last executing test programs: 9.844047131s ago: executing program 2 (id=5962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) 9.532883462s ago: executing program 2 (id=5965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x200000d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ff2fd7282c52f0", 0x7}, {&(0x7f0000001540)="c557bfc8762bedbd425a1c4f9b6124a00e6439fb77769ce1a3e866fde50705e0efbc3147628f65d3045b39b937283face39cc47107af6202e57961803e0faed04825c606d2fd445a185de5ba274899bb6b46f8079313619ce7fc2fb7a1c97eb8ce96c284bdc498e0ddfe66a41b449ee1ae405a173f0e4828e3228ddec73421fbd73fc80d40009f2c94e93e35f45b04913ac0c6840c66f204c3a8", 0x9a}], 0x2}, 0x810) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bond\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00\x00', @ANYRESHEX, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="ad5e1ddbbd2b"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r7 = socket(0x200000000000011, 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESHEX=r3], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x800000000006}, 0x18) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x8, r9) wait4(r9, 0x0, 0x8, 0x0) setpriority(0x1, r9, 0xc3b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000daed4b0000850000000000000000000002000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r10}, 0x18) getgroups(0x7, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 8.619708954s ago: executing program 2 (id=5969): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = msgget(0x0, 0x11d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000006329c69b513f427591fdc5e1cd5f9a920e87e6a7984e5ef86817a92fc7e7593d2aae0743d4755a63b284814ab32556c2d2d30c44641dfe37264961ddd3202ca830ac77f867b801ea49479da6adab177a07fd2e84cdb9a72ce70edfd5a7b6f33013b21d390ec73c97800"/127], 0x7f, 0x800) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000020004000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0x0, 0x1e) 7.794435337s ago: executing program 2 (id=5975): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f00000006c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000006140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x9, 0x6, {{0x2d, 0x4, 0x0, 0x1c, 0xb4, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @multicast1, {[@generic={0x83, 0x9, "8e40677594166f"}, @end, @cipso={0x86, 0x9, 0x3, [{0x1, 0x3, '>'}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x2, [0x3, 0xdd86, 0x5, 0x2, 0x9, 0x3, 0x3]}, @ra={0x94, 0x4}, @cipso={0x86, 0x63, 0x0, [{0x6, 0xd, "41be68ce56763bc2623ada"}, {0x5, 0x9, "e2ae48fdfdbf5b"}, {0x2, 0xf, "634b978616a94fbe5d1a276374"}, {0x2, 0x7, "6e764d1672"}, {0x7, 0xe, "64200ac3c3b9caff3431f2fa"}, {0x0, 0x4, "77ed"}, {0x1, 0xf, "a324ec03c9ef3a89c9a21facc6"}, {0x5, 0x10, "ac605a51f2056755634f037a42d5"}]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000780)=@RTM_DELMDB={0x0, 0x55, 0x200, 0x70bd2a, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x0, 0x1, {r8, 0x1, 0x3, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcdb3}}}, @MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r10, 0x1, 0x2, 0x4, {@ip4=@private=0xa010102, 0x8edd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x1, 0x2, 0x0, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r11, 0x1, 0x0, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1800}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r12, 0x1, 0x2, 0x0, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r12, 0x0, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 7.535724243s ago: executing program 2 (id=5977): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r3, 0x308000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() socket$unix(0x1, 0xed80eba084070568, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='cachefiles_coherency\x00', r8}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0100001000130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000089000/0x4000)=nil, &(0x7f0000342000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f000086f000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006cb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000515000/0x1000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000180)="84572f64452c51fba194631ca0d96eb9da67324adc79673ddcdc0585fcbc864350d24aeb124faabe5761841124727c0216d3cfcc4985a479e5a2", 0x3a}, 0x68) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x2000000007, 0x0, 0x7, 0x6, 0x400008, 0x100, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r0, 0x3) 3.032123346s ago: executing program 4 (id=6006): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000600)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@noinit_itable}, {@discard}, {@minixdf}, {@nolazytime}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1ff}}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}]}, 0x5, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lgetxattr(0x0, &(0x7f0000000800)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYRESDEC, @ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x8}}}}}}, 0x0) 2.964523212s ago: executing program 3 (id=6007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x800}, r5, 0x1}}, 0x48) io_uring_enter(r1, 0x29ab, 0xd480, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000010c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e3, &(0x7f0000001340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x149141, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000580)={{0x2, 0xffff, @private=0xa010101}, {0x6, @multicast}, 0x68, {0x2, 0x0, @broadcast}}) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e24, @multicast2}}) sendfile(r7, r6, 0x0, 0x3ffff) 2.607903058s ago: executing program 4 (id=6009): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f00000006c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r4], 0x7c}}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000006140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x9, 0x6, {{0x2d, 0x4, 0x0, 0x1c, 0xb4, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @multicast1, {[@generic={0x83, 0x9, "8e40677594166f"}, @end, @cipso={0x86, 0x9, 0x3, [{0x1, 0x3, '>'}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x2, [0x3, 0xdd86, 0x5, 0x2, 0x9, 0x3, 0x3]}, @ra={0x94, 0x4}, @cipso={0x86, 0x63, 0x0, [{0x6, 0xd, "41be68ce56763bc2623ada"}, {0x5, 0x9, "e2ae48fdfdbf5b"}, {0x2, 0xf, "634b978616a94fbe5d1a276374"}, {0x2, 0x7, "6e764d1672"}, {0x7, 0xe, "64200ac3c3b9caff3431f2fa"}, {0x0, 0x4, "77ed"}, {0x1, 0xf, "a324ec03c9ef3a89c9a21facc6"}, {0x5, 0x10, "ac605a51f2056755634f037a42d5"}]}]}}}}}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000780)=@RTM_DELMDB={0x0, 0x55, 0x200, 0x70bd2a, 0x25dfdbfe, {0x7, r6}, [@MDBA_SET_ENTRY={0x0, 0x1, {r9, 0x1, 0x3, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcdb3}}}, @MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r11, 0x1, 0x2, 0x4, {@ip4=@private=0xa010102, 0x8edd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x1, 0x2, 0x0, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r12, 0x1, 0x0, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1800}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r13, 0x1, 0x2, 0x0, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r13, 0x0, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 2.182206581s ago: executing program 4 (id=6010): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000600)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@noinit_itable}, {@discard}, {@minixdf}, {@nolazytime}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1ff}}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}]}, 0x5, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000400)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lgetxattr(0x0, &(0x7f0000000800)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000100)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x8, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de477f00f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2.123992437s ago: executing program 3 (id=6011): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getaddr={0x18, 0x16, 0xa99bee2eb6d2d7db, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x72, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2b1}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}}, @in={0x2, 0x4e20, @empty}], 0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f00000000c0)="d0b8e2cb792dace443aff841a407397b82557ee793855c625f0b1956c73bce65bcb1948fef7fe6401ada7d174b1cc7fc6349fdfab95b59cc24826c689d0d09ffa0614f72e7fb2db4a4d7f1f60f2e09fa15976750009eda03fba83c3c8c4f189466d3fa7e381ece20100b764c", &(0x7f00000004c0)=""/195, &(0x7f00000002c0)="213ff8f985cd78f47e8a8d152a3975b6e6396d0bacfb79e73a30b6e6f9c64aabd7f847e636e7bdb39dec7e65ec96f223c1187e780bcf9a2b95ca900fc53beea0d47e90311aaec77ec8cb526ce21a4ac417833b30f5", &(0x7f0000000040)="393984992e963dc4bda6a15fadbb42edab62a5", 0x1, r0}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x53, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9}, 0x18) 1.929214447s ago: executing program 4 (id=6013): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000008c0)={[{@oldalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@noquota}, {@bh}, {@mb_optimize_scan}]}, 0x1, 0x57d, &(0x7f0000000fc0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0xdd, 0x7, 0xc, 0x100, 0xfa, "55a73c9317a68935ac153159f2cf311c44f471", 0x9, 0x43d8}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000004000380f22f36b1fcf7e893ed9063f30ff6d94e293bc58f8e982bc5281f75c2aea071743327caf1efc1fb7a4dd987827806e79c70a570762e6bb1ad6da7512b4793b4285372dbb0527ec71c961b6846aabee379662e3d91f79c0090c3dfd4c33e1546a5f70d2c9bff303ba8a943aac7e9"], 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) prctl$PR_GET_FPEMU(0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.891131601s ago: executing program 3 (id=6014): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) io_setup(0xbf, &(0x7f0000000100)) 1.778441792s ago: executing program 3 (id=6016): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 1.415966658s ago: executing program 4 (id=6019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000010c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e3, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x149141, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1.343802266s ago: executing program 3 (id=6021): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000008c0)={[{@oldalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@noquota}, {@bh}, {@mb_optimize_scan}]}, 0x1, 0x57d, &(0x7f0000000fc0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000004000380f22f36b1fcf7e893ed9063f30ff6d94e293bc58f8e982bc5281f75c2aea071743327caf1efc1fb7a4dd987827806e79c70a570762e6bb1ad6da7512b4793b4285372dbb0527ec71c961b6846aabee379662e3d91f79c0090c3dfd4c33e1546a5f70d2c9bff303ba8a943aac7e9"], 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) 980.497432ms ago: executing program 0 (id=6023): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x8004b706, 0x0) syz_socket_connect_nvme_tcp() set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a010400000000000000000a0000090900020073797a320000000014000480800a00010072656469720000000900010073797a3100000000140000b96550929ac0cd389bbf1aecf46d1b7b72476603"], 0x68}}, 0x24000840) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req3={0x7644, 0xffff0000, 0x2, 0x9, 0x3ff, 0x8000, 0x5b}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$kcm(0x29, 0x5, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000100)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 900.44086ms ago: executing program 1 (id=6024): lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 852.749385ms ago: executing program 0 (id=6025): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) io_setup(0xbf, &(0x7f0000000100)) 851.725585ms ago: executing program 1 (id=6026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000003800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)='=', 0x1}, {0x0}], 0x2}}], 0x1, 0x10014) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000003060103007cc60000000000010000080900020073797a3200000000"], 0x20}}, 0x24004015) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0xe]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000b00)={0xc, 0x8000, 0x0, 'queue1\x00', 0x7fff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x650, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x614, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_ACT={0x608, 0x7, [@m_skbedit={0x100, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xb9, 0x6, "ae7618fac8bef194e7d52d5104403c4e5d31577fc03f50185949080aaa1dc98f84f317f7940367cd55990b3c58f90b82c31d145e7c1bca149bce90dd0f3f5c6da78194b3ebd9a324aa39d2f81d442d6ec9d850f09c5906450150aee2722d5a7b50ec68bc0ace566e23da3bfefd52596e1fb6997677e38b9afc641d9cecc55b09059dcc97d8b8617cf00a5d61b0a8eedd40e119683b156242d9f8ade7de54542e11d4a49c4fd3aab3aaf9079d65ea1a3e807d47a242"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x504, 0xb, 0x0, 0x0, {{0xb}, {0x440, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x27}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x99}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0x6, 0x9, 0xffffffff, 0xa, 0x1, 0x6, 0xc1f7, 0x2, 0x7fffffff, 0x10000009, 0x100, 0x8, 0x92, 0x8b, 0xe, 0xca, 0x1, 0xc, 0x9, 0x23, 0xfff, 0xfa38, 0x7, 0x5, 0x5, 0x7f, 0xf3, 0xfc, 0x8, 0x9, 0x4, 0x10001, 0x2, 0x7, 0x8, 0x14000000, 0x3, 0xd, 0xae, 0x0, 0x6, 0x5, 0x7, 0xffffffff, 0x58, 0x0, 0x4, 0x5, 0x0, 0x9, 0x5, 0x3, 0x63c1e834, 0xff, 0x3, 0x3, 0x7e, 0x8, 0xf7, 0x2, 0xd, 0x400, 0xffffff7f, 0x8, 0x9b5f, 0x4, 0x2, 0x80, 0x8001, 0x2, 0x6, 0x3, 0x5, 0xffff, 0x101, 0x6, 0x3, 0x52, 0xfffff001, 0xe, 0x6, 0x9, 0x41, 0x7, 0x8a, 0x6, 0x8, 0x0, 0x1000, 0x41, 0x0, 0x7, 0x5, 0x3, 0x100, 0x7ff, 0x100, 0x1, 0x3, 0x8, 0x0, 0x6, 0x4, 0x1, 0x9, 0x7, 0x3, 0x2, 0x1, 0x6, 0x100, 0x10, 0x4a85edd5, 0x64, 0x1, 0x1, 0x5, 0x1, 0x1, 0x5, 0x2, 0x800, 0x9, 0xfc2, 0x2, 0x8, 0x2, 0x5, 0x9, 0x9000, 0x6, 0x3622, 0x512, 0x81, 0x8, 0xbd, 0x1, 0xc, 0xd, 0xfffffffb, 0x400, 0x3, 0x4500005d, 0x9, 0x9, 0x5, 0x1c600000, 0xfff, 0x5, 0x2, 0x8, 0x4f, 0x2, 0xc1, 0x7ff, 0x0, 0xfffffffa, 0x2, 0x1, 0x2, 0x7, 0x3, 0x0, 0xb, 0x8, 0x7, 0xffffffff, 0x5, 0x8, 0x800, 0x1000, 0x400, 0x5c, 0x4, 0x1, 0x3, 0x1, 0x381c, 0x42d, 0xfffffff7, 0xfff, 0x0, 0x4, 0x6, 0x7, 0x1, 0xf, 0x80000001, 0x9, 0x80000001, 0x1, 0x1, 0x32d1, 0x8000, 0xffb, 0xbde10000, 0x7, 0xe7, 0x60c, 0xe, 0x5, 0x1, 0x3, 0x8, 0x9, 0x343, 0x8, 0xffffffff, 0xa, 0xf, 0x4, 0x7f, 0x0, 0x0, 0x400, 0x2, 0x8, 0x6, 0x7, 0xd, 0x7, 0x8, 0x5, 0x25a6, 0x726, 0x3, 0x2b, 0x7fffffff, 0x4, 0x9b, 0x10000, 0x1ff, 0x40, 0x400, 0x3, 0x9, 0x6, 0x2, 0xfffffffe, 0x5, 0x2, 0x73, 0x3, 0x81, 0x0, 0x800, 0x9, 0x401, 0x4d0, 0x1, 0x8, 0x1, 0x7, 0x401]}]]}, {0x9a, 0x6, "c0478b4ac12177a57e59fcc0b7147b619b7e273c9363a9994785d22032c57b3c06e39d2222c908bcc83d71527657e704d4c0df792d7ee6e7ffd5c8f38dc351c63ea42791cf56d2067dd9ac1da6d357a05ebcb2dd65c9109c401db1ca89d64f1f21eff72fa247b9c47b9f51c41291a8b851c558ac08d0c12d43498a488f50fb43d5abd3701bab2e431610db7cd8ba52206394dc30935e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x91}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/106, 0x6a}, {&(0x7f0000000cc0)=""/85, 0x55}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000bc0)=""/201, 0xc9}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_io_uring_setup(0x508f, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf252c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7ff156458f8ede90b1d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a608004500ac1414bb"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="3f01cd81b44caa94b878f8b97abbdcec87abf914e84aeb75a9db03fe80ab28c12768d270502dc825aaab6cc41405e0f5b2815e76c57fe7a8f65d624bc403755b544238c4936691b157ca942c7fe8a23c279283b2a9e21bc93bcebb0f43f9614502ec4c60fcf148613066c19dd476d1a25a13241c6e8dfdbf8d064e864219b972aefa87c08c4b1b64beccdfcd18ddbb3fb3d1ca9e9b5bc0a20e950f211b2c3b5dc4c4e4d36f16e3ccacb4b6eaca6e6e328cecc6692ad0826dc470449fc06d61a3ad6e0f76a683", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES8, @ANYRESDEC=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @loopback}, &(0x7f00000001c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 737.315406ms ago: executing program 1 (id=6027): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 727.365117ms ago: executing program 3 (id=6028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000010c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e3, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x149141, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 702.64265ms ago: executing program 0 (id=6029): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000600)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@noinit_itable}, {@discard}, {@minixdf}, {@nolazytime}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1ff}}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}]}, 0x5, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lgetxattr(0x0, &(0x7f0000000800)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYRESDEC, @ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2ea, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2b4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x8, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de477f00f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {}]}}}}}}, 0x0) 605.30537ms ago: executing program 1 (id=6030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getaddr={0x18, 0x16, 0xa99bee2eb6d2d7db, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x72, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2b1}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}}, @in={0x2, 0x4e20, @empty}], 0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f00000000c0)="d0b8e2cb792dace443aff841a407397b82557ee793855c625f0b1956c73bce65bcb1948fef7fe6401ada7d174b1cc7fc6349fdfab95b59cc24826c689d0d09ffa0614f72e7fb2db4a4d7f1f60f2e09fa15976750009eda03fba83c3c8c4f189466d3fa7e381ece20100b764c", &(0x7f00000004c0)=""/195, &(0x7f00000002c0)="213ff8f985cd78f47e8a8d152a3975b6e6396d0bacfb79e73a30b6e6f9c64aabd7f847e636e7bdb39dec7e65ec96f223c1187e780bcf9a2b95ca900fc53beea0d47e90311aaec77ec8cb526ce21a4ac417833b30f5", &(0x7f0000000040)="393984992e963dc4bda6a15fadbb42edab62a5", 0x1, r0}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x53, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xd, &(0x7f0000000a00)=ANY=[@ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000004000000000000100000095f5addd62521882c1ef34e8d7a98db5968f14b72700000000000000006bc5af8b74ca3873e003db052f026b08afb1727918f6a44faad9e267848ffad3ce26919ae47ad19fd68883ea2fba99114a0399b049f14b558473cf86c9c6f7f97928054f5ebf888e0cbefc9d886eb820180c6428a331cd207483adc8db460b98b9bf82590dd074366577e6a12ce264f6afc48180a1c64c6906108e2417fefe473f840b92e78a6f33f69f5a38c458aa2fcb586369c661f64f6a0f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 558.004814ms ago: executing program 0 (id=6031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x800}, r4, 0x1}}, 0x48) io_uring_enter(0xffffffffffffffff, 0x29ab, 0xd480, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000010c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e3, &(0x7f0000001340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x149141, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0xffff, @private=0xa010101}, {0x6, @multicast}, 0x68, {0x2, 0x0, @broadcast}}) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e24, @multicast2}}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 315.891399ms ago: executing program 4 (id=6032): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = msgget(0x0, 0x11d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000006329c69b513f427591fdc5e1cd5f9a920e87e6a7984e5ef86817a92fc7e7593d2aae0743d4755a63b284814ab32556c2d2d30c44641dfe37264961ddd3202ca830ac77f867b801ea49479da6adab177a07fd2e84cdb9a72ce70edfd5a7b6f33013b21d390ec73c97800"/127], 0x7f, 0x800) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000020004000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 303.11242ms ago: executing program 1 (id=6033): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, 0x0, 0x0, 0x619) 302.64585ms ago: executing program 0 (id=6034): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}]}, 0x78}, 0x1, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_lt}, {@hash}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) close(r0) 172.087193ms ago: executing program 1 (id=6035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r4, 0x308000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() socket$unix(0x1, 0xed80eba084070568, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='cachefiles_coherency\x00', r9}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0100001000130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000089000/0x4000)=nil, &(0x7f0000342000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f000086f000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006cb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000515000/0x1000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000df000/0x3000)=nil, &(0x7f0000000180)="84572f64452c51fba194631ca0d96eb9da67324adc79673ddcdc0585fcbc864350d24aeb124faabe5761841124727c0216d3cfcc4985a479e5a2", 0x3a}, 0x68) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(r0, 0xffffffffffffffff, 0x0) 171.920233ms ago: executing program 2 (id=5985): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000010c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e3, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x149141, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 0s ago: executing program 0 (id=6036): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) io_setup(0xbf, &(0x7f0000000100)) kernel console output (not intermixed with test programs): write (off=5120, len=1024) cancelled because transaction is not started [ 343.020393][ T58] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 343.107542][T19045] loop2: detected capacity change from 0 to 512 [ 343.133624][T19045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 343.141862][T19045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 343.327891][T19045] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 343.353353][T19045] EXT4-fs (loop2): Remounting filesystem read-only [ 343.360332][T19045] EXT4-fs (loop2): 1 truncate cleaned up [ 343.367569][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 343.378286][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 343.540921][T19050] usb usb1: check_ctrlrecip: process 19050 (syz.1.5646) requesting ep 01 but needs 81 [ 343.550611][T19050] usb usb1: usbfs: process 19050 (syz.1.5646) did not claim interface 0 before use [ 343.592745][T19051] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 343.599607][ T58] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 343.619692][T19050] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 343.692800][T19059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.731932][T19059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.749528][T19059] __nla_validate_parse: 3 callbacks suppressed [ 343.749547][T19059] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5651'. [ 343.883691][T19077] loop4: detected capacity change from 0 to 2048 [ 343.937407][T19075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5658'. [ 343.980012][T19084] loop0: detected capacity change from 0 to 1024 [ 343.983387][T19077] FAULT_INJECTION: forcing a failure. [ 343.983387][T19077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.986999][T19084] EXT4-fs: Ignoring removed orlov option [ 343.999776][T19077] CPU: 0 UID: 0 PID: 19077 Comm: syz.4.5659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.999839][T19077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.999860][T19077] Call Trace: [ 343.999869][T19077] [ 343.999882][T19077] __dump_stack+0x1d/0x30 [ 343.999947][T19077] dump_stack_lvl+0xe8/0x140 [ 343.999975][T19077] dump_stack+0x15/0x1b [ 343.999998][T19077] should_fail_ex+0x265/0x280 [ 344.000069][T19077] should_fail_alloc_page+0xf2/0x100 [ 344.000112][T19077] __alloc_frozen_pages_noprof+0xff/0x360 [ 344.000177][T19077] alloc_pages_mpol+0xb3/0x260 [ 344.000209][T19077] folio_alloc_noprof+0x97/0x150 [ 344.000307][T19077] filemap_alloc_folio_noprof+0x66/0x210 [ 344.000353][T19077] __filemap_get_folio+0x28f/0x650 [ 344.000400][T19077] ext4_generic_write_inline_data+0x1c0/0x740 [ 344.000451][T19077] ext4_da_write_begin+0x2a3/0x6e0 [ 344.000554][T19077] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 344.000595][T19077] generic_perform_write+0x184/0x490 [ 344.000637][T19077] ext4_buffered_write_iter+0x1ee/0x3c0 [ 344.000667][T19077] ? ext4_file_write_iter+0xfe/0xf60 [ 344.000757][T19077] ext4_file_write_iter+0x387/0xf60 [ 344.000784][T19077] ? kstrtouint+0x76/0xc0 [ 344.000827][T19077] ? kstrtouint_from_user+0x9f/0xf0 [ 344.000887][T19077] ? avc_policy_seqno+0x15/0x30 [ 344.000967][T19077] ? selinux_file_permission+0x1e4/0x320 [ 344.001013][T19077] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 344.001040][T19077] vfs_write+0x52a/0x960 [ 344.001143][T19077] ksys_write+0xda/0x1a0 [ 344.001184][T19077] __x64_sys_write+0x40/0x50 [ 344.001226][T19077] x64_sys_call+0x2802/0x3000 [ 344.001259][T19077] do_syscall_64+0xd2/0x200 [ 344.001291][T19077] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 344.001373][T19077] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 344.001488][T19077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.001518][T19077] RIP: 0033:0x7fefb2fef6c9 [ 344.001541][T19077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.001690][T19077] RSP: 002b:00007fefb1a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.001772][T19077] RAX: ffffffffffffffda RBX: 00007fefb3245fa0 RCX: 00007fefb2fef6c9 [ 344.001790][T19077] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000005 [ 344.001868][T19077] RBP: 00007fefb1a57090 R08: 0000000000000000 R09: 0000000000000000 [ 344.001886][T19077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.001903][T19077] R13: 00007fefb3246038 R14: 00007fefb3245fa0 R15: 00007ffe89e36e78 [ 344.001932][T19077] [ 344.103992][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5657'. [ 344.187415][T19074] loop2: detected capacity change from 0 to 512 [ 344.191682][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5657'. [ 344.287883][T19074] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 344.296060][T19074] EXT4-fs (loop2): orphan cleanup on readonly fs [ 344.305620][T19074] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5657: corrupted inode contents [ 344.318093][T19074] EXT4-fs (loop2): Remounting filesystem read-only [ 344.325134][T19074] EXT4-fs (loop2): 1 truncate cleaned up [ 344.331074][T18925] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 344.341859][T18925] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 344.354459][T19090] netlink: 'syz.3.5661': attribute type 1 has an invalid length. [ 344.362378][T19090] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5661'. [ 344.375991][T18925] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 344.496660][T19097] usb usb1: check_ctrlrecip: process 19097 (syz.4.5662) requesting ep 01 but needs 81 [ 344.506353][T19097] usb usb1: usbfs: process 19097 (syz.4.5662) did not claim interface 0 before use [ 344.516221][T19097] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 344.536491][T19098] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 344.741989][T19124] netlink: 'syz.3.5674': attribute type 1 has an invalid length. [ 344.749967][T19124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5674'. [ 344.759563][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5666'. [ 344.768958][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5666'. [ 344.783532][T19120] loop1: detected capacity change from 0 to 512 [ 344.811785][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5673'. [ 344.824387][T19120] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 344.832563][T19120] EXT4-fs (loop1): orphan cleanup on readonly fs [ 344.844263][T19135] usb usb1: check_ctrlrecip: process 19135 (syz.4.5675) requesting ep 01 but needs 81 [ 344.854030][T19135] usb usb1: usbfs: process 19135 (syz.4.5675) did not claim interface 0 before use [ 344.855970][T19136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.872930][T19135] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 344.888861][T19120] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 344.907770][T19120] EXT4-fs (loop1): Remounting filesystem read-only [ 344.914513][T19120] EXT4-fs (loop1): 1 truncate cleaned up [ 344.920340][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 344.921515][T19138] loop0: detected capacity change from 0 to 128 [ 344.930991][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 344.951885][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 344.959013][T19136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.999344][T19140] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 345.013525][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5676'. [ 346.217203][T19159] loop2: detected capacity change from 0 to 1024 [ 346.233002][T19159] EXT4-fs: Ignoring removed orlov option [ 346.294805][T19161] loop0: detected capacity change from 0 to 512 [ 346.321593][T19160] loop4: detected capacity change from 0 to 512 [ 346.351196][T19160] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 346.351196][T19161] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 346.351381][T19161] EXT4-fs (loop0): orphan cleanup on readonly fs [ 346.359324][T19160] EXT4-fs (loop4): orphan cleanup on readonly fs [ 346.365036][T19160] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5681: corrupted inode contents [ 346.369710][T19161] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5680: corrupted inode contents [ 346.374196][T19160] EXT4-fs (loop4): Remounting filesystem read-only [ 346.382940][T19161] EXT4-fs (loop0): Remounting filesystem read-only [ 346.392426][T19160] EXT4-fs (loop4): 1 truncate cleaned up [ 346.392563][T17044] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 346.404898][T19161] EXT4-fs (loop0): 1 truncate cleaned up [ 346.410933][T17044] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 346.472506][T19174] loop1: detected capacity change from 0 to 512 [ 346.493490][T19174] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 346.501594][T19174] EXT4-fs (loop1): orphan cleanup on readonly fs [ 346.511061][T19174] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 346.522911][T19174] EXT4-fs (loop1): Remounting filesystem read-only [ 346.529712][T19174] EXT4-fs (loop1): 1 truncate cleaned up [ 346.550948][T17044] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 346.632946][T17044] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 346.643613][T17044] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 346.744415][T17044] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 346.767993][T17044] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 346.778581][T17044] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 346.835002][T17044] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 346.951357][T19180] loop3: detected capacity change from 0 to 1024 [ 346.958276][T19180] EXT4-fs: Ignoring removed oldalloc option [ 346.964412][T19180] EXT4-fs: Ignoring removed bh option [ 347.388432][T19201] loop2: detected capacity change from 0 to 512 [ 347.411883][T19198] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 347.431749][T19201] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 347.440820][T19201] EXT4-fs (loop2): orphan cleanup on readonly fs [ 348.080924][T19206] loop0: detected capacity change from 0 to 512 [ 348.109038][T19201] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 348.121348][T19201] EXT4-fs (loop2): Remounting filesystem read-only [ 348.128015][T19201] EXT4-fs (loop2): 1 truncate cleaned up [ 348.160564][T19206] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 348.169177][T19206] EXT4-fs (loop0): orphan cleanup on readonly fs [ 348.177132][T18925] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 348.187756][T18925] __quota_error: 131 callbacks suppressed [ 348.187775][T18925] Quota error (device loop2): write_blk: dquota write failed [ 348.201008][T18925] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 348.211053][T18925] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 348.221651][T18925] Quota error (device loop2): write_blk: dquota write failed [ 