last executing test programs: 3.650198023s ago: executing program 0 (id=485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.626777434s ago: executing program 4 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9cb3ca5897513b5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000100900010073797a3000000000300003802c0000800400018024000b8010000180090001006c6173740000000010000180090001"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.575827834s ago: executing program 0 (id=487): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="9c9e6313e633c45bd710f8af1ab25b2e6cab0907edf2ccd8eb7f52da433e90dceec84ce352f04f045769684899646ec91e9d3a5cf69c44dc2741f29fc77cbbb942080c6afb9854a9f323fb067d34ea0d0d9f4671a6125e8e27adf3430351dd6c1e76795b1f7f867dc34e50d32f06f230a67b3e2f3a08acb4c8ddc9db8b347758fa5de4aa78b3300f63bddac306a7f64e78b0c1d8ece3a7b04dc5048f834fd4f9da3df457b3072b", @ANYRES64=r0], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x1405, 0x100, 0x70bd2b, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40050) syz_open_pts(r2, 0x101000) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000001f38b0c5c3e0c9"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = eventfd(0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000002180)='\'', 0x1}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x7, 0x5) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x20, 0x68, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x48, [@dev={0xac, 0x14, 0x14, 0x13}, @empty]}, @timestamp={0x44, 0x4, 0x4}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x64f4606db648fb34, 0x0, 0x0, 0x8, {[@sack={0x5, 0x16, [0x9, 0x18, 0xda6, 0x3ff, 0x3]}, @window={0x3, 0x3, 0x2}, @fastopen={0x22, 0xc, "82b9b0c10bd3af00bb1e"}, @eol]}}}}}}}, 0x0) 3.485929755s ago: executing program 4 (id=490): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x33, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x289e0cb5, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0xfa, @buffer={0x0, 0x7, &(0x7f0000000380)=""/7}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x1, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000051631b12dc726a", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40030000130010002bbd7000fbdbdf25060206084e204e220100000008000000070000000300000004000000a9f0ffff01010000ffffff7f", @ANYRES32=r5, @ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x4000081}, 0x8001) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.614773851s ago: executing program 1 (id=498): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 2.596916881s ago: executing program 4 (id=499): openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x20000, 0x12, 0x8}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r1, 0x80000000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000402000005eab6d74d5852fa83cc6600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0xd, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x454, &(0x7f0000000b80)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r6, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 2.427863272s ago: executing program 1 (id=501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) acct(0x0) 2.306151203s ago: executing program 1 (id=502): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000480)=0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'bond_slave_0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x10, 0x2, 0x100, 0xac80, 0x0, 0x9, 0x9, 0x5, 0x5}}) syz_io_uring_setup(0x94f, &(0x7f0000000380)={0x0, 0x80d3, 0x1, 0xfffffffd, 0x364, 0x0, r4}, 0x0, 0x0) timer_getoverrun(r1) accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r8 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000)={0x2, 'bond_slave_0\x00', {0x7}, 0x1}) ptrace(0x8, r8) wait4(r8, 0x0, 0x80000000, &(0x7f0000000600)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.172055984s ago: executing program 3 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 1.701212497s ago: executing program 0 (id=507): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r0, 0x4}, &(0x7f00000000c0)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r0, 0x5, 0x4, 0x80000000}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x5}}}, &(0x7f0000000240)=0x84) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x20010, r1, 0x4000) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001900)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/26, 0x1a}], 0x4, &(0x7f0000001800)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x1}, {&(0x7f0000000500)=""/4096, 0x1000}, &(0x7f0000001600)=[{&(0x7f0000001500)=""/229, 0xe5}], 0x1, 0x0, 0x7e9af3a0}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/238, 0xee}, &(0x7f0000001740), 0x18}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x7fffffff}, &(0x7f0000001780)=0x9, &(0x7f00000017c0)=0x8, 0x7fffffffffffffff, 0xd8b5, 0x7, 0x2acb, 0x2, 0x3}}], 0xd0, 0x1}, 0x4c084) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000001940)=""/236, &(0x7f0000001a40)=0xec) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)={0x12c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xf4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x9c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x64, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1011}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="69e3d306"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="efc31ef1d80a31bc73599d5a85"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x48, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x38, 0xa, "31055eddf038c61c2962be6834d306c4076a2100f574974e9364882344d8553775392ebfaec7e843f9e1a534e31ec8eb0314a015"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xc, 0x8, {0x7, 0x4}}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xa804}, 0x40000) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000001d00)=""/40, &(0x7f0000001d40)=0x28) r7 = syz_open_dev$sg(&(0x7f0000001d80), 0x81, 0x268143) ioctl$SG_IO(r7, 0x2285, &(0x7f00000043c0)={0x53, 0xfffffffffffffffb, 0x28, 0xe, @scatter={0x9, 0x0, &(0x7f0000004200)=[{&(0x7f0000001dc0)=""/3, 0x3}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/234, 0xea}, {&(0x7f0000002f00)=""/152, 0x98}, {&(0x7f0000002fc0)=""/49, 0x31}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/201, 0xc9}, {&(0x7f0000004100)=""/68, 0x44}, {&(0x7f0000004180)=""/97, 0x61}]}, &(0x7f00000042c0)="5f7132b5c9992ba693a47e5a5a0b0a7be271d83d49c527636ed062ce0c77b9e927697162c53a4c43", &(0x7f0000004300)=""/90, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000004380)}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000004480)={0x5, &(0x7f0000004440)=[{0x8, 0x1, 0x5, 0xff}, {0x7e1e, 0x0, 0xfe, 0x4}, {0x90, 0x5, 0x86, 0x6}, {0x5, 0x2, 0x7, 0x1}, {0x400, 0x76, 0x8, 0x7}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004540), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000004600)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x38, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000004640)=0x400) close_range(r3, r3, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000004680)="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", 0xfd) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000047c0)={0x1, &(0x7f0000004780)=[{0x65, 0x42, 0x3, 0x7}]}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000004800), 0x800, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000004880)={0x3, &(0x7f0000004840)=[{0x3, 0x6, 0x1, 0xfffffffc}, {0x8, 0x9, 0xa, 0x38}, {0x2, 0x5, 0x2, 0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004900)={&(0x7f00000048c0)='ext4_fc_commit_stop\x00', r8, 0x0, 0x7fffffff}, 0x18) statx(r8, &(0x7f0000004940)='./file0\x00', 0x0, 0x8, &(0x7f0000004980)) 1.688523437s ago: executing program 4 (id=508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.514309729s ago: executing program 4 (id=509): r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0002000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000001c00090008000000", @ANYRES32, @ANYRES8=r3], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x58}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10000}]}}}]}, 0x64}}, 0x44810) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000240), 0xfffffecc) r11 = creat(&(0x7f0000000440)='./file0\x00', 0x26) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9e5d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xffffffff, 0x8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff86c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x11, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x3f41, 0x99, &(0x7f0000000200)=""/153, 0x40f00, 0x43, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, r15, r16, r17], &(0x7f0000000780)=[{0x5, 0x1, 0xd, 0x2}, {0x2, 0x5, 0xa, 0x9}, {0x3, 0x2, 0x2, 0x8}, {0x3, 0x2, 0x1, 0x3}, {0x4, 0x5}, {0x0, 0x2, 0x4, 0x9}, {0x1, 0x1, 0x6, 0xb}], 0x10, 0x3, @void, @value}, 0x94) 1.504423019s ago: executing program 0 (id=510): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a80)={0x238, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}, {0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd3, 0x2, "92ea524fec8535c5274c02e1bc00939e15a0ac400911ffbda607e3548764187d5648b19e7c7f48a75c7cd1ec6ac63e9d915845834122e6e8e5d55575626c66266d445fde4c6e473f14ce4b4f7859c9b19909504e428926260f3753871b69bdbc5e2a7a80b574618934e860ee5b797b9f38f7f1e2a45df314a21dde6bcfbf70a6011d8762cb8e2e211045b274be7c185ffd0ef8f8e0a902c5e8ce67f5b837c2de1f7d9b4d9057a9b03fffdd07818df0e6c6fa37a2b01a62afe20ecaf1fd5b52488e7ad36f7948f4f137baee91a04e57"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x80, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x6a, 0x2, "8112e1639885f7d36cf3edf5d331333b6a6f5342d4279e2171f0330c3b0ef775bd86ea9f8ae2df05ed231787c4db32fe256b6e9d6aa4810638c32fbd5bdd1751dee070013e7410d72c3d7fb022ba2aa179f578042e43c807f4e349d2e728559e84c3d152e263"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x98, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa, 0x2, "06822a1c464d"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}}, {0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x72, 0x2, "ab316f5a72df2314b002fd90239eea1e1158e691927dc112759f067668725327d0d7f3dce8a12462f64ed14562cbcde03621ef014a66492470e1cf76036916fe38f2b1a7ac65fb007106873194d5f89d33bbabe41c6680337e4ed08cc9691ade25cd9e079c5ce560ce5d7242335e"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x238}, 0x1, 0x0, 0x0, 0x440c4}, 0x20000080) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r1, &(0x7f0000000100), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}, {0x5b, 0x8, 0xc, 0x2}, {0x7, 0x81, 0x1, 0x7}, {0x3, 0x0, 0x0, 0x3}, {0x6, 0x7, 0x8, 0x3}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0, @ANYBLOB="88e23214f5de933d2ed7f084bccbbd546773ea352b666d7ec3daea790c0f5977ae4a84857723a07f33da8031156dd68e87c85976d3b94e5cc04e5dd7a9caffd5160dfb6a325828eadfd737272ebb3425dd8bc573d0807beda7a078c8fe4e953e44cb37765f49d4224587dc62f88a2febec30c3b6a6218baaf85ff6283865098d54616b3cf88790ac23191d2d93b50bd6a218733b800ac1eb5a44a375f45011afdd3cdfca", @ANYBLOB="975f326673004788e19af2f3ee88cf2d56bac74ba15546460ff92896eb8670678d7eec437348f49156a3ba53e5a7f96b73085a00a8f88b174b9f039a3b22f18719f68bf222a86b1cacbdb7c4348f3859be74794a52f58a945d1e19d1836e03af323121c8acbcfbce7a035da84d68c0fdbb957769bd3ad3baee4fec32afd8faba9b95abe7edf5fd8d6356061d65bd5406daaaa25d29c037de57f1899a176cfbdacd0b1c10fe4b2a99b5866ebf5bd5ead9416cd143638a70c239b155ace6", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xdcbfc9e7e0f16c36, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18f8ffffffffffffff00000000000000850000000f00000018010000646c012500000000000000007b1af8ff00e1ff00afa100000000000007010000f8ffffffb702000008000000b70300000080850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x20001, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(r7, 0x402, 0x3f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) 1.485370589s ago: executing program 1 (id=511): openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x20000, 0x12, 0x8}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r1, 0x80000000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000402000005eab6d74d5852fa83cc6600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0xd, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x454, &(0x7f0000000b80)="$eJzs281vFGUYAPBnpt0iArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe8W5IiOECeFozuzN0d9ldyrLbpezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyNiIsRMV6rNu4wWfvv2pWz89evnJ1PolJ5/9+kut/VK2fni12L47bklak0Iv0qid0t2l0+feb4XLm8eCqvz6yc+GRm+fSZl46dmDu6eHTx5P5Dhw4emH31lf0v33GOI3lMV3d9vrRn5zsffffu4W8a8m/Ko0cmO218tlLpcXODta2unIw2biutdzCsWdY3RvNzdDHGYyRWT954vP3lQIMD+qpSqVS2tN98rgLcw5JorOvyMCyKD/rs/rdYmgcBr/dv+DFwl9+o3QBleV/Ll9qW0UjzfUpN97e9NBkRH57774dsif48hwAAaPBLNv55sdX4L41H6vZ7IJ8bmoiIByNie0Q8FBE7IuLhiOq+j0bEY7fZfvMkyc3jn/RSV4mtUTb+ey2f22oc/xWjv5gYyWvbqvmXkiPHyov78tdkKkqbsvpshzZ+feuvb9ttqx//ZUvWfjEWzOO4NLqp8ZiFuZW5O8m53uXzEbtGW+Wf3JgJSCJiZ0Ts6rKNY8//tKfdtlvn38FolwHVqfwY8Vzt/J+LpvwLSef5yZn7ory4b6a4Km72x58X3mvX/h3l3wPZ+b+/5fV/I/+JpH6+dvn227jw99dt72m6vf7Hkg+q5bF83WdzKyunZiPGksO1oOvX7189tqgX+2f5T+1t3f+3x+orsTsisov48Yh4IiKezGN/KiKejoi9HfL//c1nPu4+//7K8l+4rfO/WhiL5jWtCyPHf/u5odGJm/K/3vn8H6yWpvI1a3n/W0tc3V3NAAAAsPGkEbE1knT6RjlNp6dr35ffEZGWl5ZXXjiy9OnJhdpvBCYi0uJJ13jd89DZ/La+Vj8fEbWvFhTbD+TPjb8f2VytT88vlRcGnTwMuS1t+n/mn5FBRwf0XQ/m0YANSv+H4aX/w/DS/2F4tej/mwcRB7D+Wn3+fzGAOID119T/TfvBEHH/D8NL/4fh1bb/b1rfOIB1tbw5bv0j+Y6F4i91efg9W4jSXRFG3wqR3hVh3LWF0gbvF4N7TwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOil/wMAAP//Kf3deg==") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r6, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1.157117441s ago: executing program 3 (id=512): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) ioperm(0x0, 0x3, 0x2) prctl$PR_SET_THP_DISABLE(0x35, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03478a01bdf3b5086e3d8d9f8192182440eb52e1207ba65a0765a561792b8ea20cdaa55b3da1bdfefe027f7496a9e4735585b8d4811b35533c4b36140cbebf99999ebbe38568ca9f2635bb13c70fda3c07a40b351092bba87ca443738f46f0440df648c1e8729624f440dab480b0ddd402dfbaafb1e5b83752ba042d40db20394fbac00f134f831977905b1d113a72b96ba5918f782d91862e8489f7eeecb423faaab0e0ed1bd41cf05804b59c4feff680d0b31bb614664dbab89f8436ca7d6760311c218e0dc6d700a024785d856bb186a671be3f48758e7d", @ANYRES64=r3, @ANYRES16=r3, @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ff7f0000b7080000000000007b8af8ff00000000e7560000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000640)='udp_fail_queue_rcv_skb\x00', r2, 0x0, 0x9}, 0xffffffd1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000019c0)='kmem_cache_free\x00'}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200003179fdf900010000008000000000000000788da5b3d6f3811d078e3327cfe9ff6b835e4355061c7c808d09b879d53ce8423ae57ba2d12b91262f688c5dd3cf35ea8146ee7e6676a430773b8d7d1c4b265f599505959730d508a63e0e881653c217078912", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x5}) ioctl$int_in(r6, 0xd639, &(0x7f0000000040)=0x2) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) 1.123674152s ago: executing program 2 (id=513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)}}], 0x2, 0x0) time(0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 1.104455482s ago: executing program 3 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.020082712s ago: executing program 3 (id=515): socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000000100)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000000080), &(0x7f0000000000)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8901, &(0x7f0000000080)) 954.403783ms ago: executing program 3 (id=516): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000580)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b4b, &(0x7f0000000000)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r3 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0xccbd, 0x10100, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040}, 0xe77c0d392838589) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 