last executing test programs: 47.959254886s ago: executing program 0 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 47.880321659s ago: executing program 0 (id=1451): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380"], 0xfc}}, 0x804) 47.783671623s ago: executing program 0 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 47.747070285s ago: executing program 0 (id=1454): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000540)={0x3, 0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/151, 0x97}], &(0x7f0000000500)=[0x6, 0x9, 0x7]}, 0x20) 47.62970913s ago: executing program 0 (id=1457): syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[], 0x0) 47.557526743s ago: executing program 0 (id=1459): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0xf}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 32.454944243s ago: executing program 32 (id=1459): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0xf}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 5.700591311s ago: executing program 4 (id=2296): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe1f) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_clone(0x4010100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 5.018772121s ago: executing program 4 (id=2314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.974716983s ago: executing program 4 (id=2316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) acct(0x0) 4.889722756s ago: executing program 4 (id=2319): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001480)={0x0, 0x64, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB]) 2.417259925s ago: executing program 3 (id=2352): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = fcntl$getown(r4, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, &(0x7f00000001c0)="40d8e52757acc568037e7f08711b1ae54013c3aceb11548814f27710507690783632bf6f5e9fc2861c4606e73ca6fc805e8039dabc932d3d38d3de56f30004d20bd38a670adf78da6c47662c056af764de1db20f4700e269619c9493e6bb", &(0x7f0000000100)=""/39, 0x4}, 0x20) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) tgkill(r5, r9, 0x8) 2.338288418s ago: executing program 1 (id=2353): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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") open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 2.113556928s ago: executing program 1 (id=2355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.999064003s ago: executing program 1 (id=2357): setresuid(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.82727748s ago: executing program 4 (id=2359): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9", 0xa) r1 = syz_clone(0x80100000, &(0x7f00000007c0)="cfbdbd08e9d5fcd07c5e9f18b29d9f62995e99483705ef383aa18ab2faa0c4cba893c9f4352ec1dbdb677f4d1e57504762d2fe95ace96d98101da4014aaf640596c224b688fb3811d4873cfe7c09dbc79f97c525e2963465b103f4b2543a0924e343473cd4effd086028972b3f3c35a79d9303d7f3b15626e1b75f11e1b14649711722", 0x83, &(0x7f0000000640), &(0x7f0000000740), &(0x7f0000000880)="bee297fc5cc4020b1e0511428dc8e9a308519622572b6b309d729c445a6575c6d1fc1e66e14e5e0c814a10055b20e0425bafd555832bafdc44ff40a1c8464f947d29e8c68ca569a06e4bbd23b639d695e612cad39a81b3d16539838ae63d5ee7235067d864f5932d783592d5b2a783fa8f") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210d, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000980), 0xb}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x4cfc0280, 0x0, 0x1000000000000}, r1, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ffff0000000000000055540000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0xa) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.800772721s ago: executing program 3 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 1.777897762s ago: executing program 3 (id=2361): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x5}, 0x105d34, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x100, 0x4000000, 0x70, 0x0, &(0x7f00000002c0)="37598b027ec60d5dfeb5fa7767d2fa8251c519bc8e2a984e4abf3271624f59f745cb51ca07e192bfba8ad779094928f1e29be992d0a8ebcfe20da61ade0f5b6c277268fbf901d12b348b0ee490aaa7aca602c2e1fe0b8cdf9fb47cd0e86302087616dcba9777801ae153fe79f225b6cb", 0x0, 0x0, 0x4}, 0x50) r4 = socket(0x1e, 0x80004, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000010000000000000000000000b700000000000000"], 0x50) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x2, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) write$tun(r6, 0x0, 0x0) r7 = io_uring_setup(0x4cd2, &(0x7f0000000180)={0x0, 0x782d, 0x12e01, 0x1, 0x96, 0x0, r6}) io_uring_enter(r7, 0x3983, 0x9e1, 0xc, &(0x7f00000000c0), 0x8) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000000000000005000000020000", @ANYRES32=r9, @ANYBLOB="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"], 0x50) r10 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00', @ANYRES32=r12, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r13 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_redirect(r13, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) inotify_init() 1.741949894s ago: executing program 5 (id=2362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000059c0)=@newtaction={0x8c, 0x30, 0x0, 0xfffffffe, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7f, 0xd08, 0x1, 0x16e3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x9c}}, 