348.229074][T18925] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 348.255479][T19206] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 348.270000][T18925] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 348.280186][T18925] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 348.280269][T19206] EXT4-fs (loop0): Remounting filesystem read-only [ 348.289214][T18925] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 348.295779][T19206] EXT4-fs (loop0): 1 truncate cleaned up [ 348.316716][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 348.327303][ T37] Quota error (device loop0): write_blk: dquota write failed [ 348.334898][ T37] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 348.344940][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 348.355498][ T37] Quota error (device loop0): write_blk: dquota write failed [ 348.362919][ T37] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 348.371131][T19212] loop4: detected capacity change from 0 to 1024 [ 348.373331][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 348.380234][T19212] EXT4-fs: Ignoring removed orlov option [ 348.389904][T19210] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 348.521643][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.531918][T19218] loop1: detected capacity change from 0 to 1024 [ 348.532445][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.624137][T19218] EXT4-fs: Ignoring removed orlov option [ 349.027868][T19243] __nla_validate_parse: 15 callbacks suppressed [ 349.027890][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5700'. [ 349.043271][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5700'. [ 349.056696][T19243] loop2: detected capacity change from 0 to 512 [ 349.532352][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5701'. [ 349.541426][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5701'. [ 349.925292][T19244] loop4: detected capacity change from 0 to 512 [ 349.991618][T19243] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 349.999730][T19243] EXT4-fs (loop2): orphan cleanup on readonly fs [ 350.008731][T19243] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5700: corrupted inode contents [ 350.021066][T19243] EXT4-fs (loop2): Remounting filesystem read-only [ 350.027953][T19243] EXT4-fs (loop2): 1 truncate cleaned up [ 350.034125][T18925] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.044863][T18925] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.049292][T19244] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 350.063554][T18925] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 350.064325][T19243] EXT4-fs mount: 69 callbacks suppressed [ 350.064344][T19243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.074394][T19244] EXT4-fs (loop4): orphan cleanup on readonly fs [ 350.098147][T12148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.112065][T19244] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 350.123774][T19244] EXT4-fs (loop4): Remounting filesystem read-only [ 350.130592][T19244] EXT4-fs (loop4): 1 truncate cleaned up [ 350.136982][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.147765][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.158677][ T58] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 350.169910][T19244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.244250][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.280208][T19257] usb usb1: check_ctrlrecip: process 19257 (syz.2.5705) requesting ep 01 but needs 81 [ 350.289940][T19257] usb usb1: usbfs: process 19257 (syz.2.5705) did not claim interface 0 before use [ 350.314452][T19257] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 350.354747][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.402178][T19270] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 350.457011][T19274] loop0: detected capacity change from 0 to 1024 [ 350.467833][T19274] EXT4-fs: Ignoring removed orlov option [ 350.478173][T19274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.560157][T19281] loop3: detected capacity change from 0 to 2048 [ 350.611437][T19287] loop4: detected capacity change from 0 to 1024 [ 350.619506][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5714'. [ 350.628451][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5714'. [ 350.642495][T19287] EXT4-fs: Ignoring removed oldalloc option [ 350.649962][T19287] EXT4-fs: Ignoring removed bh option [ 350.655947][T19281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 350.685642][T19287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.852036][T19281] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 350.903563][T19281] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 350.916112][T19281] EXT4-fs (loop3): This should not happen!! Data will be lost [ 350.916112][T19281] [ 350.925929][T19281] EXT4-fs (loop3): Total free blocks count 0 [ 350.931947][T19281] EXT4-fs (loop3): Free/Dirty block details [ 350.937887][T19281] EXT4-fs (loop3): free_blocks=2415919104 [ 350.943690][T19281] EXT4-fs (loop3): dirty_blocks=3008 [ 350.949037][T19281] EXT4-fs (loop3): Block reservation details [ 350.955052][T19281] EXT4-fs (loop3): i_reserved_data_blocks=188 [ 350.968735][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5716'. [ 350.977767][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5716'. [ 350.996849][T19303] loop1: detected capacity change from 0 to 512 [ 351.642365][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5717'. [ 351.651442][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5717'. [ 351.744903][T19306] loop2: detected capacity change from 0 to 512 [ 351.836773][T19303] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 351.844919][T19303] EXT4-fs (loop1): orphan cleanup on readonly fs [ 351.854815][T19303] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5716: corrupted inode contents [ 351.867738][T19303] EXT4-fs (loop1): Remounting filesystem read-only [ 351.874592][T19303] EXT4-fs (loop1): 1 truncate cleaned up [ 351.880509][ T3429] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 351.891075][ T3429] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 351.913343][T19311] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.5712: corrupted in-inode xattr: e_value size too large [ 351.928564][T19306] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 351.936744][T19306] EXT4-fs (loop2): orphan cleanup on readonly fs [ 351.948694][T19306] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5717: corrupted inode contents [ 351.960911][T19306] EXT4-fs (loop2): Remounting filesystem read-only [ 351.967566][T19306] EXT4-fs (loop2): 1 truncate cleaned up [ 351.992214][ T3429] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 352.012420][ T3429] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 352.023023][ T3429] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 352.033876][ T3429] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 352.044699][T19303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.057662][T19303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.069445][T19306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.081378][T10988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.090586][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.121952][T17044] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 352.136877][T19314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.168745][T19314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.337488][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.361231][T19324] loop0: detected capacity change from 0 to 512 [ 352.433456][T19324] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 352.441983][T19324] EXT4-fs (loop0): orphan cleanup on readonly fs [ 352.451860][T19324] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 352.463807][T19324] EXT4-fs (loop0): Remounting filesystem read-only [ 352.470477][T19324] EXT4-fs (loop0): 1 truncate cleaned up [ 352.476463][T18925] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 352.487065][T18925] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 352.595074][T19329] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 352.611254][T18925] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 352.646825][T19329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 352.671289][T19324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.797319][T19336] bridge0: entered promiscuous mode [ 352.803517][T19336] bridge0: port 1(macsec1) entered blocking state [ 352.809991][T19336] bridge0: port 1(macsec1) entered disabled state [ 352.816855][T19336] macsec1: entered allmulticast mode [ 352.822232][T19336] bridge0: entered allmulticast mode [ 352.828152][T19336] macsec1: left allmulticast mode [ 352.833388][T19336] bridge0: left allmulticast mode [ 352.839237][T19336] bridge0: left promiscuous mode [ 352.872528][T19341] netlink: 'syz.2.5726': attribute type 1 has an invalid length. [ 352.969264][T19351] loop2: detected capacity change from 0 to 1024 [ 353.042521][T19351] EXT4-fs: Ignoring removed orlov option [ 353.087327][T10988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.123092][T19351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.178644][T19356] bridge0: entered promiscuous mode [ 353.234777][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 353.234803][ T29] audit: type=1326 audit(2000000181.800:29523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.264805][ T29] audit: type=1326 audit(2000000181.800:29524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.288448][ T29] audit: type=1326 audit(2000000181.800:29525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.312203][ T29] audit: type=1326 audit(2000000181.800:29526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.335789][ T29] audit: type=1326 audit(2000000181.800:29527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.359480][ T29] audit: type=1326 audit(2000000181.800:29528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.383059][ T29] audit: type=1326 audit(2000000181.800:29529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.406681][ T29] audit: type=1326 audit(2000000181.810:29530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.442189][T19363] loop1: detected capacity change from 0 to 512 [ 353.452718][T19356] bridge0: port 1(macsec1) entered blocking state [ 353.459234][T19356] bridge0: port 1(macsec1) entered disabled state [ 353.483388][T19356] macsec1: entered allmulticast mode [ 353.488733][T19356] bridge0: entered allmulticast mode [ 353.508579][T19356] macsec1: left allmulticast mode [ 353.513694][T19356] bridge0: left allmulticast mode [ 353.559798][T19365] loop3: detected capacity change from 0 to 1024 [ 353.570141][ T29] audit: type=1326 audit(2000000182.040:29531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.591672][T19365] EXT4-fs: Ignoring removed orlov option [ 353.593937][ T29] audit: type=1326 audit(2000000182.040:29532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 353.600397][T19363] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 353.631552][T19363] EXT4-fs (loop1): orphan cleanup on readonly fs [ 353.639862][T19356] bridge0: left promiscuous mode [ 353.641571][T19365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.648813][T19363] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5731: corrupted inode contents [ 353.669586][T19363] EXT4-fs (loop1): Remounting filesystem read-only [ 353.676233][T19363] EXT4-fs (loop1): 1 truncate cleaned up [ 353.685194][ T3429] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 353.695808][ T3429] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 353.724498][ T3429] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 353.738318][T19363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.751556][T19363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.764852][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.853993][T19376] loop2: detected capacity change from 0 to 512 [ 353.864648][T19376] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 353.883253][T19376] EXT4-fs (loop2): 1 truncate cleaned up [ 353.894060][T19376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.942054][T19376] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.5736: Logical block already allocated [ 353.957935][T19381] loop4: detected capacity change from 0 to 512 [ 353.973488][T19383] loop0: detected capacity change from 0 to 512 [ 353.980234][T19383] EXT4-fs: Ignoring removed bh option [ 353.988005][T19381] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 353.999796][T19376] EXT4-fs (loop2): Remounting filesystem read-only [ 354.014687][T19383] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.5739: corrupted in-inode xattr: invalid ea_ino [ 354.030997][T19381] unsupported nla_type 46065 [ 354.037421][T19383] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5739: couldn't read orphan inode 15 (err -117) [ 354.055273][T19383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.095119][T19383] IPv6: addrconf: prefix option has invalid lifetime [ 354.101500][T19389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.113784][T19389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.150412][T10988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.281345][T11645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.378617][T19404] __nla_validate_parse: 9 callbacks suppressed [ 354.378637][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5743'. [ 354.393881][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5743'. [ 354.412306][T19404] loop4: detected capacity change from 0 to 512 [ 354.492744][T19404] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 354.501083][T19404] EXT4-fs (loop4): orphan cleanup on readonly fs [ 354.512347][T19404] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 354.524368][T19404] EXT4-fs (loop4): Remounting filesystem read-only [ 354.531058][T19404] EXT4-fs (loop4): 1 truncate cleaned up [ 354.652107][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5747'. [ 354.680059][T19412] bridge0: entered promiscuous mode [ 354.687149][T19412] bridge0: port 1(macsec1) entered blocking state [ 354.693792][T19412] bridge0: port 1(macsec1) entered disabled state [ 354.701625][T19412] macsec1: entered allmulticast mode [ 354.707017][T19412] bridge0: entered allmulticast mode [ 354.714134][T19412] macsec1: left allmulticast mode [ 354.719211][T19412] bridge0: left allmulticast mode [ 354.727101][T19412] bridge0: left promiscuous mode [ 354.764187][ T3429] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 354.774798][ T3429] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 354.788044][ T3429] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 354.799894][T19404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.834912][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.864830][T19417] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 354.924589][T19421] bridge0: entered promiscuous mode [ 354.946458][T19421] bridge0: port 1(macsec1) entered blocking state [ 354.953004][T19421] bridge0: port 1(macsec1) entered disabled state [ 354.977109][T19421] macsec1: entered allmulticast mode [ 354.982529][T19421] bridge0: entered allmulticast mode [ 355.061317][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.072187][T19421] macsec1: left allmulticast mode [ 355.077268][T19421] bridge0: left allmulticast mode [ 355.082862][T19421] bridge0: left promiscuous mode [ 355.089993][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 355.213157][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5753'. [ 355.222207][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5753'. [ 355.244189][T19441] loop0: detected capacity change from 0 to 512 [ 355.263633][T19441] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 355.271800][T19441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 355.280831][T19441] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 355.292514][T19441] EXT4-fs (loop0): Remounting filesystem read-only [ 355.299339][T19441] EXT4-fs (loop0): 1 truncate cleaned up [ 355.430537][T19446] loop3: detected capacity change from 0 to 1024 [ 355.480531][T19446] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 355.556929][ T3429] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 