935.289923ms ago: executing program 3 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r1) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000580)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x6006, 0x100000001}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0), 0x4, 0x4f3, &(0x7f00000012c0)="$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") 660.245915ms ago: executing program 2 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x26}], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x9a, &(0x7f00000000c0)=""/154, 0x41000, 0x92, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0x0, 0x4cd0}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x2, 0xb}, {0x0, 0x4, 0xf, 0x2}, {0x3, 0x3, 0xe, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x4, 0x3, 0x9, 0x1}, {0x2, 0x5, 0x2, 0x9}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='bcache_keyscan\x00', r0, 0x0, 0x3}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xb7, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x13, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000840)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000880)=0x3, 0x4) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000008c0)=0x9) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) read$usbmon(r3, &(0x7f0000000900)=""/17, 0x11) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0xd, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30f1, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x4d}, @jmp={0x5, 0x1, 0x3, 0x8, 0x7, 0x1}, @exit]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x7, &(0x7f0000000a00)=""/7, 0x41100, 0x5, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0xa, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[r5, r1, r1, r5, r1, r1, r3], &(0x7f0000000b00)=[{0x3, 0x4, 0x0, 0xb}, {0x3, 0x5, 0xe, 0x3}, {0x0, 0x2, 0x69cc, 0x6}, {0x2, 0x2, 0xb, 0x9}, {0x1, 0x3, 0xe, 0x7}, {0x0, 0x5, 0xb, 0xa}], 0x10, 0x7fffffff, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001dc0)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e00)={0x0, 0x5, 0xf0e9a961b9d51b65}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x6, 0x16, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x90000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9e}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x20, '\x00', r2, @xdp, r5, 0x8, &(0x7f0000001d80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x1, &(0x7f0000001e40)=[r10, r1, r5, r1], &(0x7f0000001e80)=[{0x4, 0x1, 0x6, 0xc}], 0x10, 0x17, @void, @value}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f80)=r9, 0x4) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r5) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x30, r12, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3d}, @void, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5af6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000002100)) (rerun: 64) write$bt_hci(r4, &(0x7f0000002140)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x7, "97bd3a11d1e688d064964396a460aa33165591debf9ee9ed3fff3cb56f38fd"}}}, 0x24) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000002180)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r13 = syz_clone(0x0, &(0x7f0000002240)="b0dbd4cb4098a1683c3d605656b44be54fcfa18556b0f37d6d329f5b49aeb0dc854a2378b7d9012ffb0bf2cea09ee337925c73163a4939f1ae20a285c54b947724c33438ec8264cbfe709551654cdb95e052653cb078d249e003f4f626579a7c7c755566354b9b877b768017b2108c3d9f915f320fa6284df1071201d70c76802a3345aafa410aa8b8d602820035b605f39df7fcc86ce22bc74cb5064079ed802e10f3d1", 0xa4, &(0x7f0000002300), &(0x7f0000002340), &(0x7f0000002380)="b03b709b8f988b1e8611dba7938c0618998ba9ac8e6fcce6773db21890a24443a6a6123864bee5d7e57766d27b6c6c16a8b641d6979a34382a3947907a0e27a7a1329cdba0ab0dada257") sendmsg$nl_generic(r5, &(0x7f0000002ac0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002400)={0x668, 0x29, 0x100, 0x70bd2d, 0x25dfdbfc, {0x7}, [@nested={0x9e, 0x62, 0x0, 0x1, [@nested={0x4, 0xe}, @typed={0x4, 0x117}, @generic="4317a01e5feed7d5c6341eb52dc962989cba83041f3a81b8f096c5e480c43f57e0657f2788611677372674443d6fc11d8d267c9c78217d9f43eb9ec676885e8289cb3d3a554fac9ac99e9519c5c7ff199ef14fece41a727288983b41da742241acce69eb94089b7bb444aff8183fed330e01cb5724922fcdf516281bd584896f46ea42903633c2662b5e9297f791bb84bfe9"]}, @nested={0x299, 0xbf, 0x0, 0x1, [@typed={0x5, 0x6c, 0x0, 0x0, @str='\x00'}, @generic="b5a2c3a3c7cab59abf142f8958719dfc5f8af0720f85b0728c8217daa4932fa87a69d29b231e2e189d26cc8925937c11ce1bca60a89be50837c4dec2a812f9e604d4854ce564dfa2db8cfb8ef6b7295270c5b1d92a9c555ca46d8d94ccfe744292a92471ccdabbdfc3202512bdc247653b7f54521ab46bfb39c66b2f4caed85cc5d6cd0d6147647158170777b4868aabf2b87ffb0a313c702fb04576f6a08de4d7194a5eba0f356c2e1ac1cff2f8f87aa566c55fefedae0c932f784564054075", @generic="2378082118117f75487c4d7e3756bb011f8f46c6246a25392641aa3505ad886a0d6d880e1c21ba805ae2a0756c2a76507863527798247fea6c9498fa1ff7799958ac40b0b1d0b4e8b6d4811e7d70552b5b6002dc878048e5931f9c07415d0abe06c7a1637011756f56d9e0499fe0774ac29f11ea4671da95c13cfa927bffb0", @typed={0x8, 0x28, 0x0, 0x0, @fd=r11}, @nested={0x4, 0x4a}, @generic="b6f959afdbdccc042db844faef6fc26b0c4ea72885fe4f302f53ad15f094f12f995f44bee8f1f4f1d794247f292d5bb4d8122d54019528917629593abc4ee1e1ef4d2c98f855e3deb24caba712771a31eb7c1afe0d42", @typed={0x8, 0x14, 0x0, 0x0, @fd=r6}, @generic="c980cdc974fe4b016a379049a5e98cbabc3f54e3e17dbb076843c4ae10d8ecb73394883754a847c3d7bab7eb591573a7687486c8689f65476ce90bac1825ad6e0c1d60a347034441484c2d85f898aeedc10cb17f56f6b285950b55765f0daef52190b1a3f50097fdd425d73cd402eed07205239f6072967e6438b5fe2b6792ac13ff8030fec632bee78651431c270e53267495166764af004ee21b26a57a90693b1ee5cd12663baacb3b5df3a7a8c0e8ed7559415d8e2b7dbfc5accbd856c2d0bee40b5f52d835444cf5add0b699e98d0b83fdb2a7993cf2d0308e90b7872e53acab82ff"]}, @typed={0xc0, 0xbd, 0x0, 0x0, @binary="9b8cfdc638fac12d67060ba2cc85fdda68943bfdd00b61f630b412ec03408f569ad6d646b072c24f97c05a701665aff8d3dfecaff77897f40a2407787a9c0aadd3950eb77d2f05d478ba4c0e6c220dda4b27588c1353001883f27d2beee3f42cdfc7c00c655a5acba3cd75e52d2417c7b29ee53c78a9ff318f9ca0b8e4face191cb16288a51af5e05796b6a2633d9c7b7318c3c40d1788b79f6bbf008dcb0a781a88aa06e270b73a3af9f0a92cd197c9c071c8678b88cf2a01b9c416"}, @typed={0xd0, 0x79, 0x0, 0x0, @binary="4980890a87ceeca304fd9f16c330a0418c1551544bbe94e503610384b7689841fd3fffa7805d479a97f24d5ff9c74cb0af82c6ecae894bd9b5b4653b7d640a6a1030efabb05dfc27a7daa4eebdf9115e975ab9b7bc1aef0902f380bbb8fc56e70848376c2c6eea0a73e9049bb207eae00eeab4abd3b490d9c32c1848f0cd7bd2bc71b2208d1324dfbf1229b68a71fa23583f6cd0c6364efb948c68b5441885dec11d61f56eb0bda1dd13c1769deaa4718d592fa26d79fba8305aeda4bc6ead42678958eb7883056dc4f82660"}, @nested={0x17d, 0x12, 0x0, 0x1, [@generic="0b31f62235d0c5182e0caa2caec01dcdeb4f2e9e3c33d2a8de6b39821720b7244dfc97dd458a0f68ba38275d3c1da56bd8dbc5f21985ce3751fb0faa6e4d169a7c034e782ecba91fc26454cbee93ac3520eb0a08acb5680b93261c1673afff46f39c4115eef12a3feb010b94565e3ff15f3176da57b112d119dd21099e", @typed={0x8, 0xd7, 0x0, 0x0, @pid=r13}, @nested={0x4, 0x13}, @generic="3549a7ca4c8199579f38c4b785f20fd59c17f148242e29ece9a2306aff4b8a4c068fc0c1246c19e3fc5770568b8173071c8916715be8b3c80dbdaaa0d6b74e146f6d225282281b4c106fcfbf7e7bbf753b23cd904f80a94449e13e1008ae294233b7823544fb0090081a0516aca533ffc76058a4daf34b3db666aea518a554d578b7ee6845afe675c3bf79ea8942a0d0304e6bcf63d85a437c7ea96611f3985966a90ad36b83b3c5380cae3ee6a68e70c5b1e0b7bb9a7b7354fd6f31041c0c9eb6c1d6ddb2b9b657ba1e8d03452802462edf78154f847d71e7d6058e09c5636a59b2f72510707afef4d752dd95112256"]}, @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x6}]}, 0x668}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000002b00)={0x0, 0x3, 0x20, 0x1, 0x5}, &(0x7f0000002b40)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000002b80)={r14, 0x1, 0x4}, &(0x7f0000002bc0)=0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002c40)={&(0x7f0000002c00)='devlink_health_reporter_state_update\x00', r0, 0x0, 0x80000001}, 0x18) (async) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r15, &(0x7f0000002c80)="c1f0df1765516b3a0f54f10e4d76d9bd", 0x10, 0x1002, 0x0, 0x0) 633.769595ms ago: executing program 4 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e260000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000"], 0x48) mbind(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0xad5, 0x0) close(r4) clock_nanosleep(0x2, 0x1, 0x0, 0xfffffffffffffffe) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGsBBD5Jq5nSnT23tLv+69pff3S4aeM8Odc6bw9Jl7es7cADrWSPZHGrE/Iq4mEUOlY92RHxxZ+nv3/7xxLtuSqFTe/iOJG58ki+VzJfnXwfzF/wxF8nMasa9rdbtzC9cvTc7MTF/L62Pzl6+OzS1cP3zx8uSF6QvTVyZenThx/NjxE+NHtnR9aal8+tb7Hw59dubdb79+mIx/9+uZJE7Go7xv2XXVvrZvSy1n37ORqCx5UN6ffV9PbPHcO8VfQ8X/k8eS2h3sWOcjIouwnoh4Noaiq/SvORSfvtnWzgFNVUmiyFFAx0k2Ff/9298RoMWK+4DivX2998GrpU2+KwFa4d6ppQGppdjviYgi/ruXxgajvzo2MHA/WTHOk+TjBluVtfHTj2duZVs0GIcDmmPxZjHKXZv/k2psDkd/tTZwP10R/2lpy/a/tcn2R2rq4h9aZ/FmRDyX5//e2FD8j5Ti/71Nti/+AQAAAAAAYPvcORURr9Sb/5cuz//prTP/ZzAiTm5D+0/+/V96Ny8k29AcUHLvVMTrdef/Ls/xHe7Ka/+tzgfoSc5fnJk+EhH/i4hD0dOX1cdrzlueIXz4831fNWq/PP8v27L2i7mA+ZnudtcsxJ2anJ/c6nUDEfduRjxfnf97IN+zcv5Plv+TOvk/i++r62xj30u3zzY69uT4B5ql8k3Ewbr5//HtdrL28znGqvcDY8VdwWovfPzF943aF//QPln+H1g7/vuS8vN65jZ2/t6IOLrQXWl0fLP3/73JO13F+TMfTc7PXxuP6E1Or94/sbE+w25VxEMRL1n8H3px7fG/5fv/UhzuiYjFdbb5zKPB3xodk/+hfbL4n1o7/w+vzP8bL0zcHv6hUftn15X/j1Vz+qF8j/E/KFv9PI71BmhbugsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7k0Iv4TSTq6XE7T0dGIwYj4fwykM7Nz8y+fn/3gylR2rPr5/2nxSb9DS/Wk+Pz/4VJ9oqZ+NCL2RsSXXXuq9dFzszNT7b54AAAAAAAAAAAAAAAAAAAA2CEGq2v+K3216/8zv3e1u3dA03XnX8U7dJ7uTb+y0retHQFabvPxDzzt1h//PU3tB9B6jeP/wcNKVUu7A7SQ+3/oXJuMf78ugF1A/odOtc4xvf5m9wNoB/kfAAAAAAB2lb0H7vySRMTia3uqW6Y3P2ayP+xuabs7ALSNObzQubpn290DoF28xweS5dLfdRf7N579nzSnQwAAAAAAAAAAAADAKgf3W/8PnWrt9f/m9sNutsb6/3rB73EBsIs0/ugPuR92O+/xgSdle+v/AQAAAAAAAAAAAGAH6L9+aXJmZvra3MLTV3hjZ3RjY4XFyR3RjW0tPGrOmXsiYmdcYKsLxSM42tiNNv9cAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlv0bAAD//1VjJ6k=") prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) unshare(0x2a020400) 601.054285ms ago: executing program 1 (id=520): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, 0x0) ptrace(0x11, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 551.904886ms ago: executing program 0 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 418.741936ms ago: executing program 1 (id=522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001c00000000000000000000000000000000001b85759800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000040009500000000000000"], 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000eb09e9cb75110000000000000000000000000100000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000100000b702000014000000b7030000000000008500000083000000bf09000000000000550901009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000c80)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000300)='GPL\x00', 0x7, 0xd, &(0x7f00000002c0)=""/13, 0x40f00, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r4 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000001) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f0000000200), 0x0) readv(r5, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) 418.297046ms ago: executing program 0 (id=523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='kvm_ack_irq\x00', r5, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) unshare(0x2e020680) ioctl$TCSETSW2(r3, 0x5425, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0xc021) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x89, 0xe}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x40}}, 0x0) 362.430887ms ago: executing program 2 (id=524): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 362.233187ms ago: executing program 2 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 235.074777ms ago: executing program 2 (id=526): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000008c0)="23936dbcd5820deb5e88c276153a3c90a4474ad83e7c5c401f0c6ea41f4e6011d24278929f989434418b4323d5aeb9e14d800a5b160a5759251e0ea5f7b3827e6ed48fb389f3cace0ddfc5965651cd87f0af9eb726da0a949bff024e48623e09716a549396ba0e9d0e84cbb2e407ef6fe7dffbd36acbb1f9e8ce7a760ea74126ac66062f583c82c9062516b55ae80ed067df24803bf87d68d71dbc514e38398d4686da1b87d08ff65899c5b00a628941d007b4291b5a5a4d59ca9fefe9ad9c77e6dc237aee7af8120b23f4c8da8a1eeebf9a69373a024573e5c617e1a0737a7f7de8dea49dcba5c7e56a7b1d80893894f6cbd3561973328eaf604212225b4c8d57f13dedae1e", 0x106}, {&(0x7f0000000480)="0767c7a3c881dfccb4f9dbb8c622aac790dfc9c65324da9449a77fd8f467eda963563c252a8ffd044b77c3698ee3ce3bc5a14d38966f4b2c1e10ba2dfd4aedcaf0814a80aed249a36b74f8a40ed9001b33adfecc80e668b05ab443137eeaf5bd2d513fdfebc3468ad04cd76946f182323ee26379a10ce1d900eb0afa0bcb4977d4f9e469a08c561b3fdbe42039efc25ef519ef903a09f40ba0d79ac9e0e1b91ba9739bc2d391b5e2fe564551dba2790a47c4601aef7792d7efb889a0b697", 0xbe}, {&(0x7f0000001000)="3d5e976d1d7c59ade9cf175eb93dc1d72d75fedd656236cfa152d8b82a278c803545202cf95f98a95907248d1857680460d61f1220b000e0ada16585a91700b4f917e415e6c3b6711dd4867ac7f153b48411497daef87ef367cac9ee4566dbbcc2fe9b99d4dbac4be8f79035dc54a7f61c1ce39f86d0f61473528f7fa88f1cc1fdd0e126caa30637d40aebae091b91ea097a3fb88cbb63c4130f36be74b37bcde5345b45e31e71d4e34d2f0a8b8fc2bf407b5e8accb27201000000a92b34a00e820ae35c3e772360f6ccf8459edbf70a43abb0a2b0d0aa587e83d87ae86c40b9d63bfe70170fb913f31c0d65ab0f6b57", 0xf0}, {&(0x7f0000000640)="2de780f08f7dbd8080b093bac0084fd34b966e2adf0d00db28d7c4b9e46a9a32d3605b4e955864c6eef327b831c8801d47d869beaba7915dc097d6f31b72690219c20000000000000000", 0x4a}, {&(0x7f00000006c0)="9865328c00d15d7a8a91c060944aa89fcf7b7f6fa20681efc94ffa77bbc54de3fc13e41eb63c8a27efebf2b67ae8f1c7a67640def36f26f94a5989059078482ae5d10bceda9d8ccb7bbe156da2d09cea7f1c9b2d8a67341153be5afaa6da9b48ee4675aef90d532d0ef5a2f8099d66d81e22dfc55cf765182564af9525088d987b92311b2a0650cc7ce65d65e4c8af3c19a4c40d8692da", 0x97}, {&(0x7f0000000780)="60527fd6a3b11d2275d596a5613754a1c184aa46be1ce229f9d3d2f6a30ec080db9977c94cca2868b3a571ef5fa1b2ad05c42d39caeb35b9d2d3fbd43bc86b14252f2144a8a70f102bcd8a54af148b53f6fd08a34dbde6c01d9b61c8e05183a59dcb0ca65d832da5cebb570ae01d6e8aec0c3621584c586f92a78ade37c0b05a3212384c75cf2c4fb1c58fcfffe18872a9019c48dda44c0173bb3dc95d3b28d098931c6bd5a1d8e508a768fdf5cf114b0e831d748d2eed9c4329a2611753", 0xbe}, {0x0}, {&(0x7f00000002c0)="a56a0912d1d34e6ad1222c0c25941f2944fa00dca2e47c2e07e4288c1cc6626db20979431ec871a736e24526708208b948992fb1321a736c66a805b5e363e9f329c33ee4c1683146b625ae30152a4850a4a3b2e13018fd7c73377c0f005894aaf23e51cda50d9333342022230acd453def65ecf3bf0005814b6e6e8c483d3a1fa95030b7144d5c329dee6abcf580ab143d1274c145c1e784d28749a551dec653f978a19c9f", 0xa5}], 0x8}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)={[{@usrquota}, {@noquota}, {@grpid}]}, 0x1, 0x4c4, &(0x7f0000000a40)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 0s ago: executing program 2 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e260000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000"], 0x48) mbind(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0xad5, 0x0) close(r4) clock_nanosleep(0x2, 0x1, 0x0, 0xfffffffffffffffe) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) unshare(0x2a020400) kernel console output (not intermixed with test programs): vsim1: renamed from eth1 [ 