0xb81f28d919e80ac) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff040000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) r4 = syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRES16=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x1b, 0x0, 0x4f, 0x0, 0x400e7}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = inotify_init1(0x80800) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r4, @ANYRESOCT=r7, @ANYRES16=r7, @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYBLOB="4d06562baec51280be922e404f9a8ae759b79747c7d78487b0556cf0f3e1173efc28df2b8c1b1f1273cf8c5ad974d65ce90f4ae5f2a1"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) close(r8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0xa45) 1.691269936s ago: executing program 2 (id=2363): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0xf8, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x8, 0x2, 0x0, 0x15a0}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000040000009c000000000000001800000000000000290000003600000002275282e3000000"], 0x30}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r1, 0x700, 0x1, 0x1, 0x9, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000400000000000000180100002020702500000000002020207b1af8df00000000bfa10000000000000701000000ffffffb702000008000000b703000000000000850000007200000095e4f456758e3a02527454191cb0804b671740f292b74ae6c9ec3e1a6e7876774fd10aa5b8f018c68e40ce578af6dbf99aec722e"], &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000400000000000000180100002020702500000000002020207b1af8df00000000bfa10000000000000701000000ffffffb702000008000000b703000000000000850000007200000095e4f456758e3a02527454191cb0804b671740f292b74ae6c9ec3e1a6e7876774fd10aa5b8f018c68e40ce578af6dbf99aec722e"], &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) (async) unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) (async) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r8, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 1.561595722s ago: executing program 3 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) close_range(r4, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18ceb698c0aa10ccfc", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd0499ec33ebac6c9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000000400000008000000"], 0x50) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000000280), 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x10000, 0x2, 0x6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_emit_ethernet(0x66, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000010000008500000086000000953dba3281abc11b55c5562ccf08d7d53de1e19558e521c31b60386c0903d74bac010371f8f27a10186f7237896c6a0311f11c517aa302ed243835"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x6, 0x1200) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 1.501755385s ago: executing program 5 (id=2365): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380"], 0xfc}}, 0x804) 1.458873297s ago: executing program 5 (id=2366): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 1.231326216s ago: executing program 5 (id=2367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE1MzOzPttt3dbrfQCvv5JNM+z8wzL99n5pmd2Wd2AmhbA9mfJKI3In6JiL48u7DAQP7v+tUL439evTCexOzsC38klXLXrl4YL4uW820uMoNpRPp2ErtrrHfq3PmTY5OTE2eL/PD0qdeGp86df/jEqbHjE8cnTo8ePnzo4Mhjj44+0lQcF5eZnsV1bdebZ/bsPPLSe8+Oz8bL332cbW9vMb06jlx/U+ttZCAGYrYwP7ar8vf+VS/9v2VLRHQX6WTDOm8MTeuIiGx3dVbaf190xPzO64tn3prLfLVOGwjcNNln07YlYzuK/+nc5xdwO0q0cWhT5Sd+dv9bDmt5/bHerjyZ/Z2oxH+9GH54Lq+bNLuX7c/v2DvqzP//GuN65pOzfcusvzcijs789X42RM3vIRpImi4JADDni+z656Fa13/pgmubrUUfSn9E7I+I7RHxv4jYEelcmTsi4s4Vrn9gUX7p9c9PG1e4yBXJrv8eL/q2yiGfUsaVzOW2VOLvTF45MTlxoKiTwejszvIjDdbx5dM/v1tv2kDV9V82ZOsvrwWL7fh9Q/fCeY6NTY+tIuQFrlyKJDbUij+Z6wnIamBnROxqYflZnZ148KM9WXrr5qXTl4+/gRvQzzT7YcQD+f6fiUXxl5J8TfX6J4d7YnLiwHB5VCz1/Y+Xn6/Od1alF8Tf01xMPa0GW8OVSxGbah7/RfxlMyj7a6eK/Ne9Ta/j8q/v1L2nWbr/kzg6U12iOP43zldbdvx3JS9W0l3FuDfGpqfPjkR8XoxYMH50fmllviyfxT+4b2H8+X1xmp3j/vmgmG93RGQH8V0RcXdE7C22/Z6IuDci9jWI/9un7nu1cQ21ePzfAFn8xxrt/4j+pLq/voVEx8lvPqu3/ubOf4cqqcFiTPX5r6vOcpvdwNXWHwAAANwK0kofdJIOVT2/XdoRm9LJM1PT+wfi9dPH8r7q/uhMy2+6+qq+Dx0pvhsu86OL8gcjYlvlSaONlfzQ+JnJLesUM5DbXNX+83NBmg4N5dN+q/fQC3D7WFE/WvVDZ598euM3BlhTfq8J7Uv7h/al/UP70v6hfdVq/xcjrq/DpgBrrNXP/8UPDAC3Htf/0L60f2hf2j+0paU/iS9et5KdE1r/yf/k9iOreWPAzU/M9rU+e9SfNLPyBXY0V7h8+0XTS26ucBJRhpM2iKtGItL5MX8Xb5OsjOnMy3Q1v6lrn0iXLfPEcrXRuaJ3YvTUqI29RaI7IppdzsU1q9XyDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//knXm/A==") prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstatfs(r7, &(0x7f00000000c0)=""/36) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000bfff000009"], 0x48) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700"/23, 0x17}], 0x15, 0x2009c00, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'macsec0\x00', &(0x7f0000000200)=@ethtool_wolinfo={0x5, 0x5, 0x36, "8cfa564b4117"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) fremovexattr(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="77aa18023479e2ee89"]) 1.230452937s ago: executing program 3 (id=2368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1d38, &(0x7f0000000340)={0x0, 0xc9e6, 0x10100, 0x2, 0x20e}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x14000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 1.158650439s ago: executing program 3 (id=2369): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9", 0xa) r1 = syz_clone(0x80100000, &(0x7f00000007c0)="cfbdbd08e9d5fcd07c5e9f18b29d9f62995e99483705ef383aa18ab2faa0c4cba893c9f4352ec1dbdb677f4d1e57504762d2fe95ace96d98101da4014aaf640596c224b688fb3811d4873cfe7c09dbc79f97c525e2963465b103f4b2543a0924e343473cd4effd086028972b3f3c35a79d9303d7f3b15626e1b75f11e1b14649711722", 0x83, &(0x7f0000000640), &(0x7f0000000740), &(0x7f0000000880)="bee297fc5cc4020b1e0511428dc8e9a308519622572b6b309d729c445a6575c6d1fc1e66e14e5e0c814a10055b20e0425bafd555832bafdc44ff40a1c8464f947d29e8c68ca569a06e4bbd23b639d695e612cad39a81b3d16539838ae63d5ee7235067d864f5932d783592d5b2a783fa8f") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210d, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000980), 0xb}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x4cfc0280, 0x0, 0x1000000000000}, r1, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ffff000000000000005554", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = creat(&(0x7f0000000340)='./file0\x00', 0xa) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000900), &(0x7f0000000940)=0x4) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 947.141408ms ago: executing program 4 (id=2370): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9", 0xa) r1 = syz_clone(0x80100000, &(0x7f00000007c0)="cfbdbd08e9d5fcd07c5e9f18b29d9f62995e99483705ef383aa18ab2faa0c4cba893c9f4352ec1dbdb677f4d1e57504762d2fe95ace96d98101da4014aaf640596c224b688fb3811d4873cfe7c09dbc79f97c525e2963465b103f4b2543a0924e343473cd4effd086028972b3f3c35a79d9303d7f3b15626e1b75f11e1b14649711722", 0x83, &(0x7f0000000640), &(0x7f0000000740), &(0x7f0000000880)="bee297fc5cc4020b1e0511428dc8e9a308519622572b6b309d729c445a6575c6d1fc1e66e14e5e0c814a10055b20e0425bafd555832bafdc44ff40a1c8464f947d29e8c68ca569a06e4bbd23b639d695e612cad39a81b3d16539838ae63d5ee7235067d864f5932d783592d5b2a783fa8f") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210d, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000980), 0xb}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x4cfc0280, 0x0, 0x1000000000000}, r1, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ffff0000000000000055540000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0xa) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 813.005245ms ago: executing program 1 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 675.48077ms ago: executing program 2 (id=2372): r0 = syz_io_uring_setup(0x3d46, &(0x7f0000000480)={0x0, 0x5121, 0x400, 0x1, 0x257}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x1, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x6, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 608.954703ms ago: executing program 2 (id=2373): acct(0x0) 604.344684ms ago: executing program 1 (id=2374): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 600.631684ms ago: executing program 5 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 559.204746ms ago: executing program 5 (id=2376): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@discard}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) pread64(r0, 0x0, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000000)=0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0) recvmsg$can_j1939(r6, &(0x7f0000000940)={&(0x7f0000000480)=@caif=@util, 0x80, &(0x7f0000001100)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/26, 0x1a}, {&(0x7f0000000f00)=""/254, 0xfe}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000001000)=""/239, 0xef}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000800)=""/81, 0x51}], 0x9, &(0x7f0000002300)=""/245, 0xf5}, 0x40000143) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000700000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000440)={[], [{@permit_directio}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r10], 0x0, 0x34, 0x0, 0x0, 0x2}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 367.430184ms ago: executing program 1 (id=2377): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c002b8f83e2d2e66a0bb544f42aae67d92e7037cdc2bcd21e24e7cb7ef1408ebf6a43d8856196b2168be06710edca851ad15784e47de3dfca874bee87172ad275684eaf60662c01e24f0e5fbea61db423e7aefbb6aafb786f5b6d8ae8cded55bb96a1fbf31ec087e59c1912a195a03e0d486d484844e754687be5f20000d983f79d50cb7cc51ece2adfd2648d3035df797f07bf"]) 367.165924ms ago: executing program 2 (id=2378): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 82.901826ms ago: executing program 2 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1d38, &(0x7f0000000340)={0x0, 0xc9e6, 0x10100, 0x2, 0x20e}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x14000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2380): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9", 0xa) r1 = syz_clone(0x80100000, &(0x7f00000007c0)="cfbdbd08e9d5fcd07c5e9f18b29d9f62995e99483705ef383aa18ab2faa0c4cba893c9f4352ec1dbdb677f4d1e57504762d2fe95ace96d98101da4014aaf640596c224b688fb3811d4873cfe7c09dbc79f97c525e2963465b103f4b2543a0924e343473cd4effd086028972b3f3c35a79d9303d7f3b15626e1b75f11e1b14649711722", 0x83, &(0x7f0000000640), &(0x7f0000000740), &(0x7f0000000880)="bee297fc5cc4020b1e0511428dc8e9a308519622572b6b309d729c445a6575c6d1fc1e66e14e5e0c814a10055b20e0425bafd555832bafdc44ff40a1c8464f947d29e8c68ca569a06e4bbd23b639d695e612cad39a81b3d16539838ae63d5ee7235067d864f5932d783592d5b2a783fa8f") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210d, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000980), 0xb}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x4cfc0280, 