355.567547][ T3429] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 355.604692][T19446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.637588][ T3429] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 355.655969][T19441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.703487][T19446] syz_tun: refused to change device tx_queue_len [ 355.703947][T19457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.718887][T19457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.755462][T19446] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.5759: missing EA_INODE flag [ 355.767873][T19446] EXT4-fs (loop3): Remounting filesystem read-only [ 355.878127][T10988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.052775][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5765'. [ 356.061781][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5765'. [ 356.112029][T19469] FAULT_INJECTION: forcing a failure. [ 356.112029][T19469] name failslab, interval 1, probability 0, space 0, times 0 [ 356.124882][T19469] CPU: 0 UID: 0 PID: 19469 Comm: syz.0.5766 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.124925][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.124942][T19469] Call Trace: [ 356.124950][T19469] [ 356.124958][T19469] __dump_stack+0x1d/0x30 [ 356.124987][T19469] dump_stack_lvl+0xe8/0x140 [ 356.125036][T19469] dump_stack+0x15/0x1b [ 356.125058][T19469] should_fail_ex+0x265/0x280 [ 356.125156][T19469] should_failslab+0x8c/0xb0 [ 356.125194][T19469] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 356.125234][T19469] ? __alloc_skb+0x101/0x320 [ 356.125352][T19469] __alloc_skb+0x101/0x320 [ 356.125461][T19469] ? audit_log_start+0x342/0x720 [ 356.125486][T19469] audit_log_start+0x3a0/0x720 [ 356.125517][T19469] ? kstrtouint+0x76/0xc0 [ 356.125550][T19469] audit_seccomp+0x48/0x100 [ 356.125591][T19469] ? __seccomp_filter+0x82d/0x1250 [ 356.125660][T19469] __seccomp_filter+0x83e/0x1250 [ 356.125687][T19469] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 356.125759][T19469] ? vfs_write+0x7e8/0x960 [ 356.125908][T19469] ? __rcu_read_unlock+0x4f/0x70 [ 356.125975][T19469] ? __fget_files+0x184/0x1c0 [ 356.126015][T19469] __secure_computing+0x82/0x150 [ 356.126052][T19469] syscall_trace_enter+0xcf/0x1e0 [ 356.126152][T19469] do_syscall_64+0xac/0x200 [ 356.126181][T19469] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 356.126209][T19469] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 356.126297][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.126319][T19469] RIP: 0033:0x7fec190ef6c9 [ 356.126335][T19469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.126417][T19469] RSP: 002b:00007fec17b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 356.126442][T19469] RAX: ffffffffffffffda RBX: 00007fec19345fa0 RCX: 00007fec190ef6c9 [ 356.126458][T19469] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000 [ 356.126474][T19469] RBP: 00007fec17b57090 R08: 0000000000000000 R09: 0000000000000000 [ 356.126489][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.126502][T19469] R13: 00007fec19346038 R14: 00007fec19345fa0 R15: 00007ffc39b4ad88 [ 356.126521][T19469] [ 356.352048][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5764'. [ 356.361274][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5764'. [ 356.375513][T19467] loop4: detected capacity change from 0 to 512 [ 356.420972][T19475] bridge0: entered promiscuous mode [ 356.427352][T19475] bridge0: port 1(macsec1) entered blocking state [ 356.433865][T19475] bridge0: port 1(macsec1) entered disabled state [ 356.440847][T19475] macsec1: entered allmulticast mode [ 356.446256][T19475] bridge0: entered allmulticast mode [ 356.453472][T19475] macsec1: left allmulticast mode [ 356.458749][T19475] bridge0: left allmulticast mode [ 356.465409][T19467] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 356.473856][T19467] EXT4-fs (loop4): orphan cleanup on readonly fs [ 356.482441][T19467] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5764: corrupted inode contents [ 356.489559][T11645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.503718][T19475] bridge0: left promiscuous mode [ 356.503727][T19467] EXT4-fs (loop4): Remounting filesystem read-only [ 356.503863][T19467] EXT4-fs (loop4): 1 truncate cleaned up [ 356.521172][ T3429] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 356.531928][ T3429] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 356.554943][ T3429] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 356.567119][T19467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.580616][T19467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.603974][T19481] loop1: detected capacity change from 0 to 512 [ 356.673585][T19481] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 356.682058][T19481] EXT4-fs (loop1): orphan cleanup on readonly fs [ 356.691668][T19481] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 356.703705][T19481] EXT4-fs (loop1): Remounting filesystem read-only [ 356.710489][T19481] EXT4-fs (loop1): 1 truncate cleaned up [ 356.716700][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 356.727258][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 356.759592][T18925] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 357.155156][T19481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.211057][T19489] loop2: detected capacity change from 0 to 512 [ 357.386467][T12148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.407750][T19489] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 357.416479][T19489] EXT4-fs (loop2): orphan cleanup on readonly fs [ 357.434927][T19489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 357.446928][T19489] EXT4-fs (loop2): Remounting filesystem read-only [ 357.453786][T19489] EXT4-fs (loop2): 1 truncate cleaned up [ 357.465809][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 357.476473][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 357.493466][ T58] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 357.504561][T19489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.542966][T19496] netlink: 'syz.1.5773': attribute type 1 has an invalid length. [ 357.681147][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.758134][T19515] bridge0: entered promiscuous mode [ 357.764754][T19515] bridge0: port 1(macsec1) entered blocking state [ 357.771445][T19515] bridge0: port 1(macsec1) entered disabled state [ 357.778479][T19515] macsec1: entered allmulticast mode [ 357.783917][T19515] bridge0: entered allmulticast mode [ 357.789760][T19515] macsec1: left allmulticast mode [ 357.794912][T19515] bridge0: left allmulticast mode [ 357.805961][T19515] bridge0: left promiscuous mode [ 357.811202][T19521] loop1: detected capacity change from 0 to 512 [ 357.818879][T19521] EXT4-fs: Ignoring removed bh option [ 357.838170][T19521] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.5780: corrupted in-inode xattr: invalid ea_ino [ 357.863459][T19521] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.5780: couldn't read orphan inode 15 (err -117) [ 357.879298][T19521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.911745][T19521] IPv6: addrconf: prefix option has invalid lifetime [ 357.940159][T12148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.004480][T19526] loop4: detected capacity change from 0 to 1024 [ 358.011883][T19526] EXT4-fs: test_dummy_encryption option not supported [ 358.195143][T19536] loop1: detected capacity change from 0 to 512 [ 358.274706][T19536] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 358.283036][T19536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 358.292078][T19536] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 358.304378][T19536] EXT4-fs (loop1): Remounting filesystem read-only [ 358.311073][T19536] EXT4-fs (loop1): 1 truncate cleaned up [ 358.317811][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 358.328471][ T58] __quota_error: 310 callbacks suppressed [ 358.328488][ T58] Quota error (device loop1): write_blk: dquota write failed [ 358.341681][ T58] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 358.351715][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 358.362290][ T58] Quota error (device loop1): write_blk: dquota write failed [ 358.369678][ T58] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 358.571130][ T58] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 358.581374][ T58] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 358.607303][ T58] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 358.621722][T19536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.627117][T19540] bridge0: entered promiscuous mode [ 358.648010][T19540] bridge0: port 1(macsec1) entered blocking state [ 358.654574][T19540] bridge0: port 1(macsec1) entered disabled state [ 358.661303][T19540] macsec1: entered allmulticast mode [ 358.666745][T19540] bridge0: entered allmulticast mode [ 358.679270][T19540] macsec1: left allmulticast mode [ 358.684697][T19540] bridge0: left allmulticast mode [ 358.690630][T19540] bridge0: left promiscuous mode [ 358.699638][ T29] audit: type=1400 audit(2000000187.270:29805): avc: denied { name_connect } for pid=19534 comm="syz.2.5784" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 358.859079][T12148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.876188][ T29] audit: type=1326 audit(2000000187.450:29806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 358.899975][ T29] audit: type=1326 audit(2000000187.450:29807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 358.946899][ T29] audit: type=1326 audit(2000000187.500:29808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 359.080532][T19565] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 359.132677][T19567] bridge0: entered promiscuous mode [ 359.138756][T19567] bridge0: port 1(macsec1) entered blocking state [ 359.145333][T19567] bridge0: port 1(macsec1) entered disabled state [ 359.152343][T19567] macsec1: entered allmulticast mode [ 359.157694][T19567] bridge0: entered allmulticast mode [ 359.164242][T19567] macsec1: left allmulticast mode [ 359.169366][T19567] bridge0: left allmulticast mode [ 359.230758][T19574] loop0: detected capacity change from 0 to 512 [ 359.263103][T19574] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 359.271233][T19574] EXT4-fs (loop0): orphan cleanup on readonly fs [ 359.285825][T19574] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5791: corrupted inode contents [ 359.298499][T19574] EXT4-fs (loop0): Remounting filesystem read-only [ 359.305131][T19574] EXT4-fs (loop0): 1 truncate cleaned up [ 359.311852][T19567] bridge0: left promiscuous mode [ 359.317184][ T58] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.327751][ T58] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.338800][ T58] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 359.349627][T19574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.362552][T19574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.362490][T19577] loop2: detected capacity change from 0 to 512 [ 359.386961][T19566] __nla_validate_parse: 11 callbacks suppressed [ 359.386983][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5791'. [ 359.402523][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5791'. [ 359.413833][T19577] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 359.421892][T19577] EXT4-fs (loop2): orphan cleanup on readonly fs [ 359.428356][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5796'. [ 359.429884][T19577] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5796: corrupted inode contents [ 359.437371][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5796'. [ 359.449587][T19577] EXT4-fs (loop2): Remounting filesystem read-only [ 359.465216][T19577] EXT4-fs (loop2): 1 truncate cleaned up [ 359.471038][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.481634][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.495644][ T58] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 359.506717][T19577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.522794][T19577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.627321][T19595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=19595 comm=syz.3.5803 [ 359.756870][T19608] loop1: detected capacity change from 0 to 1024 [ 359.764182][T19608] EXT4-fs: Ignoring removed oldalloc option [ 359.780945][T19608] EXT4-fs: Ignoring removed bh option [ 359.793640][T19608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.877042][T19616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5806'. [ 359.906674][T12148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.930297][T19614] bridge0: entered promiscuous mode [ 359.947000][T19614] bridge0: port 1(macsec1) entered blocking state [ 359.953761][T19614] bridge0: port 1(macsec1) entered disabled state [ 359.960649][T19623] loop0: detected capacity change from 0 to 1024 [ 359.968102][T19623] EXT4-fs: Ignoring removed oldalloc option [ 359.969963][T19614] macsec1: entered allmulticast mode [ 359.974424][T19623] EXT4-fs: Ignoring removed bh option [ 359.979433][T19614] bridge0: entered allmulticast mode [ 359.999053][T19614] macsec1: left allmulticast mode [ 360.004199][T19614] bridge0: left allmulticast mode [ 360.010289][T19614] bridge0: left promiscuous mode [ 360.010968][T19623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.175349][T10988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.259816][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5809'. [ 360.268988][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5809'. [ 360.284958][T19637] loop1: detected capacity change from 0 to 512 [ 360.312938][T19637] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 360.321161][T19637] EXT4-fs (loop1): orphan cleanup on readonly fs [ 360.329336][T19637] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 360.341167][T19637] EXT4-fs (loop1): Remounting filesystem read-only [ 360.347855][T19637] EXT4-fs (loop1): 1 truncate cleaned up [ 360.353818][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 360.364501][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 360.405591][T18925] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 360.426269][T19637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.439214][T19637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.722483][T19660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5820'. [ 360.735026][T19660] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5820'. [ 360.744414][T19660] netlink: 'syz.0.5820': attribute type 1 has an invalid length. [ 360.758205][T19661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5817'. [ 360.777142][T19661] loop4: detected capacity change from 0 to 512 [ 360.861964][T19661] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 360.870119][T19661] EXT4-fs (loop4): orphan cleanup on readonly fs [ 360.880245][T19661] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 360.970564][T19661] EXT4-fs (loop4): Remounting filesystem read-only [ 360.977470][T19661] EXT4-fs (loop4): 1 truncate cleaned up [ 360.984268][ T3466] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 360.994898][ T3466] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 361.107171][ T3466] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 361.118697][T19661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.122335][T19667] FAULT_INJECTION: forcing a failure. [ 361.122335][T19667] name failslab, interval 1, probability 0, space 0, times 0 [ 361.143972][T19667] CPU: 1 UID: 0 PID: 19667 Comm: syz.1.5822 Not tainted syzkaller #0 PREEMPT(voluntary) [ 361.143999][T19667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.144012][T19667] Call Trace: [ 361.144018][T19667] [ 361.144027][T19667] __dump_stack+0x1d/0x30 [ 361.144051][T19667] dump_stack_lvl+0xe8/0x140 [ 361.144078][T19667] dump_stack+0x15/0x1b [ 361.144107][T19667] should_fail_ex+0x265/0x280 [ 361.144221][T19667] should_failslab+0x8c/0xb0 [ 361.144250][T19667] kmem_cache_alloc_noprof+0x50/0x480 [ 361.144283][T19667] ? io_submit_one+0xb8/0x11d0 [ 361.144326][T19667] io_submit_one+0xb8/0x11d0 [ 361.144391][T19667] __se_sys_io_submit+0xfb/0x280 [ 361.144435][T19667] __x64_sys_io_submit+0x43/0x50 [ 361.144476][T19667] x64_sys_call+0x2d6c/0x3000 [ 361.144506][T19667] do_syscall_64+0xd2/0x200 [ 361.144533][T19667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 361.144570][T19667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 361.144621][T19667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.144646][T19667] RIP: 0033:0x7fbf3109f6c9 [ 361.144676][T19667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.144697][T19667] RSP: 002b:00007fbf2fb07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 361.144755][T19667] RAX: ffffffffffffffda RBX: 00007fbf312f5fa0 RCX: 00007fbf3109f6c9 [ 361.144768][T19667] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fbf2fac3000 [ 361.144783][T19667] RBP: 00007fbf2fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 361.144799][T19667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.144826][T19667] R13: 00007fbf312f6038 R14: 00007fbf312f5fa0 R15: 00007ffc034e7148 [ 361.144851][T19667] [ 361.327816][T19666] loop0: detected capacity change from 0 to 1024 [ 361.337517][T19670] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 361.345659][T19666] EXT4-fs: Ignoring removed oldalloc option [ 361.355186][T19666] EXT4-fs: Ignoring removed bh option [ 361.381210][T19674] bridge0: entered promiscuous mode [ 361.398059][T19674] bridge0: port 1(macsec1) entered blocking state [ 361.404652][T19674] bridge0: port 1(macsec1) entered disabled state [ 361.411753][T19674] macsec1: entered allmulticast mode [ 361.417144][T19674] bridge0: entered allmulticast mode [ 361.443488][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.462774][T19674] macsec1: left allmulticast mode [ 361.467407][T19666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.467856][T19674] bridge0: left allmulticast mode [ 361.498309][T10988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.558679][T19674] bridge0: left promiscuous mode [ 361.880087][T19707] loop2: detected capacity change from 0 to 1024 [ 361.898546][T19708] loop4: detected capacity change from 0 to 512 [ 361.923461][T19708] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 361.931626][T19708] EXT4-fs (loop4): orphan cleanup on readonly fs [ 361.979093][T19708] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5832: corrupted inode contents [ 361.991689][T19708] EXT4-fs (loop4): Remounting filesystem read-only [ 361.998458][T19708] EXT4-fs (loop4): 1 truncate cleaned up [ 362.004493][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.015056][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.065238][T19707] EXT4-fs: Ignoring removed orlov option [ 362.092605][T19707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.112015][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 362.149539][T19708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.376830][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.629924][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.682966][T19727] loop2: detected capacity change from 0 to 512 [ 362.715160][T19727] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 362.723560][T19727] EXT4-fs (loop2): orphan cleanup on readonly fs [ 362.734010][T19727] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 362.746654][T19727] EXT4-fs (loop2): Remounting filesystem read-only [ 362.753738][T19727] EXT4-fs (loop2): 1 truncate cleaned up [ 362.759802][ T3466] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.770366][ T3466] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.996240][ T3466] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 363.054239][T19727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.329037][T11289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.378275][T19755] loop3: detected capacity change from 0 to 128 [ 363.424260][T19760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=19760 comm=syz.2.5846 [ 363.445826][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 363.445845][ T29] audit: type=1400 audit(2000000192.020:30136): avc: denied { bind } for pid=19754 comm="syz.3.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.472029][ T29] audit: type=1400 audit(2000000192.020:30137): avc: denied { listen } for pid=19754 comm="syz.3.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.491832][ T29] audit: type=1400 audit(2000000192.020:30138): avc: denied { accept } for pid=19754 comm="syz.3.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.527668][T19759] loop1: detected capacity change from 0 to 512 [ 363.545995][ T29] audit: type=1326 audit(2000000192.110:30139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.555453][T19759] EXT4-fs: Ignoring removed bh option [ 363.569771][ T29] audit: type=1326 audit(2000000192.110:30140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.598788][ T29] audit: type=1326 audit(2000000192.120:30141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.622696][ T29] audit: type=1326 audit(2000000192.120:30142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.646364][ T29] audit: type=1326 audit(2000000192.120:30143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.669964][ T29] audit: type=1326 audit(2000000192.120:30144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.693703][ T29] audit: type=1326 audit(2000000192.120:30145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.3.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70919af6c9 code=0x7ffc0000 [ 363.735356][T19759] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.5848: corrupted in-inode xattr: invalid ea_ino [ 363.752538][T19759] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.5848: couldn't read orphan inode 15 (err -117) [ 363.767689][T19759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.792644][T19759] IPv6: addrconf: prefix option has invalid lifetime [ 363.845192][T19776] loop4: detected capacity change from 0 to 512 [ 363.863649][T19776] EXT4-fs: Ignoring removed bh option [ 363.981682][T19779] loop1: detected capacity change from 0 to 512 [ 364.023202][T19779] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 364.031345][T19779] EXT4-fs (loop1): orphan cleanup on readonly fs [ 364.039716][T19779] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 364.051910][T19779] EXT4-fs (loop1): Remounting filesystem read-only [ 364.058659][T19779] EXT4-fs (loop1): 1 truncate cleaned up [ 364.064457][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.075125][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.088550][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 364.099439][T19776] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.5854: corrupted in-inode xattr: invalid ea_ino [ 364.116400][T19776] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5854: couldn't read orphan inode 15 (err -117) [ 364.422930][T19788] loop3: detected capacity change from 0 to 512 [ 364.464569][T19788] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 364.472751][T19788] EXT4-fs (loop3): orphan cleanup on readonly fs [ 364.481620][T19788] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5856: corrupted inode contents [ 364.493898][T19788] EXT4-fs (loop3): Remounting filesystem read-only [ 364.500525][T19788] EXT4-fs (loop3): 1 truncate cleaned up [ 364.507716][T18925] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.518318][T18925] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.641574][T19776] IPv6: addrconf: prefix option has invalid lifetime [ 364.642644][T18925] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 364.757306][T19804] loop4: detected capacity change from 0 to 1024 [ 364.768508][T19813] loop2: detected capacity change from 0 to 1024 [ 364.775478][T19813] EXT4-fs: Ignoring removed oldalloc option [ 364.781776][T19813] EXT4-fs: Ignoring removed bh option [ 364.791796][T19804] EXT4-fs: Ignoring removed orlov option [ 364.803433][T19815] __nla_validate_parse: 3 callbacks suppressed [ 364.803451][T19815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5862'. [ 364.864151][T19817] loop0: detected capacity change from 0 to 512 [ 364.877436][T19817] EXT4-fs: Ignoring removed bh option [ 364.891856][T19817] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.5863: corrupted in-inode xattr: invalid ea_ino [ 364.912691][T19817] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5863: couldn't read orphan inode 15 (err -117) [ 364.947442][T19817] IPv6: addrconf: prefix option has invalid lifetime [ 365.109555][T19836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=19836 comm=syz.3.5868 [ 365.447796][T19849] loop2: detected capacity change from 0 to 1024 [ 365.454647][T19849] EXT4-fs: Ignoring removed oldalloc option [ 365.460763][T19849] EXT4-fs: Ignoring removed bh option [ 365.475273][T19851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5874'. [ 365.489397][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5871'. [ 365.498442][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5871'. [ 365.512913][T19848] loop1: detected capacity change from 0 to 512 [ 365.525633][T19848] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 365.533781][T19848] EXT4-fs (loop1): orphan cleanup on readonly fs [ 365.543948][T19848] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5871: corrupted inode contents [ 365.558781][T19848] EXT4-fs (loop1): Remounting filesystem read-only [ 365.565551][T19848] EXT4-fs (loop1): 1 truncate cleaned up [ 365.571702][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 365.582356][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 365.594135][T19859] loop0: detected capacity change from 0 to 512 [ 365.606928][T19859] EXT4-fs: Ignoring removed bh option [ 365.627254][T18925] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 365.666768][T19859] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.5876: corrupted in-inode xattr: invalid ea_ino [ 365.681304][T19855] loop4: detected capacity change from 0 to 1024 [ 365.688467][T19859] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5876: couldn't read orphan inode 15 (err -117) [ 365.706587][T19855] EXT4-fs: Ignoring removed orlov option [ 365.750172][T19859] IPv6: addrconf: prefix option has invalid lifetime [ 365.922658][T19872] loop2: detected capacity change from 0 to 1024 [ 365.932628][T19872] EXT4-fs: Ignoring removed orlov option [ 366.044933][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5879'. [ 366.053982][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5879'. [ 366.068545][T19875] loop0: detected capacity change from 0 to 512 [ 366.216925][T19875] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 366.225387][T19875] EXT4-fs (loop0): orphan cleanup on readonly fs [ 366.235897][T19875] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 366.248163][T19875] EXT4-fs (loop0): Remounting filesystem read-only [ 366.255099][T19875] EXT4-fs (loop0): 1 truncate cleaned up [ 366.586558][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.597353][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 366.623502][ T52] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 366.635258][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5883'. [ 366.695829][T19886] bridge0: entered promiscuous mode [ 366.716117][T19886] bridge0: port 1(macsec1) entered blocking state [ 366.722747][T19886] bridge0: port 1(macsec1) entered disabled state [ 366.731601][T19886] macsec1: entered allmulticast mode [ 366.737188][T19886] bridge0: entered allmulticast mode [ 366.743872][T19886] macsec1: left allmulticast mode [ 366.749050][T19886] bridge0: left allmulticast mode [ 366.755602][T19886] bridge0: left promiscuous mode [ 366.992673][T19897] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 367.063221][T19904] loop2: detected capacity change from 0 to 1024 [ 367.085649][T19904] EXT4-fs: Ignoring removed oldalloc option [ 367.095225][T19904] EXT4-fs: Ignoring removed bh option [ 367.212582][T19909] loop0: detected capacity change from 0 to 512 [ 367.949744][T19915] loop1: detected capacity change from 0 to 512 [ 367.981146][T19915] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 367.989416][T19915] EXT4-fs (loop1): orphan cleanup on readonly fs [ 368.011698][T19915] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 368.023653][T19915] EXT4-fs (loop1): Remounting filesystem read-only [ 368.030540][T19915] EXT4-fs (loop1): 1 truncate cleaned up [ 368.046138][T19916] loop3: detected capacity change from 0 to 1024 [ 368.052867][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 368.063455][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 368.123437][T19909] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 368.131485][T19909] EXT4-fs (loop0): orphan cleanup on readonly fs [ 368.138524][T19916] EXT4-fs: Ignoring removed oldalloc option [ 368.144521][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 368.152259][T19916] EXT4-fs: Ignoring removed bh option [ 368.165179][T19909] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 368.208574][T19909] EXT4-fs (loop0): Remounting filesystem read-only [ 368.215324][T19909] EXT4-fs (loop0): 1 truncate cleaned up [ 368.221427][ T3429] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 368.232049][ T3429] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 368.245398][ T3429] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 368.450674][T19934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5895'. [ 368.480601][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 368.480616][ T29] audit: type=1326 audit(2000000197.050:30260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 368.519017][T19938] loop0: detected capacity change from 0 to 1024 [ 368.536350][T19938] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 368.548249][ T29] audit: type=1326 audit(2000000197.090:30261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec190ef6c9 code=0x7ffc0000 [ 368.571951][ T29] audit: type=1326 audit(2000000197.090:30262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec190ef703 code=0x7ffc0000 [ 368.595589][ T29] audit: type=1326 audit(2000000197.090:30263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec190ee17f code=0x7ffc0000 [ 368.596571][T19940] bridge0: entered promiscuous mode [ 368.619617][ T29] audit: type=1326 audit(2000000197.090:30264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fec190ef757 code=0x7ffc0000 [ 368.619654][ T29] audit: type=1326 audit(2000000197.090:30265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec190edf10 code=0x7ffc0000 [ 368.626250][T19940] bridge0: port 1(macsec1) entered blocking state [ 368.648445][ T29] audit: type=1326 audit(2000000197.090:30266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec190ef2cb code=0x7ffc0000 [ 368.672451][T19940] bridge0: port 1(macsec1) entered disabled state [ 368.678661][ T29] audit: type=1326 audit(2000000197.100:30267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec190ee32a code=0x7ffc0000 [ 368.727714][T19940] macsec1: entered allmulticast mode [ 368.731995][ T29] audit: type=1326 audit(2000000197.100:30268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec190ee32a code=0x7ffc0000 [ 368.737312][T19940] bridge0: entered allmulticast mode [ 368.760677][ T29] audit: type=1326 audit(2000000197.100:30269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.0.