37.586307][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.602906][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.610083][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.632612][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.642442][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.651488][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.663085][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.675051][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.696806][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.703966][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.722676][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.730017][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.793098][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.809101][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.832208][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.845233][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.869618][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.878992][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.888194][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.899727][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.911444][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.923069][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.930529][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.939825][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.947286][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.958586][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.965828][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.980693][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.987964][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.997250][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.004371][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.014694][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.021782][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.030983][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.038130][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.052332][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.059549][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.083731][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.120046][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.158178][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.168913][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.211569][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.270828][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.285145][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.323141][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.342484][ T3300] veth0_vlan: entered promiscuous mode [ 38.371057][ T3300] veth1_vlan: entered promiscuous mode [ 38.392248][ T3302] veth0_vlan: entered promiscuous mode [ 38.421073][ T3300] veth0_macvtap: entered promiscuous mode [ 38.432859][ T3302] veth1_vlan: entered promiscuous mode [ 38.447961][ T3300] veth1_macvtap: entered promiscuous mode [ 38.478961][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.492993][ T3302] veth0_macvtap: entered promiscuous mode [ 38.520670][ T3306] veth0_vlan: entered promiscuous mode [ 38.529898][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.537792][ T3305] veth0_vlan: entered promiscuous mode [ 38.544119][ T3302] veth1_macvtap: entered promiscuous mode [ 38.559484][ T3305] veth1_vlan: entered promiscuous mode [ 38.572389][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.581249][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.591329][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.600330][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.615008][ T3304] veth0_vlan: entered promiscuous mode [ 38.621484][ T3306] veth1_vlan: entered promiscuous mode [ 38.628294][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.638959][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.649728][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.659296][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.669857][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.681301][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.707158][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.716110][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.724840][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.733608][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.744509][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.752500][ T3304] veth1_vlan: entered promiscuous mode [ 38.767838][ T3306] veth0_macvtap: entered promiscuous mode [ 38.774852][ T3306] veth1_macvtap: entered promiscuous mode [ 38.811448][ T3305] veth0_macvtap: entered promiscuous mode [ 38.828777][ T3304] veth0_macvtap: entered promiscuous mode [ 38.840614][ T3305] veth1_macvtap: entered promiscuous mode [ 38.849263][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.856574][ T3441] loop0: detected capacity change from 0 to 512 [ 38.859812][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.859827][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.886554][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.898162][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.906054][ T3304] veth1_macvtap: entered promiscuous mode [ 38.922195][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.932961][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.942880][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.953467][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.963386][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.974046][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.986604][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.011308][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.022099][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.032000][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.042539][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.066424][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.077829][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.088368][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.098449][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.108981][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.118843][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.129316][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.139247][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.149721][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.164318][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 39.164334][ T30] audit: type=1400 audit(1741830069.130:129): avc: denied { prog_run } for pid=3450 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.168363][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.170856][ T3441] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.6: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 39.216463][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.227150][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.237155][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.247810][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.257379][ T3441] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.6: Bad quota inode: 3, type: 0 [ 39.257905][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.279564][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.289804][ T30] audit: type=1400 audit(1741830069.250:130): avc: denied { create } for pid=3450 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.290725][ T3441] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.310356][ T30] audit: type=1400 audit(1741830069.250:131): avc: denied { write } for pid=3450 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.345958][ T30] audit: type=1400 audit(1741830069.250:132): avc: denied { create } for pid=3450 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.366822][ T3441] EXT4-fs (loop0): mount failed [ 39.367951][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.391297][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400226][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.409197][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418164][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.430632][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.439562][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.448551][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.457566][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.469229][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.479808][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.489708][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.500193][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.510036][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.520550][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.530576][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.541164][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.557548][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.577240][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.586064][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.594787][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.603722][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.635049][ T30] audit: type=1400 audit(1741830069.590:133): avc: denied { read write } for pid=3455 comm="syz.0.8" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.658546][ T30] audit: type=1400 audit(1741830069.590:134): avc: denied { open } for pid=3455 comm="syz.0.8" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.685776][ T30] audit: type=1400 audit(1741830069.610:135): avc: denied { create } for pid=3455 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.706068][ T30] audit: type=1400 audit(1741830069.610:136): avc: denied { write } for pid=3455 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.726524][ T30] audit: type=1400 audit(1741830069.610:137): avc: denied { nlmsg_write } for pid=3455 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.812330][ T3463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.823034][ T30] audit: type=1400 audit(1741830069.770:138): avc: denied { create } for pid=3462 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.916071][ T3469] loop1: detected capacity change from 0 to 512 [ 39.930900][ T3469] ======================================================= [ 39.930900][ T3469] WARNING: The mand mount option has been deprecated and [ 39.930900][ T3469] and is ignored by this kernel. Remove the mand [ 39.930900][ T3469] option from the mount to silence this warning. [ 39.930900][ T3469] ======================================================= [ 39.950073][ T3471] pim6reg1: entered promiscuous mode [ 39.972108][ T3471] pim6reg1: entered allmulticast mode [ 39.978599][ T3469] EXT4-fs: Ignoring removed bh option [ 39.984081][ T3469] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.005217][ T3466] pim6reg1: entered promiscuous mode [ 40.010846][ T3466] pim6reg1: entered allmulticast mode [ 40.019671][ T3471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'. [ 40.034248][ T3466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.075205][ T3469] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002] [ 40.085206][ T3469] System zones: 0-2, 18-18, 34-35 [ 40.102793][ T3469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.124036][ T3469] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.281033][ T3481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 40.315925][ T3485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3485 comm=syz.4.14 [ 40.605088][ T3487] random: crng reseeded on system resumption [ 40.753521][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.844418][ T3496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'. [ 40.922300][ T3499] pim6reg1: entered promiscuous mode [ 40.927904][ T3499] pim6reg1: entered allmulticast mode [ 40.959536][ T3499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 41.063843][ C0] hrtimer: interrupt took 46877 ns [ 41.084647][ T3508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3508 comm=syz.2.21 [ 41.237077][ T3516] random: crng reseeded on system resumption [ 41.296411][ T3514] loop1: detected capacity change from 0 to 512 [ 41.318176][ T3510] loop3: detected capacity change from 0 to 512 [ 41.330276][ T3510] EXT4-fs: Ignoring removed orlov option [ 41.382024][ T3510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.394948][ T3514] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.23: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 41.413132][ T3510] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.424369][ T3510] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.441160][ T3510] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.22: bg 0: block 248: padding at end of block bitmap is not set [ 41.476729][ T3510] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.22: Failed to acquire dquot type 1 [ 41.496964][ T3514] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.23: Bad quota inode: 3, type: 0 [ 41.516392][ T3510] EXT4-fs (loop3): 1 truncate cleaned up [ 41.543882][ T3514] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.563293][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.630918][ T3531] loop0: detected capacity change from 0 to 512 [ 41.641388][ T3531] EXT4-fs: Ignoring removed orlov option [ 41.649630][ T3510] syz.3.22 (3510) used greatest stack depth: 9000 bytes left [ 41.650622][ T3514] EXT4-fs (loop1): mount failed [ 41.670697][ T3531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.691738][ T3531] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.701862][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.716779][ T3531] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.732278][ T3531] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.27: bg 0: block 248: padding at end of block bitmap is not set [ 41.756850][ T3531] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.27: Failed to acquire dquot type 1 [ 41.779558][ T3536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'. [ 41.798655][ T3531] EXT4-fs (loop0): 1 truncate cleaned up [ 41.810382][ T3535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.28'. [ 41.863555][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.904518][ T3540] xt_hashlimit: max too large, truncated to 1048576 [ 41.935106][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 41.969857][ T3542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 42.000410][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.121497][ T3556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3556 comm=syz.2.37 [ 42.160409][ T3559] loop0: detected capacity change from 0 to 512 [ 42.171279][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.184713][ T3559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.256216][ T3559] EXT4-fs (loop0): 1 truncate cleaned up [ 42.267398][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.303426][ T3563] loop1: detected capacity change from 0 to 512 [ 42.316642][ T3571] random: crng reseeded on system resumption [ 42.410955][ T3563] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.411768][ T3573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3573 comm=syz.4.42 [ 42.431206][ T3563] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 42.444373][ T3563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 42.474929][ T3563] System zones: 0-2, 18-18, 34-34 [ 42.480764][ T3563] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 42.496822][ T3563] EXT4-fs (loop1): 1 truncate cleaned up [ 42.503083][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.555360][ T3563] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.39: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 42.649431][ T3563] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 42.664329][ T3563] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.39: Deleting old file: nlink 4, error=-117 [ 42.688259][ T3563] Zero length message leads to an empty skb [ 42.751157][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.879646][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930468][ T3588] loop0: detected capacity change from 0 to 512 [ 42.932184][ T3584] loop1: detected capacity change from 0 to 512 [ 42.939288][ T3588] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.951395][ T3588] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 42.966779][ T3584] EXT4-fs: Ignoring removed orlov option [ 42.978234][ T3588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 42.996747][ T3584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.017256][ T3588] System zones: 0-2, 18-18, 34-34 [ 43.026307][ T3584] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.036646][ T3584] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.044816][ T3588] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.070385][ T3588] EXT4-fs (loop0): 1 truncate cleaned up [ 43.076596][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.084013][ T3584] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.44: bg 0: block 248: padding at end of block bitmap is not set [ 43.097449][ T3588] EXT4-fs error (device loop0): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.0.46: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 43.124942][ T3584] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.44: Failed to acquire dquot type 1 [ 43.127945][ T3588] EXT4-fs error (device loop0) in ext4_delete_entry:2758: Corrupt filesystem [ 43.147092][ T3588] EXT4-fs warning (device loop0): ext4_rename_delete:3742: inode #2: comm syz.0.46: Deleting old file: nlink 4, error=-117 [ 43.161365][ T3596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3596 comm=syz.3.49 [ 43.199159][ T3584] EXT4-fs (loop1): 1 truncate cleaned up [ 43.221026][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.230750][ T3598] loop2: detected capacity change from 0 to 512 [ 43.251312][ T3598] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.274018][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.280238][ T3600] random: crng reseeded on system resumption [ 43.340161][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.349817][ T3598] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 43.360200][ T3598] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 43.369556][ T3598] System zones: 0-2, 18-18, 34-34 [ 43.375258][ T3598] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.391653][ T3598] EXT4-fs (loop2): 1 truncate cleaned up [ 43.419096][ T3598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.445752][ T3598] EXT4-fs error (device loop2): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.2.50: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 43.468897][ T3610] loop1: detected capacity change from 0 to 512 [ 43.478485][ T3598] EXT4-fs error (device loop2) in ext4_delete_entry:2758: Corrupt filesystem [ 43.494147][ T3598] EXT4-fs warning (device loop2): ext4_rename_delete:3742: inode #2: comm syz.2.50: Deleting old file: nlink 4, error=-117 [ 43.510454][ T3608] loop0: detected capacity change from 0 to 512 [ 43.528182][ T3610] EXT4-fs: Ignoring removed bh option [ 43.534055][ T3610] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.548601][ T3608] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.51: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 43.580694][ T3608] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.51: Bad quota inode: 3, type: 0 [ 43.594051][ T3610] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002] [ 43.603401][ T3610] System zones: 0-2, 18-18, 34-35 [ 43.611074][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.623944][ T3608] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.640296][ T3610] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.664290][ T3608] EXT4-fs (loop0): mount failed [ 43.670181][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.851869][ T3635] macvlan1: entered promiscuous mode [ 43.859806][ T3635] ipvlan0: entered promiscuous mode [ 43.867105][ T3635] ipvlan0: left promiscuous mode [ 43.872944][ T3635] macvlan1: left promiscuous mode [ 43.948653][ T3640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.003242][ T3640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.059731][ T3640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.109782][ T3640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.158462][ T3640] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.170200][ T3640] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.181583][ T3640] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.194213][ T3640] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.226954][ T3645] loop3: detected capacity change from 0 to 512 [ 44.247937][ T3645] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.258889][ T3645] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 44.268257][ T3645] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 44.277659][ T3645] System zones: 0-2, 18-18, 34-34 [ 44.283259][ T3645] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.307069][ T3645] EXT4-fs (loop3): 1 truncate cleaned up [ 44.314032][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.329428][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.346588][ T3645] EXT4-fs error (device loop3): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.3.65: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 44.380037][ T3645] EXT4-fs error (device loop3) in ext4_delete_entry:2758: Corrupt filesystem [ 44.394775][ T3645] EXT4-fs warning (device loop3): ext4_rename_delete:3742: inode #2: comm syz.3.65: Deleting old file: nlink 4, error=-117 [ 44.438235][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 44.438253][ T30] audit: type=1326 audit(1741830074.400:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 44.468334][ T30] audit: type=1326 audit(1741830074.400:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 44.491737][ T30] audit: type=1326 audit(1741830074.400:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 44.515085][ T30] audit: type=1326 audit(1741830074.400:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 44.538928][ T30] audit: type=1326 audit(1741830074.400:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 44.586141][ T3664] loop2: detected capacity change from 0 to 512 [ 44.598696][ T3666] macvlan1: entered promiscuous mode [ 44.604904][ T3666] ipvlan0: entered promiscuous mode [ 44.610680][ T3666] ipvlan0: left promiscuous mode [ 44.617928][ T3664] journal_path: Non-blockdev passed as './file0' [ 44.624424][ T3664] EXT4-fs: error: could not find journal device path [ 44.631423][ T3666] macvlan1: left promiscuous mode [ 44.645641][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.689831][ T3671] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.768422][ T30] audit: type=1400 audit(1741830074.730:222): avc: denied { create } for pid=3682 comm="syz.0.81" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.796786][ T3683] loop0: detected capacity change from 0 to 1024 [ 44.803941][ T30] audit: type=1326 audit(1741830074.760:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 44.805052][ T3671] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.829512][ T30] audit: type=1400 audit(1741830074.790:224): avc: denied { mounton } for pid=3682 comm="syz.0.81" path="/16/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.861014][ T30] audit: type=1326 audit(1741830074.810:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 44.884829][ T30] audit: type=1326 audit(1741830074.810:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0eb87d1a3 code=0x7ffc0000 [ 44.911885][ T3686] loop3: detected capacity change from 0 to 512 [ 44.926462][ T3690] loop0: detected capacity change from 0 to 128 [ 44.934500][ T3690] msdos: Unknown parameter '017777777777777777777770x00000000000000000x0000000000000003' [ 44.946272][ T3686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.947221][ T3690] No source specified [ 44.962046][ T3671] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.976646][ T3686] EXT4-fs (loop3): 1 truncate cleaned up [ 44.988281][ T3686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.054623][ T3686] capability: warning: `syz.3.75' uses deprecated v2 capabilities in a way that may be insecure [ 45.077806][ T3671] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.208086][ T3697] loop0: detected capacity change from 0 to 512 [ 45.228443][ T3697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.241225][ T3697] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.276802][ T3696] loop4: detected capacity change from 0 to 512 [ 45.329825][ T3696] EXT4-fs: Ignoring removed orlov option [ 45.388931][ T3696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.422278][ T3701] loop1: detected capacity change from 0 to 512 [ 45.430576][ T3696] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 45.444735][ T3701] journal_path: Non-blockdev passed as './file0' [ 45.451151][ T3701] EXT4-fs: error: could not find journal device path [ 45.468176][ T3696] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.494539][ T3696] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.85: bg 0: block 248: padding at end of block bitmap is not set [ 45.663948][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.677708][ T3696] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.85: Failed to acquire dquot type 1 [ 45.765288][ T3696] EXT4-fs (loop4): 1 truncate cleaned up [ 45.874263][ T3708] loop1: detected capacity change from 0 to 512 [ 45.891262][ T3708] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.905302][ T3708] EXT4-fs (loop1): 1 truncate cleaned up [ 45.911721][ T3708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.097440][ T3696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.139744][ T3711] __nla_validate_parse: 4 callbacks suppressed [ 46.139793][ T3711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.87'. [ 46.170959][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.337619][ T3718] loop4: detected capacity change from 0 to 512 [ 46.348923][ T3718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.369843][ T3718] EXT4-fs (loop4): 1 truncate cleaned up [ 46.378113][ T3718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.499834][ T3725] loop3: detected capacity change from 0 to 512 [ 46.507820][ T3725] EXT4-fs: Ignoring removed bh option [ 46.513279][ T3725] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.548325][ T3725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002] [ 46.557854][ T3725] System zones: 0-2, 18-18, 34-35 [ 46.563857][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.578089][ T3725] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.588771][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.613634][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.775009][ T3736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.96'. [ 47.069033][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.089736][ T3743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 47.120518][ T3745] loop4: detected capacity change from 0 to 512 [ 47.127441][ T3745] EXT4-fs: Ignoring removed orlov option [ 47.133551][ T3745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.142995][ T3745] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.151468][ T3745] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.158614][ T3745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.100: bg 0: block 248: padding at end of block bitmap is not set [ 47.173232][ T3745] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.100: Failed to acquire dquot type 1 [ 47.185382][ T3745] EXT4-fs (loop4): 1 truncate cleaned up [ 47.192220][ T3745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.216920][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.345268][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.514597][ T3759] loop4: detected capacity change from 0 to 512 [ 47.531755][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.545337][ T3759] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.576446][ T3760] loop3: detected capacity change from 0 to 512 [ 47.631339][ T3760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.711933][ T3760] EXT4-fs (loop3): 1 truncate cleaned up [ 47.756813][ T3760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.093613][ T3776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.190042][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 48.208560][ T3778] team0: Port device team_slave_0 removed [ 48.241671][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.419928][ T3783] loop3: detected capacity change from 0 to 512 [ 48.454748][ T3783] journal_path: Non-blockdev passed as './file0' [ 48.461348][ T3783] EXT4-fs: error: could not find journal device path [ 48.566717][ T3790] loop3: detected capacity change from 0 to 128 [ 48.734166][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 48.778206][ T3798] FAULT_INJECTION: forcing a failure. [ 48.778206][ T3798] name failslab, interval 1, probability 0, space 0, times 1 [ 48.790963][ T3798] CPU: 1 UID: 0 PID: 3798 Comm: syz.3.115 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 48.790988][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.791026][ T3798] Call Trace: [ 48.791034][ T3798] [ 48.791042][ T3798] dump_stack_lvl+0xf2/0x150 [ 48.791077][ T3798] dump_stack+0x15/0x1a [ 48.791102][ T3798] should_fail_ex+0x24a/0x260 [ 48.791134][ T3798] should_failslab+0x8f/0xb0 [ 48.791185][ T3798] kmem_cache_alloc_node_noprof+0x59/0x320 [ 48.791264][ T3798] ? __alloc_skb+0x10b/0x310 [ 48.791373][ T3798] __alloc_skb+0x10b/0x310 [ 48.791394][ T3798] netlink_alloc_large_skb+0xad/0xe0 [ 48.791461][ T3798] netlink_sendmsg+0x3b4/0x6e0 [ 48.791505][ T3798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.791586][ T3798] __sock_sendmsg+0x140/0x180 [ 48.791626][ T3798] ____sys_sendmsg+0x326/0x4b0 [ 48.791654][ T3798] __sys_sendmsg+0x19d/0x230 [ 48.791720][ T3798] __x64_sys_sendmsg+0x46/0x50 [ 48.791790][ T3798] x64_sys_call+0x2734/0x2dc0 [ 48.791891][ T3798] do_syscall_64+0xc9/0x1c0 [ 48.791922][ T3798] ? clear_bhb_loop+0x55/0xb0 [ 48.791954][ T3798] ? clear_bhb_loop+0x55/0xb0 [ 48.791984][ T3798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.792014][ T3798] RIP: 0033:0x7ff0eb87d169 [ 48.792034][ T3798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.792051][ T3798] RSP: 002b:00007ff0e9ec6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.792103][ T3798] RAX: ffffffffffffffda RBX: 00007ff0eba96080 RCX: 00007ff0eb87d169 [ 48.792115][ T3798] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000009 [ 48.792126][ T3798] RBP: 00007ff0e9ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 48.792137][ T3798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.792151][ T3798] R13: 0000000000000000 R14: 00007ff0eba96080 R15: 00007ffc37729b08 [ 48.792171][ T3798] [ 48.995474][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.018145][ T3802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 49.043793][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 49.052758][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 49.064553][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 49.143624][ T3814] loop0: detected capacity change from 0 to 512 [ 49.150667][ T3814] journal_path: Non-blockdev passed as './file0' [ 49.157171][ T3814] EXT4-fs: error: could not find journal device path [ 49.210705][ T3817] loop4: detected capacity change from 0 to 164 [ 49.223404][ T3817] process 'syz.4.126' launched '/dev/fd/13' with NULL argv: empty string added [ 49.235033][ T3817] syz.4.126: attempt to access beyond end of device [ 49.235033][ T3817] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 49.250857][ T3817] syz.4.126: attempt to access beyond end of device [ 49.250857][ T3817] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 49.273193][ T3821] pim6reg1: entered promiscuous mode [ 49.278557][ T3821] pim6reg1: entered allmulticast mode [ 49.337035][ T3827] loop1: detected capacity change from 0 to 2048 [ 49.500686][ T3847] loop3: detected capacity change from 0 to 512 [ 49.518383][ T3847] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.137: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.537168][ T3847] EXT4-fs error (device loop3): ext4_quota_enable:7104: comm syz.3.137: Bad quota inode: 3, type: 0 [ 49.548950][ T3847] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.566149][ T3847] EXT4-fs (loop3): mount failed [ 49.619656][ T3853] loop3: detected capacity change from 0 to 