ T29] audit: type=1326 audit(1758548770.133:31080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.449288][ T29] audit: type=1326 audit(1758548770.133:31081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc0debceec9 code=0x7ffc0000 [ 382.473132][ T29] audit: type=1400 audit(1758548770.133:31082): avc: denied { write } for pid=20245 comm="syz.5.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.497434][T20248] loop2: detected capacity change from 0 to 512 [ 382.545506][T20252] loop4: detected capacity change from 0 to 512 [ 382.558169][T20248] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.592954][T20252] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 382.595607][T20261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.611639][T20262] loop6: detected capacity change from 0 to 764 [ 382.625264][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5317'. [ 382.631088][T20262] iso9660: Unknown parameter '%†õ™á"Çc²unhude' [ 382.644974][T20252] EXT4-fs (loop4): orphan cleanup on readonly fs [ 382.668829][T20265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.682212][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 382.693330][T20252] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5315: corrupted inode contents [ 382.705984][T20252] EXT4-fs (loop4): Remounting filesystem read-only [ 382.714738][T20252] EXT4-fs (loop4): 1 truncate cleaned up [ 382.725488][T10381] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.736110][T10381] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 382.758790][T10381] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 382.810605][T20268] syzkaller0: entered promiscuous mode [ 382.816210][T20268] syzkaller0: entered allmulticast mode [ 382.850015][T20273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5321'. [ 382.878863][T20277] loop4: detected capacity change from 0 to 2048 [ 382.901475][T20273] loop2: detected capacity change from 0 to 1024 [ 382.924906][T20276] loop5: detected capacity change from 0 to 512 [ 382.950153][T20276] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 382.967518][T20276] EXT4-fs (loop5): orphan cleanup on readonly fs [ 382.975879][T20273] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 382.988806][T20276] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5323: corrupted inode contents [ 383.007069][T20276] EXT4-fs (loop5): Remounting filesystem read-only [ 383.019003][T20276] EXT4-fs (loop5): 1 truncate cleaned up [ 383.026915][T10403] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 383.037593][T10403] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 383.048776][T10403] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 383.140585][T20294] loop5: detected capacity change from 0 to 512 [ 383.147284][T20292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5326'. [ 383.170640][T20294] EXT4-fs: Ignoring removed bh option [ 383.236535][T20294] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.5327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 383.300226][T20294] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5327: Bad quota inode: 4, type: 1 [ 383.321719][T20294] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 383.352905][T20294] EXT4-fs (loop5): mount failed [ 383.523253][T20311] syzkaller0: entered promiscuous mode [ 383.528869][T20311] syzkaller0: entered allmulticast mode [ 383.600855][T20319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5337'. [ 383.617815][T20319] loop2: detected capacity change from 0 to 1024 [ 383.628871][T20319] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 383.675340][T13345] EXT4-fs unmount: 128 callbacks suppressed [ 383.675360][T13345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.681675][T20323] loop6: detected capacity change from 0 to 512 [ 383.699871][T20323] EXT4-fs: Ignoring removed bh option [ 383.721956][T20323] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 383.743035][T20325] loop2: detected capacity change from 0 to 512 [ 383.747374][T20323] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5338: Bad quota inode: 4, type: 1 [ 383.760736][T20323] ================================================================== [ 383.768850][T20323] BUG: KCSAN: data-race in _copy_to_iter / memcpy_and_pad [ 383.776771][T20323] [ 383.779118][T20323] read to 0xffff888119265400 of 1024 bytes by task 4619 on cpu 1: [ 383.786933][T20323] _copy_to_iter+0x130/0xe70 [ 383.791560][T20323] copy_page_to_iter+0x18f/0x2d0 [ 383.796724][T20323] filemap_read+0x407/0xa00 [ 383.801421][T20323] blkdev_read_iter+0x22d/0x2e0 [ 383.806315][T20323] vfs_read+0x64c/0x770 [ 383.810698][T20323] ksys_read+0xda/0x1a0 [ 383.814967][T20323] __x64_sys_read+0x40/0x50 [ 383.819494][T20323] x64_sys_call+0x27bc/0x2ff0 [ 383.824196][T20323] do_syscall_64+0xd2/0x200 [ 383.828815][T20323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.834761][T20323] [ 383.837102][T20323] write to 0xffff8881192655f1 of 15 bytes by task 20323 on cpu 0: [ 383.845117][T20323] memcpy_and_pad+0x5a/0x80 [ 383.849993][T20323] ext4_update_super+0x790/0xb70 [ 383.855059][T20323] ext4_commit_super+0x40/0x280 [ 383.860214][T20323] ext4_handle_error+0x451/0x550 [ 383.865183][T20323] __ext4_error+0x19a/0x320 [ 383.869718][T20323] ext4_enable_quotas+0x294/0x400 [ 383.874758][T20323] ext4_fill_super+0x31c3/0x35d0 [ 383.879723][T20323] get_tree_bdev_flags+0x28e/0x300 [ 383.885035][T20323] get_tree_bdev+0x1f/0x30 [ 383.889830][T20323] ext4_get_tree+0x1c/0x30 [ 383.894286][T20323] vfs_get_tree+0x57/0x1d0 [ 383.898821][T20323] do_new_mount+0x207/0x5e0 [ 383.903459][T20323] path_mount+0x4a4/0xb20 [ 383.907907][T20323] __se_sys_mount+0x28f/0x2e0 [ 383.912708][T20323] __x64_sys_mount+0x67/0x80 [ 383.917406][T20323] x64_sys_call+0x2b4d/0x2ff0 [ 383.922131][T20323] do_syscall_64+0xd2/0x200 [ 383.926663][T20323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.932585][T20323] [ 383.935001][T20323] Reported by Kernel Concurrency Sanitizer on: [ 383.941253][T20323] CPU: 0 UID: 0 PID: 20323 Comm: syz.6.5338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 383.951429][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.962632][T20323] ================================================================== [ 383.975727][T12603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.988367][T20323] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 384.014691][T20325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.028044][T20323] EXT4-fs (loop6): mount failed [ 384.030108][T20325] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 384.112307][T13345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.