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fec190ede17 code=0x7ffc0000 [ 368.815643][T19940] macsec1: left allmulticast mode [ 368.820792][T19940] bridge0: left allmulticast mode [ 368.835352][T19940] bridge0: left promiscuous mode [ 368.869868][T19938] syz_tun: refused to change device tx_queue_len [ 368.881984][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5899'. [ 368.930142][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5894'. [ 368.944702][T19942] loop1: detected capacity change from 0 to 512 [ 368.967475][T19942] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 368.975696][T19942] EXT4-fs (loop1): orphan cleanup on readonly fs [ 368.985710][T19942] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5894: corrupted inode contents [ 368.998844][T19942] EXT4-fs (loop1): Remounting filesystem read-only [ 369.005939][T19942] EXT4-fs (loop1): 1 truncate cleaned up [ 369.012551][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.014434][T19938] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5896: missing EA_INODE flag [ 369.023208][T18925] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 369.037094][T19948] bridge0: entered promiscuous mode [ 369.051784][T19948] bridge0: port 1(macsec1) entered blocking state [ 369.058626][T19938] EXT4-fs (loop0): Remounting filesystem read-only [ 369.058656][T19948] bridge0: port 1(macsec1) entered disabled state [ 369.071877][T19948] macsec1: entered allmulticast mode [ 369.077245][T19948] bridge0: entered allmulticast mode [ 369.089216][T18925] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 369.101384][T19948] macsec1: left allmulticast mode [ 369.106583][T19948] bridge0: left allmulticast mode [ 369.118095][T19948] bridge0: left promiscuous mode [ 369.375023][T19968] bridge0: entered promiscuous mode [ 369.381533][T19968] bridge0: port 1(macsec1) entered blocking state [ 369.388201][T19968] bridge0: port 1(macsec1) entered disabled state [ 369.395396][T19968] macsec1: entered allmulticast mode [ 369.400736][T19968] bridge0: entered allmulticast mode [ 369.410675][T19968] macsec1: left allmulticast mode [ 369.415837][T19968] bridge0: left allmulticast mode [ 369.429880][T19968] bridge0: left promiscuous mode [ 369.661117][T19988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.679967][T19988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.720901][T19991] loop1: detected capacity change from 0 to 512 [ 369.770797][T19994] loop0: detected capacity change from 0 to 1024 [ 369.780561][T19994] EXT4-fs: Ignoring removed orlov option [ 369.798709][T19991] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 369.806816][T19991] EXT4-fs (loop1): orphan cleanup on readonly fs [ 369.815306][T19991] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5906: corrupted inode contents [ 369.832393][T19991] EXT4-fs (loop1): Remounting filesystem read-only [ 369.839114][T19991] EXT4-fs (loop1): 1 truncate cleaned up [ 370.013794][ T3429] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.024471][ T3429] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.047374][ T3429] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 370.225998][T20012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.234799][T20012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.367161][T20013] loop3: detected capacity change from 0 to 512 [ 370.463341][T20013] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 370.471593][T20013] EXT4-fs (loop3): orphan cleanup on readonly fs [ 370.514994][T20013] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 370.526900][T20013] EXT4-fs (loop3): Remounting filesystem read-only [ 370.533657][T20013] EXT4-fs (loop3): 1 truncate cleaned up [ 370.583228][T20017] __nla_validate_parse: 3 callbacks suppressed [ 370.583243][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5914'. [ 370.780453][T17044] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.791188][T17044] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 370.805874][T17044] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 370.827696][T20023] loop4: detected capacity change from 0 to 1024 [ 370.834744][T20023] EXT4-fs: Ignoring removed orlov option [ 370.867524][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5915'. [ 370.923521][T20029] bridge0: entered promiscuous mode [ 370.929796][T20029] bridge0: port 1(macsec1) entered blocking state [ 370.936542][T20029] bridge0: port 1(macsec1) entered disabled state [ 370.943494][T20029] macsec1: entered allmulticast mode [ 370.949004][T20029] bridge0: entered allmulticast mode [ 370.958367][T20029] macsec1: left allmulticast mode [ 370.963482][T20029] bridge0: left allmulticast mode [ 370.969156][T20029] bridge0: left promiscuous mode [ 371.100188][T20035] loop3: detected capacity change from 0 to 1024 [ 371.115988][T20035] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 371.194042][T20035] syz_tun: refused to change device tx_queue_len [ 371.330522][T20045] loop1: detected capacity change from 0 to 512 [ 371.386600][T20035] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.5920: missing EA_INODE flag [ 371.425556][T20045] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 371.434254][T20045] EXT4-fs (loop1): orphan cleanup on readonly fs [ 371.446895][T20045] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 371.459310][T20045] EXT4-fs (loop1): Remounting filesystem read-only [ 371.466290][T20045] EXT4-fs (loop1): 1 truncate cleaned up [ 371.472350][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 371.482921][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 371.547122][T20035] EXT4-fs (loop3): Remounting filesystem read-only [ 371.624621][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 371.742262][T20057] loop2: detected capacity change from 0 to 1024 [ 371.749206][T20057] EXT4-fs: Ignoring removed orlov option [ 372.016979][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5927'. [ 372.283112][T20078] loop2: detected capacity change from 0 to 512 [ 372.384396][T20078] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 372.392588][T20078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 372.401588][T20078] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5929: corrupted inode contents [ 372.413926][T20078] EXT4-fs (loop2): Remounting filesystem read-only [ 372.420647][T20078] EXT4-fs (loop2): 1 truncate cleaned up [ 372.650571][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.661160][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 372.698952][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 372.721008][T20055] loop4: detected capacity change from 0 to 512 [ 372.734607][T20055] msdos: Unknown parameter '' [ 372.805828][T20092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=20092 comm=syz.1.5933 [ 372.848540][T20095] loop0: detected capacity change from 0 to 1024 [ 372.856244][T20095] EXT4-fs: Ignoring removed orlov option [ 372.974870][T20100] bridge0: entered promiscuous mode [ 372.981390][T20100] bridge0: port 1(macsec1) entered blocking state [ 372.988411][T20100] bridge0: port 1(macsec1) entered disabled state [ 373.001048][T20098] loop3: detected capacity change from 0 to 1024 [ 373.002743][T20100] macsec1: entered allmulticast mode [ 373.013065][T20100] bridge0: entered allmulticast mode [ 373.024340][T20098] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 373.034775][T20100] macsec1: left allmulticast mode [ 373.039941][T20100] bridge0: left allmulticast mode [ 373.046139][T20100] bridge0: left promiscuous mode [ 373.055718][T20104] loop2: detected capacity change from 0 to 512 [ 373.073197][T20104] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 373.081325][T20104] EXT4-fs (loop2): orphan cleanup on readonly fs [ 373.090340][T20104] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5936: corrupted inode contents [ 373.102603][T20098] syz_tun: refused to change device tx_queue_len [ 373.108998][T20104] EXT4-fs (loop2): Remounting filesystem read-only [ 373.109008][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5936'. [ 373.115752][T20104] EXT4-fs (loop2): 1 truncate cleaned up [ 373.124517][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5936'. [ 373.139704][ T3466] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.150506][ T3466] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.184728][ T3466] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 373.189611][T20098] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.5937: missing EA_INODE flag [ 373.223612][T20098] EXT4-fs (loop3): Remounting filesystem read-only [ 373.322562][T20113] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 373.384003][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5940'. [ 373.431253][T20119] netlink: 'syz.2.5942': attribute type 13 has an invalid length. [ 373.490659][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5943'. [ 373.499783][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5943'. [ 373.634909][T20132] loop3: detected capacity change from 0 to 512 [ 373.674271][T20132] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 373.706211][T20132] EXT4-fs (loop3): orphan cleanup on readonly fs [ 373.739994][T20132] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 373.792052][T20132] EXT4-fs (loop3): Remounting filesystem read-only [ 373.812081][T17970] syz1: Port: 1 Link DOWN [ 373.822313][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'. [ 373.831320][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'. [ 373.844129][T20132] EXT4-fs (loop3): 1 truncate cleaned up [ 373.858764][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.869411][ T12] __quota_error: 313 callbacks suppressed [ 373.869425][ T12] Quota error (device loop3): write_blk: dquota write failed [ 373.882597][ T12] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 373.892683][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.903363][ T12] Quota error (device loop3): write_blk: dquota write failed [ 373.910747][ T12] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 373.977661][ T37] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.997012][T20142] 9p: Unknown access argument : -22 [ 374.010890][ T29] audit: type=1400 audit(2000000202.580:30547): avc: denied { attach_queue } for pid=20134 comm="syz.1.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.012487][ T37] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.072279][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 374.082271][ T29] audit: type=1326 audit(2000000202.650:30548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20151 comm="syz.4.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 374.082600][ T12] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 374.106613][ T29] audit: type=1326 audit(2000000202.650:30549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20151 comm="syz.4.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 374.159170][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.200815][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.286972][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 374.325756][T20158] loop4: detected capacity change from 0 to 512 [ 374.339363][ T29] audit: type=1326 audit(2000000202.740:30550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20151 comm="syz.4.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 374.382738][T20158] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 374.390829][T20158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 374.410098][T20158] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5950: corrupted inode contents [ 374.422442][T20158] EXT4-fs (loop4): Remounting filesystem read-only [ 374.429111][T20158] EXT4-fs (loop4): 1 truncate cleaned up [ 374.435343][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.446082][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 374.486904][T17044] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.499260][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 374.551013][T20167] loop4: detected capacity change from 0 to 1024 [ 374.558859][T17044] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.590983][T20167] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 374.644154][T17044] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.677513][T20167] syz_tun: refused to change device tx_queue_len [ 374.714836][T17044] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.818309][T20167] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5951: missing EA_INODE flag [ 374.834084][T20177] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 374.891072][T20167] EXT4-fs (loop4): Remounting filesystem read-only [ 374.927059][T20181] loop2: detected capacity change from 0 to 1024 [ 374.949034][T20181] EXT4-fs: Ignoring removed orlov option [ 375.243827][T20202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=20202 comm=syz.3.5955 [ 376.315351][T20208] loop3: detected capacity change from 0 to 512 [ 376.336459][T20208] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 376.344921][T20208] EXT4-fs (loop3): orphan cleanup on readonly fs [ 376.423618][T20208] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5956: corrupted inode contents [ 376.435792][T20208] EXT4-fs (loop3): Remounting filesystem read-only [ 376.442641][T20208] EXT4-fs (loop3): 1 truncate cleaned up [ 376.498005][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 376.508585][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 376.519398][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 376.604121][T17044] bond0 (unregistering): Released all slaves [ 376.624226][T20207] __nla_validate_parse: 3 callbacks suppressed [ 376.624304][T20207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'. [ 376.639474][T20207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'. [ 376.847575][T17044] hsr_slave_0: left promiscuous mode [ 376.854743][T20228] loop2: detected capacity change from 0 to 1024 [ 376.861452][T17044] hsr_slave_1: left promiscuous mode [ 376.874184][T20228] EXT4-fs: Ignoring removed oldalloc option [ 376.891258][T20228] EXT4-fs: Ignoring removed bh option [ 376.952358][T17044] veth1_macvtap: left promiscuous mode [ 376.971032][T17044] veth0_macvtap: left promiscuous mode [ 377.089158][T17044] veth1_vlan: left promiscuous mode [ 377.094576][T17044] veth0_vlan: left promiscuous mode [ 377.229553][T20243] loop3: detected capacity change from 0 to 512 [ 377.293185][T20243] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 377.301440][T20243] EXT4-fs (loop3): orphan cleanup on readonly fs [ 377.311518][T20243] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5960: corrupted inode contents [ 377.324386][T20243] EXT4-fs (loop3): Remounting filesystem read-only [ 377.331122][T20243] EXT4-fs (loop3): 1 truncate cleaned up [ 377.552502][ T3429] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.563104][ T3429] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.615567][ T3429] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 377.697145][T20249] loop4: detected capacity change from 0 to 1024 [ 377.719440][T20249] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 377.787064][T20249] syz_tun: refused to change device tx_queue_len [ 377.835819][T20249] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5963: missing EA_INODE flag [ 377.898886][T20249] EXT4-fs (loop4): Remounting filesystem read-only [ 377.985087][T20260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=20260 comm=syz.2.5965 [ 378.028009][T20161] chnl_net:caif_netlink_parms(): no params data found [ 378.119200][T20274] loop4: detected capacity change from 0 to 1024 [ 378.138760][T20274] EXT4-fs: Ignoring removed orlov option [ 378.185271][T20161] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.192479][T20161] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.200600][T20161] bridge_slave_0: entered allmulticast mode [ 378.215639][T20161] bridge_slave_0: entered promiscuous mode [ 378.240378][T20161] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.247976][T20161] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.257391][T20161] bridge_slave_1: entered allmulticast mode [ 378.265748][T20161] bridge_slave_1: entered promiscuous mode [ 378.286500][T17044] IPVS: stop unused estimator thread 0... [ 378.321264][T20161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.336034][T20161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.392430][T20161] team0: Port device team_slave_0 added [ 378.399418][T20161] team0: Port device team_slave_1 added [ 378.449086][T20161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.456118][T20161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.482190][T20161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.538731][T20293] loop3: detected capacity change from 0 to 1024 [ 378.555414][T20293] EXT4-fs: Ignoring removed orlov option [ 378.569894][T20161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.577068][T20161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.603161][T20161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.693099][T20161] hsr_slave_0: entered promiscuous mode [ 378.705848][T20161] hsr_slave_1: entered promiscuous mode [ 378.718641][T20161] debugfs: 'hsr0' already exists in 'hsr' [ 378.724459][T20161] Cannot create hsr debugfs directory [ 378.879968][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 378.879986][ T29] audit: type=1326 audit(2000000207.450:30681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 378.910032][ T29] audit: type=1326 audit(2000000207.450:30682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 378.960369][T20311] loop4: detected capacity change from 0 to 1024 [ 378.980365][T20311] ext4: Unknown parameter 'uid<00000000000000000000' [ 378.989054][ T29] audit: type=1326 audit(2000000207.510:30683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.012983][ T29] audit: type=1326 audit(2000000207.510:30684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.036747][ T29] audit: type=1326 audit(2000000207.510:30685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.060557][ T29] audit: type=1326 audit(2000000207.530:30686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.084188][ T29] audit: type=1326 audit(2000000207.530:30687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.108058][ T29] audit: type=1326 audit(2000000207.530:30688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.131664][ T29] audit: type=1326 audit(2000000207.530:30689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 379.155479][ T29] audit: type=1326 audit(2000000207.530:30690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.4.