512 [ 49.647826][ T3853] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.138: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.717251][ T3853] EXT4-fs error (device loop3): ext4_quota_enable:7104: comm syz.3.138: Bad quota inode: 3, type: 0 [ 49.728276][ T3858] loop0: detected capacity change from 0 to 512 [ 49.728547][ T3858] journal_path: Non-blockdev passed as './file0' [ 49.740961][ T3858] EXT4-fs: error: could not find journal device path [ 49.748702][ T3853] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.850174][ T3865] xt_cluster: node mask cannot exceed total number of nodes [ 49.857946][ T3853] EXT4-fs (loop3): mount failed [ 49.861852][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 49.861873][ T30] audit: type=1400 audit(1741830079.810:554): avc: denied { getopt } for pid=3864 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.945893][ T3867] pim6reg1: entered promiscuous mode [ 49.951435][ T3867] pim6reg1: entered allmulticast mode [ 50.105647][ T30] audit: type=1326 audit(1741830080.060:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.129206][ T30] audit: type=1326 audit(1741830080.060:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.160288][ T30] audit: type=1326 audit(1741830080.120:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.183789][ T30] audit: type=1326 audit(1741830080.120:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.207381][ T30] audit: type=1326 audit(1741830080.120:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.230629][ T30] audit: type=1326 audit(1741830080.120:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.254238][ T30] audit: type=1326 audit(1741830080.120:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.277690][ T30] audit: type=1326 audit(1741830080.120:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.301268][ T30] audit: type=1326 audit(1741830080.120:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 50.352072][ T3893] loop4: detected capacity change from 0 to 512 [ 50.365113][ T3893] journal_path: Non-blockdev passed as './file0' [ 50.371619][ T3893] EXT4-fs: error: could not find journal device path [ 50.459774][ T3901] mmap: syz.4.155 (3901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.502675][ T3671] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536970][ T3671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.586468][ T3909] loop1: detected capacity change from 0 to 512 [ 50.593774][ T3909] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.608920][ T3909] EXT4-fs (loop1): 1 truncate cleaned up [ 50.615092][ T3909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.629350][ T3671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.644076][ T3671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.732516][ T3905] pim6reg1: entered promiscuous mode [ 50.737917][ T3905] pim6reg1: entered allmulticast mode [ 50.858248][ T3914] team0: Port device team_slave_0 removed [ 50.965342][ T3916] loop3: detected capacity change from 0 to 2048 [ 51.044888][ T3916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.143758][ T3927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.182627][ T3916] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.158: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 51.257161][ T3932] loop4: detected capacity change from 0 to 512 [ 51.264229][ T3932] journal_path: Non-blockdev passed as './file0' [ 51.271255][ T3932] EXT4-fs: error: could not find journal device path [ 51.326941][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.350876][ T3936] __nla_validate_parse: 4 callbacks suppressed [ 51.350893][ T3936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 51.367433][ T3936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 51.423493][ T3940] loop1: detected capacity change from 0 to 512 [ 51.436282][ T3940] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.489109][ T3940] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 51.501180][ T3940] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 51.509973][ T3940] System zones: 0-2, 18-18, 34-34 [ 51.517020][ T3940] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.534214][ T3940] EXT4-fs (loop1): 1 truncate cleaned up [ 51.542381][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.565006][ T3940] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.165: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 51.588067][ T3940] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 51.600246][ T3940] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.165: Deleting old file: nlink 4, error=-117 [ 51.679664][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.721417][ T3948] loop1: detected capacity change from 0 to 512 [ 51.734123][ T3948] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.749309][ T3948] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 51.758828][ T3948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 51.760372][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.767511][ T3948] System zones: 0-2, 18-18, 34-34 [ 51.783060][ T3948] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.809526][ T3948] EXT4-fs (loop1): 1 truncate cleaned up [ 51.817085][ T3948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.840719][ T3948] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.168: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 51.861753][ T3948] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 51.871074][ T3948] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.168: Deleting old file: nlink 4, error=-117 [ 51.940246][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.965815][ T3956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.139124][ T3962] macvlan1: entered promiscuous mode [ 52.152239][ T3962] ipvlan0: entered promiscuous mode [ 52.166396][ T3962] ipvlan0: left promiscuous mode [ 52.171723][ T3962] macvlan1: left promiscuous mode [ 52.191405][ T3964] pim6reg1: entered promiscuous mode [ 52.196803][ T3964] pim6reg1: entered allmulticast mode [ 52.206044][ T3964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'. [ 52.211817][ T3968] loop0: detected capacity change from 0 to 128 [ 52.258201][ T3970] loop1: detected capacity change from 0 to 512 [ 52.298751][ T3970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.311724][ T3970] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.360597][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.395038][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.182'. [ 52.440997][ T3980] loop4: detected capacity change from 0 to 512 [ 52.451421][ T3980] EXT4-fs: Ignoring removed i_version option [ 52.451525][ T3984] loop1: detected capacity change from 0 to 512 [ 52.466087][ T3980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.485370][ T3984] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.494523][ T3980] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.507126][ T3984] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 52.508346][ T3980] EXT4-fs (loop4): 1 truncate cleaned up [ 52.517088][ T3984] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 52.523175][ T3980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.532255][ T3984] System zones: 0-2, 18-18, 34-34 [ 52.550510][ T3984] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.569375][ T3984] EXT4-fs (loop1): 1 truncate cleaned up [ 52.575446][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.590865][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.593078][ T3984] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.179: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 52.620893][ T3984] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 52.630268][ T3984] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.179: Deleting old file: nlink 4, error=-117 [ 52.709562][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.025935][ T4013] xt_cluster: node mask cannot exceed total number of nodes [ 53.097306][ T4015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.195'. [ 53.122495][ T4017] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 53.130273][ T4017] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 53.138637][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 53.146869][ T4019] loop1: detected capacity change from 0 to 512 [ 53.157116][ T4019] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.181487][ T4019] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 53.193676][ T4019] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 53.203500][ T4019] System zones: 0-2, 18-18, 34-34 [ 53.209875][ T4019] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.226507][ T4019] EXT4-fs (loop1): 1 truncate cleaned up [ 53.232993][ T4019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.247618][ T4019] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.197: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 53.268621][ T4019] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 53.278079][ T4019] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.197: Deleting old file: nlink 4, error=-117 [ 53.359699][ T4024] vlan2: entered allmulticast mode [ 53.366723][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.403768][ T4028] netlink: 'syz.1.200': attribute type 13 has an invalid length. [ 53.466175][ T4028] gretap0: refused to change device tx_queue_len [ 53.472733][ T4028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 53.524609][ T4024] infiniband syz!: set active [ 53.529421][ T4024] infiniband syz!: added team_slave_0 [ 53.582998][ T4024] RDS/IB: syz!: added [ 53.608369][ T4037] loop3: detected capacity change from 0 to 512 [ 53.625697][ T4024] smc: adding ib device syz! with port count 1 [ 53.631988][ T4024] smc: ib device syz! port 1 has pnetid [ 53.658194][ T4037] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.198: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 53.706181][ T4037] EXT4-fs error (device loop3): ext4_quota_enable:7104: comm syz.3.198: Bad quota inode: 3, type: 0 [ 53.738110][ T4037] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 53.756993][ T4037] EXT4-fs (loop3): mount failed [ 53.794410][ T4047] FAULT_INJECTION: forcing a failure. [ 53.794410][ T4047] name failslab, interval 1, probability 0, space 0, times 0 [ 53.807160][ T4047] CPU: 1 UID: 0 PID: 4047 Comm: syz.1.205 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 53.807185][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.807197][ T4047] Call Trace: [ 53.807203][ T4047] [ 53.807211][ T4047] dump_stack_lvl+0xf2/0x150 [ 53.807238][ T4047] dump_stack+0x15/0x1a [ 53.807284][ T4047] should_fail_ex+0x24a/0x260 [ 53.807383][ T4047] should_failslab+0x8f/0xb0 [ 53.807417][ T4047] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 53.807440][ T4047] ? sock_alloc_inode+0x34/0xa0 [ 53.807511][ T4047] sock_alloc_inode+0x34/0xa0 [ 53.807550][ T4047] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.807589][ T4047] alloc_inode+0x3c/0x160 [ 53.807667][ T4047] new_inode_pseudo+0x15/0x20 [ 53.807705][ T4047] __sock_create+0x12b/0x5a0 [ 53.807776][ T4047] __sys_socketpair+0x17c/0x430 [ 53.807802][ T4047] __x64_sys_socketpair+0x52/0x60 [ 53.807822][ T4047] x64_sys_call+0x1cad/0x2dc0 [ 53.807848][ T4047] do_syscall_64+0xc9/0x1c0 [ 53.807888][ T4047] ? clear_bhb_loop+0x55/0xb0 [ 53.807921][ T4047] ? clear_bhb_loop+0x55/0xb0 [ 53.807947][ T4047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.807974][ T4047] RIP: 0033:0x7fcfc7b8d169 [ 53.807992][ T4047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.808056][ T4047] RSP: 002b:00007fcfc61f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 53.808075][ T4047] RAX: ffffffffffffffda RBX: 00007fcfc7da5fa0 RCX: 00007fcfc7b8d169 [ 53.808087][ T4047] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 53.808098][ T4047] RBP: 00007fcfc61f1090 R08: 0000000000000000 R09: 0000000000000000 [ 53.808110][ T4047] R10: 00004000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 53.808121][ T4047] R13: 0000000000000000 R14: 00007fcfc7da5fa0 R15: 00007fff9be77778 [ 53.808150][ T4047] [ 53.808160][ T4047] socket: no more sockets [ 54.221684][ T4057] loop1: detected capacity change from 0 to 2048 [ 54.274713][ T4061] ieee802154 phy0 wpan0: encryption failed: -22 [ 54.426927][ T4057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.487535][ T4057] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.209: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.611801][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.848835][ T4067] loop1: detected capacity change from 0 to 512 [ 54.871803][ T4067] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.920889][ T4067] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 54.956347][ T4067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 54.964504][ T4067] System zones: 0-2, 18-18, 34-34 [ 54.977975][ T4067] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.010112][ T4067] EXT4-fs (loop1): 1 truncate cleaned up [ 55.026222][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.125190][ T4067] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.210: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 55.179282][ T4067] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 55.198734][ T4067] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.210: Deleting old file: nlink 4, error=-117 [ 55.278931][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.306509][ T4089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4089 comm=syz.1.219 [ 55.309084][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 55.309102][ T30] audit: type=1400 audit(1741830085.270:783): avc: denied { ioctl } for pid=4079 comm="syz.2.217" path="socket:[5947]" dev="sockfs" ino=5947 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.351498][ T4081] lo speed is unknown, defaulting to 1000 [ 55.363676][ T4081] lo speed is unknown, defaulting to 1000 [ 55.369808][ T4081] lo speed is unknown, defaulting to 1000 [ 55.408716][ T4081] infiniband syz2: set active [ 55.413522][ T4081] infiniband syz2: added lo [ 55.418655][ T1037] lo speed is unknown, defaulting to 1000 [ 55.425483][ T4085] xt_policy: output policy not valid in PREROUTING and INPUT [ 55.444575][ T4081] RDS/IB: syz2: added [ 55.453272][ T4081] smc: adding ib device syz2 with port count 1 [ 55.463303][ T4081] smc: ib device syz2 port 1 has pnetid [ 55.469326][ T1037] lo speed is unknown, defaulting to 1000 [ 55.473414][ T4096] random: crng reseeded on system resumption [ 55.478879][ T4081] lo speed is unknown, defaulting to 1000 [ 55.511555][ T4095] loop0: detected capacity change from 0 to 2048 [ 55.527325][ T4081] lo speed is unknown, defaulting to 1000 [ 55.563521][ T4081] lo speed is unknown, defaulting to 1000 [ 55.598022][ T4081] lo speed is unknown, defaulting to 1000 [ 55.636617][ T4081] lo speed is unknown, defaulting to 1000 [ 55.749585][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.766195][ T4095] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.220: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.810584][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.898724][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 55.906252][ T4109] loop0: detected capacity change from 0 to 512 [ 55.930994][ T4112] team0: Port device team_slave_0 removed [ 55.947061][ T4109] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.224: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 55.995520][ T4109] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.224: Bad quota inode: 3, type: 0 [ 56.008307][ T4109] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 56.065065][ T4109] EXT4-fs (loop0): mount failed [ 56.243705][ T4125] loop4: detected capacity change from 0 to 512 [ 56.265649][ T4125] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.301113][ T4125] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 56.326090][ T4125] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 56.358806][ T4125] System zones: 0-2, 18-18, 34-34 [ 56.386283][ T4125] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 56.453813][ T4125] EXT4-fs (loop4): 1 truncate cleaned up [ 56.465161][ T4125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.497197][ T4125] EXT4-fs error (device loop4): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.4.229: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 56.539291][ T4132] loop1: detected capacity change from 0 to 512 [ 56.545739][ T4125] EXT4-fs error (device loop4) in ext4_delete_entry:2758: Corrupt filesystem [ 56.561132][ T4132] EXT4-fs: Ignoring removed orlov option [ 56.571300][ T4125] EXT4-fs warning (device loop4): ext4_rename_delete:3742: inode #2: comm syz.4.229: Deleting old file: nlink 4, error=-117 [ 56.604200][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 56.605880][ T4132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.634733][ T4135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.650586][ T4132] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.660943][ T4132] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.664083][ T4137] loop2: detected capacity change from 0 to 2048 [ 56.687727][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.700286][ T4132] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.232: bg 0: block 248: padding at end of block bitmap is not set [ 56.723198][ T4141] loop4: detected capacity change from 0 to 512 [ 56.732734][ T4135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.746396][ T4141] journal_path: Non-blockdev passed as './file0' [ 56.747231][ T4132] Quota error (device loop1): write_blk: dquota write failed [ 56.752854][ T4141] EXT4-fs: error: could not find journal device path [ 56.770781][ T4132] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.782071][ T4132] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.232: Failed to acquire dquot type 1 [ 56.812095][ T4132] EXT4-fs (loop1): 1 truncate cleaned up [ 56.826891][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.842274][ T4132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.858596][ T4135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.877648][ T4137] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.234: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.917516][ T4146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4146 comm=syz.4.236 [ 56.963611][ T4135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.035799][ T30] audit: type=1400 audit(1741830086.990:784): avc: denied { ioctl } for pid=4150 comm="syz.3.239" path="socket:[6008]" dev="sockfs" ino=6008 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.092030][ T4154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.108105][ T4154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.117755][ T4156] random: crng reseeded on system resumption [ 57.130037][ T4154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.238'. [ 57.163310][ T4135] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.179066][ T4135] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.184048][ T30] audit: type=1400 audit(1741830087.050:785): avc: denied { connect } for pid=4153 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.206839][ T30] audit: type=1400 audit(1741830087.050:786): avc: denied { write } for pid=4153 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.226018][ T30] audit: type=1400 audit(1741830087.050:787): avc: denied { read write } for pid=4153 comm="syz.2.238" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.229469][ T4135] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.249413][ T30] audit: type=1400 audit(1741830087.050:788): avc: denied { open } for pid=4153 comm="syz.2.238" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.249445][ T30] audit: type=1400 audit(1741830087.050:789): avc: denied { ioctl } for pid=4153 comm="syz.2.238" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.262814][ T4135] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.280954][ T30] audit: type=1400 audit(1741830087.140:790): avc: denied { write } for pid=4152 comm="syz.3.240" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.281649][ T4155] loop3: detected capacity change from 0 to 512 [ 57.361691][ T4155] EXT4-fs (loop3): too many log groups per flexible block group [ 57.369503][ T4155] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 57.385814][ T4155] EXT4-fs (loop3): mount failed [ 57.819965][ T4175] netlink: 'syz.4.246': attribute type 3 has an invalid length. [ 57.901605][ T4184] loop2: detected capacity change from 0 to 2048 [ 57.919959][ T4184] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.250: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.044043][ T4196] veth0_vlan: entered allmulticast mode [ 58.129110][ T4199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 58.139858][ T4199] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.187547][ T4199] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.258216][ T4199] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.311737][ T4199] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.318085][ T4204] loop1: detected capacity change from 0 to 512 [ 58.366572][ T4204] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.257: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 58.388182][ T4204] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.257: Bad quota inode: 3, type: 0 [ 58.412538][ T4204] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.431390][ T4199] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.444443][ T4199] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.454424][ T4204] EXT4-fs (loop1): mount failed [ 58.482730][ T4215] macvlan1: entered promiscuous mode [ 58.502627][ T4215] ipvlan0: entered promiscuous mode [ 58.508810][ T4215] ipvlan0: left promiscuous mode [ 58.514193][ T4215] macvlan1: left promiscuous mode [ 58.527081][ T4199] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.539230][ T4199] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.601384][ T4219] FAULT_INJECTION: forcing a failure. [ 58.601384][ T4219] name failslab, interval 1, probability 0, space 0, times 0 [ 58.614296][ T4219] CPU: 1 UID: 0 PID: 4219 Comm: syz.1.261 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 58.614378][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.614392][ T4219] Call Trace: [ 58.614401][ T4219] [ 58.614411][ T4219] dump_stack_lvl+0xf2/0x150 [ 58.614525][ T4219] dump_stack+0x15/0x1a [ 58.614549][ T4219] should_fail_ex+0x24a/0x260 [ 58.614597][ T4219] should_failslab+0x8f/0xb0 [ 58.614635][ T4219] kmem_cache_alloc_node_noprof+0x59/0x320 [ 58.614667][ T4219] ? __alloc_skb+0x10b/0x310 [ 58.614696][ T4219] __alloc_skb+0x10b/0x310 [ 58.614732][ T4219] netlink_alloc_large_skb+0xad/0xe0 [ 58.614768][ T4219] netlink_sendmsg+0x3b4/0x6e0 [ 58.614810][ T4219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.614849][ T4219] __sock_sendmsg+0x140/0x180 [ 58.614901][ T4219] ____sys_sendmsg+0x326/0x4b0 [ 58.615093][ T4219] __sys_sendmsg+0x19d/0x230 [ 58.615152][ T4219] __x64_sys_sendmsg+0x46/0x50 [ 58.615223][ T4219] x64_sys_call+0x2734/0x2dc0 [ 58.615254][ T4219] do_syscall_64+0xc9/0x1c0 [ 58.615320][ T4219] ? clear_bhb_loop+0x55/0xb0 [ 58.615358][ T4219] ? clear_bhb_loop+0x55/0xb0 [ 58.615395][ T4219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.615502][ T4219] RIP: 0033:0x7fcfc7b8d169 [ 58.615521][ T4219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.615554][ T4219] RSP: 002b:00007fcfc61f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.615673][ T4219] RAX: ffffffffffffffda RBX: 00007fcfc7da5fa0 RCX: 00007fcfc7b8d169 [ 58.615688][ T4219] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000006 [ 58.615702][ T4219] RBP: 00007fcfc61f1090 R08: 0000000000000000 R09: 0000000000000000 [ 58.615716][ T4219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.615729][ T4219] R13: 0000000000000000 R14: 00007fcfc7da5fa0 R15: 00007fff9be77778 [ 58.615751][ T4219] [ 58.850431][ T4223] loop2: detected capacity change from 0 to 512 [ 58.861557][ T4223] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.871338][ T4223] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 58.885871][ T4223] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 58.896802][ T4223] System zones: 0-2, 18-18, 34-34 [ 58.960947][ T4223] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.982967][ T4231] loop1: detected capacity change from 0 to 512 [ 58.995106][ T4231] EXT4-fs: Ignoring removed orlov option [ 59.007765][ T4223] EXT4-fs (loop2): 1 truncate cleaned up [ 59.014168][ T4231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.036422][ T4221] loop3: detected capacity change from 0 to 512 [ 59.048717][ T4221] EXT4-fs: Ignoring removed orlov option [ 59.065730][ T4223] EXT4-fs error (device loop2): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.2.263: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 59.094048][ T4231] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.102548][ T4221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.114669][ T4223] EXT4-fs error (device loop2) in ext4_delete_entry:2758: Corrupt filesystem [ 59.159734][ T4231] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.167089][ T4231] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.266: bg 0: block 248: padding at end of block bitmap is not set [ 59.167701][ T4221] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.194439][ T4223] EXT4-fs warning (device loop2): ext4_rename_delete:3742: inode #2: comm syz.2.263: Deleting old file: nlink 4, error=-117 [ 59.194478][ T4231] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.266: Failed to acquire dquot type 1 [ 59.213726][ T4221] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.239230][ T4221] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.262: bg 0: block 248: padding at end of block bitmap is not set [ 59.258251][ T4221] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.262: Failed to acquire dquot type 1 [ 59.282499][ T4239] loop0: detected capacity change from 0 to 512 [ 59.295183][ T4221] EXT4-fs (loop3): 1 truncate cleaned up [ 59.380568][ T4239] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.493041][ T4231] EXT4-fs (loop1): 1 truncate cleaned up [ 60.264620][ T4221] syz.3.262 (4221) used greatest stack depth: 8936 bytes left [ 60.434501][ T4255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 60.474018][ T4257] macvlan1: entered promiscuous mode [ 60.518179][ T4257] ipvlan0: entered promiscuous mode [ 60.550091][ T4257] ipvlan0: left promiscuous mode [ 60.564908][ T4257] macvlan1: left promiscuous mode [ 60.784391][ T4274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4274 comm=syz.4.279 [ 60.873810][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 60.873825][ T30] audit: type=1326 audit(1741830090.830:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 60.905613][ T30] audit: type=1326 audit(1741830090.870:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 60.929442][ T30] audit: type=1326 audit(1741830090.870:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 60.934872][ T4280] random: crng reseeded on system resumption [ 60.953096][ T30] audit: type=1326 audit(1741830090.870:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 60.953170][ T30] audit: type=1326 audit(1741830090.870:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 61.007015][ T30] audit: type=1326 audit(1741830090.870:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 61.031466][ T30] audit: type=1326 audit(1741830090.870:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 61.054632][ T30] audit: type=1326 audit(1741830090.870:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 61.114470][ T30] audit: type=1326 audit(1741830090.870:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 61.137895][ T30] audit: type=1326 audit(1741830090.870:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd907b8d169 code=0x7ffc0000 [ 61.176314][ T4284] loop0: detected capacity change from 0 to 1024 [ 61.206030][ T4284] ext2: Unknown parameter 'euid>00000000000000000000' [ 61.268909][ T4284] loop0: detected capacity change from 0 to 2048 [ 61.291698][ T4294] macvlan1: entered promiscuous mode [ 61.295352][ T4296] loop2: detected capacity change from 0 to 512 [ 61.298299][ T4294] ipvlan0: entered promiscuous mode [ 61.311084][ T4294] ipvlan0: left promiscuous mode [ 61.321233][ T4294] macvlan1: left promiscuous mode [ 61.328042][ T4284] Alternate GPT is invalid, using primary GPT. [ 61.334508][ T4284] loop0: p1 p2 p3 [ 61.341728][ T4296] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.288: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 61.361763][ T4296] EXT4-fs error (device loop2): ext4_quota_enable:7104: comm syz.2.288: Bad quota inode: 3, type: 0 [ 61.384386][ T4296] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 61.463575][ T4296] EXT4-fs (loop2): mount failed [ 61.504877][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.291'. [ 61.580115][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 61.591476][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.601893][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 61.656540][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 61.662090][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 61.680183][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.847827][ T4332] loop2: detected capacity change from 0 to 512 [ 61.872564][ T4332] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.897993][ T4332] EXT4-fs (loop2): 1 truncate cleaned up [ 62.247679][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 62.261310][ T4351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.287320][ T4353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.306'. [ 62.361901][ T4351] loop3: detected capacity change from 0 to 1024 [ 62.390591][ T4351] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 62.413958][ T4351] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.426621][ T4351] EXT4-fs (loop3): invalid journal inode [ 62.432681][ T4351] EXT4-fs (loop3): can't get journal size [ 62.478393][ T4351] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.305: blocks 48-48 from inode overlap system zone [ 62.547107][ T4351] EXT4-fs (loop3): failed to initialize system zone (-117) [ 62.652043][ T4351] EXT4-fs (loop3): mount failed [ 62.914393][ T4400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4400 comm=syz.3.320 [ 63.003104][ T4412] loop2: detected capacity change from 0 to 512 [ 63.010497][ T4412] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.027335][ T4412] EXT4-fs (loop2): 1 truncate cleaned up [ 63.118045][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 63.168058][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 63.202885][ T4420] loop1: detected capacity change from 0 to 512 [ 63.210958][ T4425] Q6\bY4: renamed from lo (while UP) [ 63.225112][ T4423] loop4: detected capacity change from 0 to 512 [ 63.235708][ T4420] EXT4-fs: Ignoring removed orlov option [ 63.245299][ T4420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.257338][ T4423] EXT4-fs: Ignoring removed orlov option [ 63.266844][ T4423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.289883][ T4420] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.299423][ T4423] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.316194][ T4420] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.324485][ T4423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.347667][ T4420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.327: bg 0: block 248: padding at end of block bitmap is not set [ 63.373117][ T4423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.328: bg 0: block 248: padding at end of block bitmap is not set [ 63.390647][ T4423] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.328: Failed to acquire dquot type 1 [ 63.390792][ T4420] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.327: Failed to acquire dquot type 1 [ 63.412094][ T4420] EXT4-fs (loop1): 1 truncate cleaned up [ 