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fefb2fef703 code=0x7ffc0000 [ 379.208025][T20311] netlink: 'syz.4.5970': attribute type 10 has an invalid length. [ 379.223834][T20311] team0: Port device dummy0 added [ 379.233967][T20311] netlink: 'syz.4.5970': attribute type 10 has an invalid length. [ 379.280832][T20311] team0: Port device dummy0 removed [ 379.298330][T20311] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.368436][T20322] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.443986][T20322] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.536330][T20344] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=20344 comm=syz.4.5974 [ 379.555803][T20322] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.586779][T20161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.600710][T20344] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5974'. [ 379.616367][T20322] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.648168][T20161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.662430][T20161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.695482][T20351] bridge0: port 1(macsec1) entered blocking state [ 379.702001][T20351] bridge0: port 1(macsec1) entered disabled state [ 379.719252][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5976'. [ 379.723694][T20351] macsec1: entered allmulticast mode [ 379.733696][T20351] bridge0: entered allmulticast mode [ 379.753285][T20351] macsec1: left allmulticast mode [ 379.758388][T20351] bridge0: left allmulticast mode [ 379.776762][T20161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.801304][T20355] bridge0: entered promiscuous mode [ 379.808646][T20355] bridge0: port 1(macsec1) entered blocking state [ 379.815252][T20355] bridge0: port 1(macsec1) entered disabled state [ 379.823210][T20355] macsec1: entered allmulticast mode [ 379.828543][T20355] bridge0: entered allmulticast mode [ 379.835484][T20355] macsec1: left allmulticast mode [ 379.840578][T20355] bridge0: left allmulticast mode [ 379.846585][T20355] bridge0: left promiscuous mode [ 379.877217][ T3466] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.912368][ T3466] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.944795][ T3466] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.977304][ T3466] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.018265][T20161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.030227][T20385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=20385 comm=syz.4.5978 [ 380.044713][T20376] loop2: detected capacity change from 0 to 1024 [ 380.065836][T20161] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.071749][T20376] EXT4-fs: test_dummy_encryption option not supported [ 380.076617][T20387] loop3: detected capacity change from 0 to 1024 [ 380.116714][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.123884][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.134026][T20387] EXT4-fs: Ignoring removed orlov option [ 380.162979][T20387] EXT4-fs mount: 79 callbacks suppressed [ 380.162999][T20387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.182618][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.189785][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.330509][T20161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.555495][T20376] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5977'. [ 380.577392][T20161] veth0_vlan: entered promiscuous mode [ 380.604824][T20161] veth1_vlan: entered promiscuous mode [ 380.643411][T11645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.654404][T20161] veth0_macvtap: entered promiscuous mode [ 380.664355][T20161] veth1_macvtap: entered promiscuous mode [ 380.685772][T20161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.703762][T20161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.714778][T20431] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 380.731208][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.752655][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.761889][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.777301][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.788879][T20433] loop3: detected capacity change from 0 to 512 [ 380.802912][T20433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 380.841286][T20433] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.5981: corrupted xattr entries [ 380.873576][T20433] EXT4-fs (loop3): Remounting filesystem read-only [ 380.893934][T20433] EXT4-fs (loop3): 1 truncate cleaned up [ 380.900557][T20442] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.915162][T20433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.966178][T20433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.043293][T20442] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.110519][T20453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5984'. [ 381.119789][T20453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5984'. [ 381.131025][T20442] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.141089][T20453] loop4: detected capacity change from 0 to 512 [ 381.153820][T20453] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 381.161816][T20453] EXT4-fs (loop4): orphan cleanup on readonly fs [ 381.170023][T20453] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5984: corrupted inode contents [ 381.185537][T20453] EXT4-fs (loop4): Remounting filesystem read-only [ 381.192285][T20453] EXT4-fs (loop4): 1 truncate cleaned up [ 381.202910][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 381.213536][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 381.227576][ T58] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 381.244767][T20442] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.253049][T20453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.263034][T20467] usb usb1: check_ctrlrecip: process 20467 (syz.0.5986) requesting ep 01 but needs 81 [ 381.283117][T20467] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 381.344561][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.369833][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.408362][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.457892][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.547296][T20479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.582475][T20476] loop3: detected capacity change from 0 to 8192 [ 381.582535][T20479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.644713][T20476] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.842624][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.014684][T20497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=20497 comm=syz.4.5992 [ 382.033764][T20499] FAULT_INJECTION: forcing a failure. [ 382.033764][T20499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.046888][T20499] CPU: 0 UID: 0 PID: 20499 Comm: syz.3.5993 Not tainted syzkaller #0 PREEMPT(voluntary) [ 382.046934][T20499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.046949][T20499] Call Trace: [ 382.046958][T20499] [ 382.046967][T20499] __dump_stack+0x1d/0x30 [ 382.047073][T20499] dump_stack_lvl+0xe8/0x140 [ 382.047097][T20499] dump_stack+0x15/0x1b [ 382.047114][T20499] should_fail_ex+0x265/0x280 [ 382.047148][T20499] should_fail+0xb/0x20 [ 382.047197][T20499] should_fail_usercopy+0x1a/0x20 [ 382.047225][T20499] strncpy_from_user+0x25/0x230 [ 382.047260][T20499] ? kmem_cache_alloc_noprof+0x242/0x480 [ 382.047308][T20499] ? getname_flags+0x80/0x3b0 [ 382.047349][T20499] getname_flags+0xae/0x3b0 [ 382.047389][T20499] do_sys_openat2+0x60/0x110 [ 382.047489][T20499] __x64_sys_openat+0xf2/0x120 [ 382.047518][T20499] x64_sys_call+0x2eab/0x3000 [ 382.047543][T20499] do_syscall_64+0xd2/0x200 [ 382.047570][T20499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 382.047603][T20499] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 382.047667][T20499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.047696][T20499] RIP: 0033:0x7f70919adf10 [ 382.047715][T20499] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 382.047789][T20499] RSP: 002b:00007f7090416b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 382.047863][T20499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70919adf10 [ 382.047879][T20499] RDX: 0000000000000000 RSI: 00007f7090416c10 RDI: 00000000ffffff9c [ 382.047957][T20499] RBP: 00007f7090416c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 382.047974][T20499] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 382.047990][T20499] R13: 00007f7091c06038 R14: 00007f7091c05fa0 R15: 00007ffd61fb9338 [ 382.048014][T20499] [ 382.451432][T20513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5995'. [ 382.461018][T20513] netlink: 'syz.0.5995': attribute type 1 has an invalid length. [ 382.468888][T20513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5995'. [ 382.903028][T20516] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5996'. [ 383.283971][ T37] bond0 (unregistering): Released all slaves [ 383.469641][T20520] loop0: detected capacity change from 0 to 512 [ 383.476219][ T37] hsr_slave_0: left promiscuous mode [ 383.482109][ T37] hsr_slave_1: left promiscuous mode [ 383.500747][T20520] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 383.508851][T20520] EXT4-fs (loop0): orphan cleanup on readonly fs [ 383.528934][T20520] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 383.540626][T20520] EXT4-fs (loop0): Remounting filesystem read-only [ 383.547318][T20520] EXT4-fs (loop0): 1 truncate cleaned up [ 383.562247][T17044] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 383.572871][T17044] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 383.607704][T20451] chnl_net:caif_netlink_parms(): no params data found [ 383.618586][T17044] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 383.629876][T20520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.669505][T20541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5998'. [ 383.704348][T20451] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.711571][T20451] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.722086][T20451] bridge_slave_0: entered allmulticast mode [ 383.729371][T20451] bridge_slave_0: entered promiscuous mode [ 383.736856][T20451] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.744129][T20451] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.752398][T20451] bridge_slave_1: entered allmulticast mode [ 383.759414][T20451] bridge_slave_1: entered promiscuous mode [ 383.781163][T20451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.795343][T20451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.834676][T20451] team0: Port device team_slave_0 added [ 383.842991][T20451] team0: Port device team_slave_1 added [ 383.888792][T20451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.895804][T20451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.921821][T20451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.965188][T20451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.972238][T20451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.998381][T20451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.015124][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 384.015138][ T29] audit: type=1326 audit(2000000212.590:30805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20560 comm="syz.1.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3109f6c9 code=0x7ffc0000 [ 384.047849][ T29] audit: type=1326 audit(2000000212.590:30806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20560 comm="syz.1.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3109f6c9 code=0x7ffc0000 [ 384.071542][ T29] audit: type=1326 audit(2000000212.590:30807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20560 comm="syz.1.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fbf3109f6c9 code=0x7ffc0000 [ 384.095056][ T29] audit: type=1326 audit(2000000212.590:30808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20560 comm="syz.1.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3109f6c9 code=0x7ffc0000 [ 384.118790][ T29] audit: type=1326 audit(2000000212.590:30809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20560 comm="syz.1.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3109f6c9 code=0x7ffc0000 [ 384.170070][T20566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6001'. [ 384.203882][T20161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.326261][T20451] hsr_slave_0: entered promiscuous mode [ 384.350879][T20451] hsr_slave_1: entered promiscuous mode [ 384.390125][T20589] loop0: detected capacity change from 0 to 1024 [ 384.404131][T20589] EXT4-fs: Ignoring removed orlov option [ 384.415248][T20589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.459892][T20595] loop4: detected capacity change from 0 to 512 [ 384.484680][T20595] EXT4-fs: Ignoring removed bh option [ 384.494729][T20161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.504310][T20599] loop3: detected capacity change from 0 to 1024 [ 384.511468][T20599] EXT4-fs: Ignoring removed orlov option [ 384.517880][T20595] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.6006: corrupted in-inode xattr: invalid ea_ino [ 384.532096][T20595] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6006: couldn't read orphan inode 15 (err -117) [ 384.546492][T20599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.591892][T20595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.607315][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6003'. [ 384.616403][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6003'. [ 384.678376][T20605] loop1: detected capacity change from 0 to 512 [ 384.695791][ T29] audit: type=1326 audit(2000000213.270:30810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 384.719451][ T29] audit: type=1326 audit(2000000213.270:30811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 384.743164][ T29] audit: type=1326 audit(2000000213.270:30812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 384.766854][ T29] audit: type=1326 audit(2000000213.270:30813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 384.790518][ T29] audit: type=1326 audit(2000000213.270:30814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb2fef6c9 code=0x7ffc0000 [ 384.814739][T20605] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 384.831236][T20605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 384.838675][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.863889][T20605] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.6003: corrupted inode contents [ 384.964870][T20605] EXT4-fs (loop1): Remounting filesystem read-only [ 384.994305][T20605] EXT4-fs (loop1): 1 truncate cleaned up [ 385.002559][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.013233][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.024684][T20613] bridge0: entered promiscuous mode [ 385.060394][T20613] bridge0: port 1(macsec1) entered blocking state [ 385.063155][ T58] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 385.067093][T20613] bridge0: port 1(macsec1) entered disabled state [ 385.086521][T20605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.110448][T20605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.127039][T20613] macsec1: entered allmulticast mode [ 385.132413][T20613] bridge0: entered allmulticast mode [ 385.138619][T20613] macsec1: left allmulticast mode [ 385.143726][T20613] bridge0: left allmulticast mode [ 385.161962][T20613] bridge0: left promiscuous mode [ 385.276748][T20624] loop4: detected capacity change from 0 to 512 [ 385.297250][T20624] EXT4-fs: Ignoring removed bh option [ 385.311174][T11645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.321922][T20624] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.6010: corrupted in-inode xattr: invalid ea_ino [ 385.349636][T20624] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6010: couldn't read orphan inode 15 (err -117) [ 385.406419][T20624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.444299][T20632] netlink: 'syz.0.6012': attribute type 1 has an invalid length. [ 385.482453][T20624] IPv6: addrconf: prefix option has invalid lifetime [ 385.495570][T20451] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.522904][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.549123][T20451] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.582649][T20642] netlink: 'syz.0.6015': attribute type 10 has an invalid length. [ 385.582991][T20451] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.629638][T20451] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.691058][T20652] loop4: detected capacity change from 0 to 1024 [ 385.694277][T20642] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 385.724166][T20652] EXT4-fs: Ignoring removed oldalloc option [ 385.734199][T20650] loop3: detected capacity change from 0 to 2048 [ 385.760125][T20652] EXT4-fs: Ignoring removed bh option [ 385.767573][T20661] loop0: detected capacity change from 0 to 512 [ 385.788217][T20652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.800846][T20661] EXT4-fs: Ignoring removed bh option [ 385.813182][T11012] Alternate GPT is invalid, using primary GPT. [ 385.819496][T11012] loop3: p1 p2 p3 [ 385.823271][T11012] loop3: partition table partially beyond EOD, truncated [ 385.838522][T20661] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.6017: corrupted in-inode xattr: invalid ea_ino [ 385.853021][T20451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.876400][T20650] Alternate GPT is invalid, using primary GPT. [ 385.877338][T20673] loop1: detected capacity change from 0 to 512 [ 385.882871][T20650] loop3: p1 p2 p3 [ 385.891385][T20673] EXT4-fs: Ignoring removed bh option [ 385.892818][T20650] loop3: partition table partially beyond EOD, truncated [ 385.900915][T20673] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.6018: corrupted in-inode xattr: invalid ea_ino [ 385.914539][T20451] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.925832][T20673] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6018: couldn't read orphan inode 15 (err -117) [ 385.940652][T20673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.941405][T20661] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6017: couldn't read orphan inode 15 (err -117) [ 385.973596][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.980827][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.004170][T20661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.020337][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.025793][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.027459][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.051289][T12148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.106655][T20451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.143108][T20661] IPv6: addrconf: prefix option has invalid lifetime [ 386.162005][T20686] loop1: detected capacity change from 0 to 1024 [ 386.179845][T20686] ext4: Unknown parameter 'uid<00000000000000000000' [ 386.189377][T20161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.214570][T11322] udevd[11322]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 386.215687][T17309] udevd[17309]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 386.242966][T11012] udevd[11012]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 386.264056][T20687] loop4: detected capacity change from 0 to 1024 [ 386.277109][T20682] loop3: detected capacity change from 0 to 1024 [ 386.286182][T20686] netlink: 'syz.1.6020': attribute type 10 has an invalid length. [ 386.292981][T20687] EXT4-fs: Ignoring removed orlov option [ 386.300382][T20693] 9p: Unknown access argument : -22 [ 386.328361][T20687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.341771][T20682] EXT4-fs: Ignoring removed oldalloc option [ 386.357830][T20686] team0: Port device dummy0 added [ 386.363168][T20699] netlink: 'syz.1.6020': attribute type 10 has an invalid length. [ 386.363347][T11322] udevd[11322]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 386.371260][T20682] EXT4-fs: Ignoring removed bh option [ 386.383490][T11320] udevd[11320]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 386.403937][T11012] udevd[11012]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 386.432813][T20699] team0: Port device dummy0 removed [ 386.455928][T20699] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 386.469810][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6023'. [ 386.486934][T20682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.546910][T20451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.619049][T20719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6026'. [ 386.631044][T20719] netlink: 'syz.1.6026': attribute type 1 has an invalid length. [ 386.638978][T20719] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6026'. [ 386.712782][T11645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.721943][T20727] netlink: 'syz.1.6027': attribute type 10 has an invalid length. [ 386.759018][T20732] loop0: detected capacity change from 0 to 512 [ 386.777019][T20732] EXT4-fs: Ignoring removed bh option [ 386.807074][T20732] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.6029: corrupted in-inode xattr: invalid ea_ino [ 386.823937][T20732] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6029: couldn't read orphan inode 15 (err -117) [ 386.843336][T20732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.880465][T20161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.889906][T20738] loop3: detected capacity change from 0 to 1024 [ 386.893995][T20451] veth0_vlan: entered promiscuous mode [ 386.898915][T20738] EXT4-fs: Ignoring removed orlov option [ 386.940423][T20451] veth1_vlan: entered promiscuous mode [ 386.956257][T20748] loop0: detected capacity change from 0 to 1024 [ 386.965703][T20748] EXT4-fs: Ignoring removed orlov option [ 386.973653][T20738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.006653][T20748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.036444][T20451] veth0_macvtap: entered promiscuous mode [ 387.057856][T20451] veth1_macvtap: entered promiscuous mode [ 387.069692][T20451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.078830][T20451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.094334][ T3429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.109040][T11862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.135654][ T3429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.158391][ T3429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.167629][T20161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.189260][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.267258][T20763] loop0: detected capacity change from 0 to 1024 [ 387.268565][T20770] loop2: detected capacity change from 0 to 1024 [ 387.293182][T20763] ext4: Unknown parameter 'uid<00000000000000000000' [ 387.309798][T20770] EXT4-fs: Ignoring removed orlov option [ 387.344362][T20770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.354369][T20769] loop1: detected capacity change from 0 to 1024 [ 387.363855][T20769] EXT4-fs: test_dummy_encryption option not supported [ 387.526176][T20770] ================================================================== [ 387.534340][T20770] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 387.543586][T20770] [ 387.545944][T20770] write to 0xffff88811a1028b8 of 4 bytes by task 20787 on cpu 0: [ 387.553771][T20770] writeback_single_inode+0x150/0x3f0 [ 387.559209][T20770] sync_inode_metadata+0x5b/0x90 [ 387.564288][T20770] generic_buffers_fsync_noflush+0xd9/0x120 [ 387.570312][T20770] ext4_sync_file+0x1ab/0x690 [ 387.575046][T20770] vfs_fsync_range+0x10d/0x130 [ 387.579945][T20770] ext4_buffered_write_iter+0x34f/0x3c0 [ 387.585512][T20770] ext4_file_write_iter+0x387/0xf60 [ 387.590748][T20770] iter_file_splice_write+0x666/0xa60 [ 387.596164][T20770] direct_splice_actor+0x156/0x2a0 [ 387.601319][T20770] splice_direct_to_actor+0x312/0x680 [ 387.606819][T20770] do_splice_direct+0xda/0x150 [ 387.611623][T20770] do_sendfile+0x380/0x650 [ 387.616103][T20770] __x64_sys_sendfile64+0x105/0x150 [ 387.621362][T20770] x64_sys_call+0x2bb4/0x3000 [ 387.626086][T20770] do_syscall_64+0xd2/0x200 [ 387.630712][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.636635][T20770] [ 387.639012][T20770] read to 0xffff88811a1028b8 of 4 bytes by task 20770 on cpu 1: [ 387.646659][T20770] generic_buffers_fsync_noflush+0x80/0x120 [ 387.652607][T20770] ext4_sync_file+0x1ab/0x690 [ 387.657317][T20770] vfs_fsync_range+0x10d/0x130 [ 387.662106][T20770] ext4_buffered_write_iter+0x34f/0x3c0 [ 387.667775][T20770] ext4_file_write_iter+0x387/0xf60 [ 387.673005][T20770] iter_file_splice_write+0x666/0xa60 [ 387.678445][T20770] direct_splice_actor+0x156/0x2a0 [ 387.683594][T20770] splice_direct_to_actor+0x312/0x680 [ 387.689002][T20770] do_splice_direct+0xda/0x150 [ 387.693890][T20770] do_sendfile+0x380/0x650 [ 387.698372][T20770] __x64_sys_sendfile64+0x105/0x150 [ 387.703622][T20770] x64_sys_call+0x2bb4/0x3000 [ 387.708335][T20770] do_syscall_64+0xd2/0x200 [ 387.712876][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.718805][T20770] [ 387.721212][T20770] value changed: 0x00000070 -> 0x00000002 [ 387.726958][T20770] [ 387.729302][T20770] Reported by Kernel Concurrency Sanitizer on: [ 387.735462][T20770] CPU: 1 UID: 0 PID: 20770 Comm: syz.2.5985 Not tainted syzkaller #0 PREEMPT(voluntary) [ 387.745308][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.755394][T20770] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.124432][T20756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.206131][T18925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.294037][T18925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.343835][T18925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.434153][T18925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.493952][T18925] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.553915][T18925] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.633952][T18925] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.713843][T18925] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.775328][T18925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.843788][T18925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.894366][T18925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.963712][T18925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.056596][T18925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.155787][T18925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.205221][T18925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.263279][T18925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.299810][T20770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.373619][T18925] bridge_slave_1: left allmulticast mode [ 389.379308][T18925] bridge_slave_1: left promiscuous mode [ 389.384997][T18925] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.393841][T18925] bridge_slave_0: left allmulticast mode [ 389.399552][T18925] bridge_slave_0: left promiscuous mode [ 389.405305][T18925] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.693406][T18925] bond1 (unregistering): (slave bridge2): Releasing active interface [ 390.514113][T18925] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 390.522761][T18925] bond0 (unregistering): Released all slaves [ 390.531499][T18925] bond1 (unregistering): Released all slaves [ 391.644169][T18925] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 391.653450][T18925] bond0 (unregistering): Released all slaves [ 393.053803][T18925] bond0 (unregistering): Released all slaves [ 393.062004][T18925] bond1 (unregistering): Released all slaves [ 393.114186][T18925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.124126][T18925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.134102][T18925] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 393.143625][T18925] bond0 (unregistering): Released all slaves [ 393.268223][T18925] hsr_slave_0: left promiscuous mode [ 393.273946][T18925] hsr_slave_1: left promiscuous mode [ 393.281208][T18925] hsr_slave_0: left promiscuous mode [ 393.289296][T18925] hsr_slave_1: left promiscuous mode [ 393.296381][T18925] hsr_slave_0: left promiscuous mode [ 393.302526][T18925] hsr_slave_1: left promiscuous mode [ 393.309516][T18925] hsr_slave_0: left promiscuous mode [ 393.316084][T18925] hsr_slave_1: left promiscuous mode [ 393.321697][T18925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.329108][T18925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.336776][T18925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.344230][T18925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.357974][T18925] veth1_macvtap: left promiscuous mode [ 393.363480][T18925] veth0_macvtap: left promiscuous mode [ 393.368982][T18925] veth1_vlan: left promiscuous mode [ 393.374238][T18925] veth0_vlan: left promiscuous mode [ 393.379922][T18925] veth1_macvtap: left promiscuous mode [ 393.385425][T18925] veth0_macvtap: left promiscuous mode [ 393.390921][T18925] veth1_vlan: left promiscuous mode [ 393.396289][T18925] veth0_vlan: left promiscuous mode [ 393.402017][T18925] veth1_macvtap: left promiscuous mode [ 393.407531][T18925] veth0_macvtap: left promiscuous mode [ 393.413082][T18925] veth1_vlan: left promiscuous mode [ 393.418294][T18925] veth0_vlan: left promiscuous mode [ 393.424620][T18925] veth1_macvtap: left promiscuous mode [ 393.430206][T18925] veth0_macvtap: left promiscuous mode [ 393.435737][T18925] veth1_vlan: left promiscuous mode [ 393.440963][T18925] veth0_vlan: left promiscuous mode [ 393.702144][ T37] smc: removing ib device syz! [ 393.741003][T18925] team0 (unregistering): Port device team_slave_1 removed [ 393.750581][T18925] team0 (unregistering): Port device team_slave_0 removed [ 394.816576][T18925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.875329][T18925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.944662][T18925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.016472][T18925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.098390][T18925] bridge_slave_1: left allmulticast mode [ 395.104147][T18925] bridge_slave_1: left promiscuous mode [ 395.109895][T18925] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.117732][T18925] bridge_slave_0: left allmulticast mode [ 395.123442][T18925] bridge_slave_0: left promiscuous mode [ 395.129084][T18925] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.195725][T18925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.205344][T18925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.215595][T18925] bond0 (unregistering): Released all slaves [ 395.266909][T18925] hsr_slave_0: left promiscuous mode [ 395.273243][T18925] hsr_slave_1: left promiscuous mode [ 395.278961][T18925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.286647][T18925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.294925][T18925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.302476][T18925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.312996][T18925] veth1_macvtap: left promiscuous mode [ 395.318527][T18925] veth0_macvtap: left promiscuous mode [ 395.324797][T18925] veth1_vlan: left promiscuous mode [ 395.330069][T18925] veth0_vlan: left promiscuous mode [ 395.395016][T18925] team0 (unregistering): Port device team_slave_1 removed [ 395.404334][T18925] team0 (unregistering): Port device team_slave_0 removed