63.422785][ T4423] EXT4-fs (loop4): 1 truncate cleaned up [ 63.544478][ T4437] loop1: detected capacity change from 0 to 2048 [ 63.570696][ T4437] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.334: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 63.811117][ T4455] Q6\bY4: renamed from lo [ 64.125364][ T4462] lo speed is unknown, defaulting to 1000 [ 64.309950][ T4474] loop1: detected capacity change from 0 to 512 [ 64.328374][ T4474] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.343743][ T4474] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 64.353012][ T4474] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0002] [ 64.362031][ T4474] System zones: 0-2, 18-18, 34-34 [ 64.368331][ T4474] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.392348][ T4474] EXT4-fs (loop1): 1 truncate cleaned up [ 64.526299][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 64.657156][ T4481] loop1: detected capacity change from 0 to 512 [ 64.665735][ T4481] EXT4-fs: Ignoring removed orlov option [ 64.672933][ T4481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.695949][ T4481] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.704170][ T4481] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.712220][ T4481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.349: bg 0: block 248: padding at end of block bitmap is not set [ 64.728044][ T4481] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.349: Failed to acquire dquot type 1 [ 64.748773][ T4481] EXT4-fs (loop1): 1 truncate cleaned up [ 64.785150][ T4484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4484 comm=syz.0.351 [ 64.886238][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 64.917786][ T4498] random: crng reseeded on system resumption [ 64.980823][ T4502] loop4: detected capacity change from 0 to 2048 [ 64.991799][ T4492] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.041921][ T4500] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.356: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 65.108753][ T4518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.361'. [ 65.117467][ T4520] loop4: detected capacity change from 0 to 512 [ 65.127570][ T4520] EXT4-fs: Ignoring removed orlov option [ 65.144800][ T4520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.158184][ T4522] loop3: detected capacity change from 0 to 512 [ 65.170446][ T4520] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.178864][ T4520] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.186901][ T4522] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.362: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 65.189551][ T4520] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.360: bg 0: block 248: padding at end of block bitmap is not set [ 65.220967][ T4520] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.360: Failed to acquire dquot type 1 [ 65.226401][ T4522] EXT4-fs error (device loop3): ext4_quota_enable:7104: comm syz.3.362: Bad quota inode: 3, type: 0 [ 65.232765][ T4520] EXT4-fs (loop4): 1 truncate cleaned up [ 65.250587][ T4522] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 65.301938][ T4522] EXT4-fs (loop3): mount failed [ 65.424478][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 65.446691][ T4537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.509798][ T4537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.547529][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 65.558359][ T4546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.588774][ T4537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.649246][ T4537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.724365][ T4551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 65.746813][ T4537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.781364][ T4555] loop3: detected capacity change from 0 to 512 [ 65.789097][ T4537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.805839][ T4555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.825459][ T4537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.843888][ T4555] EXT4-fs (loop3): 1 truncate cleaned up [ 65.847682][ T4537] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.926507][ T30] kauditd_printk_skb: 308 callbacks suppressed [ 65.926523][ T30] audit: type=1326 audit(1741830095.890:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 65.943032][ T4564] loop1: detected capacity change from 0 to 512 [ 65.965648][ T30] audit: type=1326 audit(1741830095.890:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 65.989151][ T30] audit: type=1326 audit(1741830095.890:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0eb87bad0 code=0x7ffc0000 [ 66.012594][ T30] audit: type=1326 audit(1741830095.890:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0eb87bad0 code=0x7ffc0000 [ 66.036082][ T30] audit: type=1326 audit(1741830095.890:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 66.060058][ T30] audit: type=1326 audit(1741830095.900:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 66.084428][ T30] audit: type=1326 audit(1741830095.900:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 66.108087][ T30] audit: type=1326 audit(1741830095.900:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 66.132088][ T30] audit: type=1326 audit(1741830095.900:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 66.155885][ T30] audit: type=1326 audit(1741830095.900:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0eb87d169 code=0x7ffc0000 [ 66.185169][ T4564] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.376: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 66.214424][ T4574] Q6\bY4: renamed from lo (while UP) [ 66.228364][ T4564] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.376: Bad quota inode: 3, type: 0 [ 66.240165][ T4564] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 66.286368][ T4564] EXT4-fs (loop1): mount failed [ 66.351301][ T4579] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4579 comm=syz.2.382 [ 66.485154][ T4591] random: crng reseeded on system resumption [ 66.687104][ T4604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.758293][ T4604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.847897][ T4604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.919001][ T4604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.993981][ T4604] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.008233][ T4604] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.022508][ T4604] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.038058][ T4604] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.058912][ T4615] loop1: detected capacity change from 0 to 512 [ 67.108233][ T4615] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.396: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 67.203397][ T4615] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.396: Bad quota inode: 3, type: 0 [ 67.225525][ T4615] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 67.256155][ T4615] EXT4-fs (loop1): mount failed [ 67.312146][ T4630] loop0: detected capacity change from 0 to 512 [ 67.319766][ T4630] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.340266][ T4630] EXT4-fs (loop0): 1 truncate cleaned up [ 67.424047][ T4642] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4642 comm=syz.4.407 [ 67.468262][ T4646] __nla_validate_parse: 5 callbacks suppressed [ 67.468282][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 67.618977][ T4649] random: crng reseeded on system resumption [ 67.700663][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 67.712382][ T4651] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.857979][ T4651] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.983905][ T4663] loop2: detected capacity change from 0 to 512 [ 68.027994][ T4651] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.058683][ T4663] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.128339][ T4651] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.836754][ T4670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4670 comm=syz.0.414 [ 68.864669][ T4668] loop4: detected capacity change from 0 to 512 [ 68.874739][ T4671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 69.016212][ T4668] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.415: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 69.047262][ T4677] xt_connbytes: Forcing CT accounting to be enabled [ 69.054051][ T4677] Cannot find add_set index 0 as target [ 69.113925][ T4678] random: crng reseeded on system resumption [ 69.133960][ T4668] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.415: Bad quota inode: 3, type: 0 [ 69.252806][ T4668] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.357384][ T4668] EXT4-fs (loop4): mount failed [ 69.471713][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 69.503347][ T4693] loop4: detected capacity change from 0 to 1024 [ 69.531131][ T4693] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.553414][ T4693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.568710][ T4693] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 69.581206][ T4693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.581206][ T4693] [ 69.591003][ T4693] EXT4-fs (loop4): Total free blocks count 0 [ 69.597317][ T4693] EXT4-fs (loop4): Free/Dirty block details [ 69.603539][ T4693] EXT4-fs (loop4): free_blocks=4293918720 [ 69.609348][ T4693] EXT4-fs (loop4): dirty_blocks=16 [ 69.614590][ T4693] EXT4-fs (loop4): Block reservation details [ 69.620894][ T4693] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 69.649136][ T4693] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.677713][ T4708] loop1: detected capacity change from 0 to 512 [ 69.692639][ T4708] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.719700][ T4709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 69.729739][ T4708] EXT4-fs (loop1): 1 truncate cleaned up [ 69.818844][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 70.239457][ T4725] lo speed is unknown, defaulting to 1000 [ 70.402686][ T4725] loop0: detected capacity change from 0 to 512 [ 70.536675][ T4725] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.548500][ T4725] EXT4-fs (loop0): 1 truncate cleaned up [ 70.554589][ T4725] EXT4-fs mount: 39 callbacks suppressed [ 70.554659][ T4725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.579597][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.584470][ T4724] loop4: detected capacity change from 0 to 512 [ 70.604098][ T4731] macvlan1: entered promiscuous mode [ 70.612991][ T4731] ipvlan0: entered promiscuous mode [ 70.650382][ T4731] ipvlan0: left promiscuous mode [ 70.672366][ T4731] macvlan1: left promiscuous mode [ 70.681450][ T4724] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.432: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 70.847065][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.860109][ T4724] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.432: Bad quota inode: 3, type: 0 [ 70.897514][ T4747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'. [ 70.907730][ T4724] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 70.926717][ T4724] EXT4-fs (loop4): mount failed [ 70.960874][ T4753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4753 comm=syz.1.439 [ 70.997797][ T4755] FAULT_INJECTION: forcing a failure. [ 70.997797][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.011028][ T4755] CPU: 1 UID: 0 PID: 4755 Comm: syz.2.441 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 71.011053][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.011132][ T4755] Call Trace: [ 71.011138][ T4755] [ 71.011146][ T4755] dump_stack_lvl+0xf2/0x150 [ 71.011176][ T4755] dump_stack+0x15/0x1a [ 71.011197][ T4755] should_fail_ex+0x24a/0x260 [ 71.011229][ T4755] should_fail+0xb/0x10 [ 71.011320][ T4755] should_fail_usercopy+0x1a/0x20 [ 71.011352][ T4755] _copy_to_user+0x20/0xa0 [ 71.011419][ T4755] simple_read_from_buffer+0xa0/0x110 [ 71.011508][ T4755] proc_fail_nth_read+0xf9/0x140 [ 71.011540][ T4755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.011569][ T4755] vfs_read+0x19b/0x6f0 [ 71.011595][ T4755] ? __rcu_read_unlock+0x4e/0x70 [ 71.011624][ T4755] ? __fget_files+0x17c/0x1c0 [ 71.011734][ T4755] ksys_read+0xe8/0x1b0 [ 71.011834][ T4755] __x64_sys_read+0x42/0x50 [ 71.011861][ T4755] x64_sys_call+0x2874/0x2dc0 [ 71.011911][ T4755] do_syscall_64+0xc9/0x1c0 [ 71.011945][ T4755] ? clear_bhb_loop+0x55/0xb0 [ 71.011973][ T4755] ? clear_bhb_loop+0x55/0xb0 [ 71.012036][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.012130][ T4755] RIP: 0033:0x7f88e040bb7c [ 71.012145][ T4755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.012163][ T4755] RSP: 002b:00007f88dea77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.012181][ T4755] RAX: ffffffffffffffda RBX: 00007f88e0625fa0 RCX: 00007f88e040bb7c [ 71.012193][ T4755] RDX: 000000000000000f RSI: 00007f88dea770a0 RDI: 0000000000000004 [ 71.012204][ T4755] RBP: 00007f88dea77090 R08: 0000000000000000 R09: 0000000000000000 [ 71.012215][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.012227][ T4755] R13: 0000000000000000 R14: 00007f88e0625fa0 R15: 00007ffe46fe3ed8 [ 71.012244][ T4755] [ 71.229304][ T4751] loop0: detected capacity change from 0 to 2048 [ 71.245324][ T4751] EXT4-fs: Ignoring removed bh option [ 71.268055][ T4761] random: crng reseeded on system resumption [ 71.367008][ T4751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.418322][ T4751] IPv4: Oversized IP packet from 127.202.26.0 [ 71.425273][ T4751] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm +}[@: corrupted in-inode xattr: e_name out of bounds [ 71.441101][ T4751] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm +}[@: corrupted in-inode xattr: e_name out of bounds [ 71.485330][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.969985][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 71.970003][ T30] audit: type=1326 audit(1741830101.930:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 71.973380][ T4781] loop2: detected capacity change from 0 to 512 [ 71.978964][ T30] audit: type=1326 audit(1741830101.930:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88e040d169 code=0x7ffc0000 [ 72.030080][ T30] audit: type=1326 audit(1741830101.930:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88e040d1a3 code=0x7ffc0000 [ 72.031985][ T4781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.054715][ T30] audit: type=1326 audit(1741830101.930:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88e040bc1f code=0x7ffc0000 [ 72.089234][ T30] audit: type=1326 audit(1741830101.930:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f88e040d1f7 code=0x7ffc0000 [ 72.112884][ T30] audit: type=1326 audit(1741830101.930:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88e040bad0 code=0x7ffc0000 [ 72.136308][ T30] audit: type=1326 audit(1741830101.930:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88e040cd6b code=0x7ffc0000 [ 72.159910][ T30] audit: type=1326 audit(1741830101.970:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f88e040bdca code=0x7ffc0000 [ 72.181029][ T4781] EXT4-fs (loop2): 1 truncate cleaned up [ 72.183135][ T30] audit: type=1326 audit(1741830101.970:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f88e040bdca code=0x7ffc0000 [ 72.190579][ T4781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.212065][ T30] audit: type=1326 audit(1741830101.990:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f88e040b9d7 code=0x7ffc0000 [ 72.274603][ T4787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 72.390711][ T4792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.452'. [ 72.498958][ T4795] loop4: detected capacity change from 0 to 512 [ 72.537991][ T4795] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.453: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 72.578670][ T4795] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.453: Bad quota inode: 3, type: 0 [ 72.612820][ T4795] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 72.630509][ T4795] EXT4-fs (loop4): mount failed [ 72.701046][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.825349][ T4807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4807 comm=syz.4.458 [ 72.852207][ T4808] loop2: detected capacity change from 0 to 512 [ 72.869956][ T4808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.903229][ T4808] EXT4-fs (loop2): 1 truncate cleaned up [ 72.909484][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.997105][ T4815] random: crng reseeded on system resumption [ 73.274417][ T4651] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299146][ T4651] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.342665][ T4651] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364802][ T4651] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.395457][ T4826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 73.542662][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.550109][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.565320][ T4836] loop0: detected capacity change from 0 to 512 [ 73.585457][ T4834] loop3: detected capacity change from 0 to 2048 [ 73.609825][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.662077][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.695537][ T4836] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.466: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 73.756964][ T4834] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.465: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 73.779560][ T4836] EXT4-fs error (device loop0): ext4_quota_enable:7104: comm syz.0.466: Bad quota inode: 3, type: 0 [ 73.813534][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.822999][ T4836] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 73.862056][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.869678][ T4836] EXT4-fs (loop0): mount failed [ 73.877457][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.938367][ T4830] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.947490][ T4830] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.956494][ T4830] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.965433][ T4830] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.242800][ T4876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 74.347571][ T4867] loop0: detected capacity change from 0 to 512 [ 74.365262][ T4867] EXT4-fs: Ignoring removed orlov option [ 74.369411][ T4885] loop2: detected capacity change from 0 to 1024 [ 74.380851][ T4867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.412843][ T4887] loop1: detected capacity change from 0 to 512 [ 74.419367][ T4867] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.424167][ T4887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.428807][ T4867] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.449723][ T4885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.475264][ T4887] EXT4-fs (loop1): 1 truncate cleaned up [ 74.475880][ T4867] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.470: bg 0: block 248: padding at end of block bitmap is not set [ 74.487253][ T4887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.521337][ T4867] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.470: Failed to acquire dquot type 1 [ 74.534809][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.588045][ T4867] EXT4-fs (loop0): 1 truncate cleaned up [ 74.610341][ T4898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4898 comm=syz.2.479 [ 74.707562][ T4867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.755946][ T4906] random: crng reseeded on system resumption [ 74.756990][ T4904] loop4: detected capacity change from 0 to 512 [ 74.853056][ T4904] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.481: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 74.876428][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.890937][ T4904] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.481: Bad quota inode: 3, type: 0 [ 74.922641][ T4904] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 74.989751][ T4904] EXT4-fs (loop4): mount failed [ 75.157517][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.287478][ T4933] sd 0:0:1:0: device reset [ 75.348894][ T4939] macvlan1: entered promiscuous mode [ 75.365085][ T4939] ipvlan0: entered promiscuous mode [ 75.383354][ T4939] ipvlan0: left promiscuous mode [ 75.390099][ T4939] macvlan1: left promiscuous mode [ 75.468093][ T4930] lo speed is unknown, defaulting to 1000 [ 75.631103][ T4926] infiniband syz0: set active [ 75.636132][ T4926] infiniband syz0: added bond0 [ 75.723614][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 75.736505][ T4947] loop2: detected capacity change from 0 to 512 [ 75.743393][ T4947] EXT4-fs: Ignoring removed orlov option [ 75.757323][ T4926] RDS/IB: syz0: added [ 75.762748][ T4947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.780654][ T4926] smc: adding ib device syz0 with port count 1 [ 75.791766][ T4947] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 75.812968][ T4926] smc: ib device syz0 port 1 has pnetid [ 75.819448][ T4947] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.835347][ T4947] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.494: bg 0: block 248: padding at end of block bitmap is not set [ 75.870046][ T4947] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.494: Failed to acquire dquot type 1 [ 75.933888][ T4947] EXT4-fs (loop2): 1 truncate cleaned up [ 75.941685][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.038691][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.100357][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 76.150388][ T4955] loop3: detected capacity change from 0 to 512 [ 76.207871][ T4955] EXT4-fs: Ignoring removed orlov option [ 76.216291][ T4955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.283111][ T4955] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.309826][ T4955] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.320164][ T4963] loop2: detected capacity change from 0 to 512 [ 76.328879][ T4968] loop4: detected capacity change from 0 to 512 [ 76.340332][ T4955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.496: bg 0: block 248: padding at end of block bitmap is not set [ 76.360648][ T4963] EXT4-fs: Ignoring removed orlov option [ 76.370851][ T4955] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.496: Failed to acquire dquot type 1 [ 76.386976][ T4963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.392638][ T4968] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.409905][ T4968] EXT4-fs (loop4): 1 truncate cleaned up [ 76.409920][ T4955] EXT4-fs (loop3): 1 truncate cleaned up [ 76.423061][ T4968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.435547][ T4963] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.466391][ T4955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.468969][ T4963] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.473537][ T4963] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.500: bg 0: block 248: padding at end of block bitmap is not set [ 76.476678][ T4963] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.500: Failed to acquire dquot type 1 [ 76.527917][ T4963] EXT4-fs (loop2): 1 truncate cleaned up [ 76.539087][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.539889][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.574318][ T4978] netlink: 'syz.3.503': attribute type 3 has an invalid length. [ 76.582894][ T4978] netlink: 'syz.3.503': attribute type 3 has an invalid length. [ 76.592618][ T4978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 76.616009][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.021728][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.022652][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 77.022668][ T30] audit: type=1400 audit(1741830106.980:1565): avc: denied { map } for pid=4991 comm="syz.0.507" path="socket:[10377]" dev="sockfs" ino=10377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.060406][ T30] audit: type=1400 audit(1741830106.980:1566): avc: denied { read accept } for pid=4991 comm="syz.0.507" path="socket:[10377]" dev="sockfs" ino=10377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.085214][ T30] audit: type=1400 audit(1741830107.000:1567): avc: denied { getopt } for pid=4991 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.105049][ T30] audit: type=1400 audit(1741830107.030:1568): avc: denied { read } for pid=4991 comm="syz.0.507" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.228485][ T5001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5001 comm=syz.0.510 [ 77.362805][ T5001] random: crng reseeded on system resumption [ 77.374371][ T30] audit: type=1326 audit(1741830107.330:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b8d169 code=0x7ffc0000 [ 77.402979][ T5007] loop1: detected capacity change from 0 to 512 [ 77.416635][ T30] audit: type=1326 audit(1741830107.370:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfc7b8d169 code=0x7ffc0000 [ 77.440619][ T30] audit: type=1326 audit(1741830107.370:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcfc7b8d1a3 code=0x7ffc0000 [ 77.464397][ T30] audit: type=1326 audit(1741830107.370:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfc7b8bc1f code=0x7ffc0000 [ 77.487653][ T30] audit: type=1326 audit(1741830107.370:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcfc7b8d1f7 code=0x7ffc0000 [ 77.511448][ T30] audit: type=1326 audit(1741830107.370:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfc7b8bad0 code=0x7ffc0000 [ 77.536603][ T5007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.565240][ T5007] EXT4-fs (loop1): 1 truncate cleaned up [ 77.589195][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.727733][ T5019] loop3: detected capacity change from 0 to 2048 [ 77.740613][ T5019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.772856][ T3706] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.789490][ T3706] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 77.802026][ T3706] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.802026][ T3706] [ 77.802658][ T5013] loop2: detected capacity change from 0 to 1024 [ 77.811804][ T3706] EXT4-fs (loop3): Total free blocks count 0 [ 77.824128][ T3706] EXT4-fs (loop3): Free/Dirty block details [ 77.826528][ T5013] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.830167][ T3706] EXT4-fs (loop3): free_blocks=2415919104 [ 77.846669][ T3706] EXT4-fs (loop3): dirty_blocks=16 [ 77.851881][ T3706] EXT4-fs (loop3): Block reservation details [ 77.858097][ T3706] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 77.858784][ T5013] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.513: Invalid block bitmap block 0 in block_group 0 [ 77.865058][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.879386][ T5013] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.513: Failed to acquire dquot type 0 [ 77.898280][ T5013] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.513: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.911914][ T5013] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.513: Invalid inode bitmap blk 0 in block_group 0 [ 77.928219][ T3706] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 77.930439][ T5013] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 77.950300][ T5013] EXT4-fs (loop2): 1 orphan inode deleted [ 77.956649][ T5013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.989595][ T5013] 9pnet_fd: Insufficient options for proto=fd [ 78.051180][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.117149][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 78.128075][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.143475][ T5030] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5030 comm=syz.2.518 [ 78.143568][ T5027] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.199882][ T5029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5029 comm=syz.2.518 [ 78.214116][ T5040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 78.265042][ T5042] loop3: detected capacity change from 0 to 512 [ 78.275443][ T5027] loop4: detected capacity change from 0 to 1024 [ 78.314134][ T5027] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 78.327026][ T5042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.353740][ T5027] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.364312][ T5042] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.411961][ T5027] EXT4-fs (loop4): invalid journal inode [ 78.496719][ T5058] loop2: detected capacity change from 0 to 512 [ 78.506711][ T5027] EXT4-fs (loop4): can't get journal size [ 78.543008][ T5027] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.519: blocks 48-48 from inode overlap system zone [ 78.584527][ T5058] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.526: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 78.595406][ T5027] EXT4-fs (loop4): failed to initialize system zone (-117) [ 78.604077][ T5058] EXT4-fs error (device loop2): ext4_quota_enable:7104: comm syz.2.526: Bad quota inode: 3, type: 0 [ 78.622682][ T5058] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 78.638679][ T5058] EXT4-fs (loop2): mount failed [ 78.656754][ T5027] EXT4-fs (loop4): mount failed [ 78.708941][ T3306] ================================================================== [ 78.717073][ T3306] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 78.724675][ T3306] [ 78.727022][ T3306] read-write to 0xffff88811826e008 of 8 bytes by task 5059 on cpu 1: [ 78.735113][ T3306] shmem_recalc_inode+0x36/0x1b0 [ 78.740091][ T3306] shmem_get_folio_gfp+0x7ce/0xd90 [ 78.745244][ T3306] shmem_write_begin+0xa2/0x180 [ 78.750181][ T3306] generic_perform_write+0x1a8/0x4a0 [ 78.755508][ T3306] shmem_file_write_iter+0xc2/0xe0 [ 78.760650][ T3306] __kernel_write_iter+0x247/0x4c0 [ 78.765895][ T3306] dump_user_range+0x3ac/0x550 [ 78.770707][ T3306] elf_core_dump+0x1d17/0x1ea0 [ 78.775518][ T3306] do_coredump+0x17fe/0x1f40 [ 78.780149][ T3306] get_signal+0xd4f/0x1000 [ 78.784638][ T3306] arch_do_signal_or_restart+0x95/0x4b0 [ 78.790293][ T3306] irqentry_exit_to_user_mode+0xa7/0x120 [ 78.795966][ T3306] irqentry_exit+0x12/0x50 [ 78.800409][ T3306] asm_exc_page_fault+0x26/0x30 [ 78.805284][ T3306] [ 78.807613][ T3306] read to 0xffff88811826e008 of 8 bytes by task 3306 on cpu 0: [ 78.815203][ T3306] shmem_getattr+0x42/0x200 [ 78.819823][ T3306] vfs_getattr+0x172/0x1b0 [ 78.824354][ T3306] vfs_statx+0x12d/0x320 [ 78.828610][ T3306] vfs_fstatat+0xe4/0x130 [ 78.832988][ T3306] __se_sys_newfstatat+0x58/0x260 [ 78.838126][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 78.843251][ T3306] x64_sys_call+0x236d/0x2dc0 [ 78.847957][ T3306] do_syscall_64+0xc9/0x1c0 [ 78.852589][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.858687][ T3306] [ 78.861014][ T3306] value changed: 0x0000000000000993 -> 0x0000000000000994 [ 78.868250][ T3306] [ 78.870577][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 78.876902][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 78.887786][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.898911][ T3306] ================================================================== [ 79.067782][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 79.151965][ T5064] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.293664][ T5064] loop2: detected capacity change from 0 to 1024 [ 79.330612][ T5064] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 79.361044][ T5064] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.427608][ T5064] EXT4-fs (loop2): invalid journal inode [ 79.433349][ T5064] EXT4-fs (loop2): can't get journal size [ 79.468171][ T5064] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.527: blocks 48-48 from inode overlap system zone [ 79.483474][ T5064] EXT4-fs (loop2): failed to initialize system zone (-117) [ 79.498481][ T5064] EXT4-fs (loop2): mount failed [ 80.640908][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.