0x0, 0x1000000000000}, r1, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ffff0000000000000055540000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0xa) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 00-000000000000 ro without journal. Quota mode: writeback. [ 134.758863][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.778772][ T7732] __nla_validate_parse: 10 callbacks suppressed [ 134.778852][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1385'. [ 135.093043][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1394'. [ 135.227262][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.302366][ T7747] EXT4-fs: test_dummy_encryption option not supported [ 135.313062][ T7766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.349134][ T7766] EXT4-fs (loop0): 1 truncate cleaned up [ 135.392891][ T7766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.413387][ T7775] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.447873][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1406'. [ 135.462867][ T7775] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.561432][ T7788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.573040][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.585164][ T7788] EXT4-fs (loop2): 1 truncate cleaned up [ 135.601147][ T7785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.617413][ T7788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.650188][ T7791] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1410'. [ 135.681386][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.745964][ T7799] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1413'. [ 135.869623][ T7811] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 135.884649][ T7812] wireguard0: entered promiscuous mode [ 135.890190][ T7812] wireguard0: entered allmulticast mode [ 135.937511][ T7811] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.949516][ T7811] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 135.982350][ T7811] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.999166][ T7811] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.1418: Inode bitmap for bg 0 marked uninitialized [ 136.034041][ T7811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.066971][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.096758][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 136.135073][ T7833] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.147338][ T7833] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.405893][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.425182][ T7845] batadv_slave_1: entered promiscuous mode [ 136.431444][ T7835] lo speed is unknown, defaulting to 1000 [ 136.495940][ T7847] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.570795][ T7847] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.586876][ T7844] batadv_slave_1: left promiscuous mode [ 136.785179][ T7860] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.811800][ T7860] EXT4-fs: inline encryption not supported [ 136.825319][ T7860] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.837230][ T7860] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1433: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.852181][ T7860] EXT4-fs (loop0): Remounting filesystem read-only [ 136.858802][ T7860] __quota_error: 476 callbacks suppressed [ 136.858815][ T7860] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 136.874400][ T7860] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 136.888796][ T7860] EXT4-fs (loop0): 1 orphan inode deleted [ 136.895049][ T7860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.944200][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.079689][ T7882] set_capacity_and_notify: 14 callbacks suppressed [ 137.079711][ T7882] loop4: detected capacity change from 0 to 1024 [ 137.117249][ T7882] EXT4-fs: Ignoring removed orlov option [ 137.134646][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.240982][ T29] audit: type=1326 audit(1765231994.924:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.264525][ T29] audit: type=1326 audit(1765231994.924:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.289533][ T29] audit: type=1326 audit(1765231994.924:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.313020][ T29] audit: type=1326 audit(1765231994.924:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.336484][ T29] audit: type=1326 audit(1765231994.924:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.359983][ T29] audit: type=1326 audit(1765231994.924:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.383410][ T29] audit: type=1326 audit(1765231994.924:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.406897][ T29] audit: type=1326 audit(1765231994.924:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 137.502435][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1448'. [ 137.557183][ T7910] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1451'. [ 137.881828][ T7927] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1461'. [ 137.898580][ T7931] bridge0: port 3(batadv0) entered blocking state [ 137.905365][ T7931] bridge0: port 3(batadv0) entered disabled state [ 137.911975][ T7931] batadv0: entered allmulticast mode [ 137.918026][ T7931] batadv0: entered promiscuous mode [ 138.076671][ T7938] loop2: detected capacity change from 0 to 512 [ 138.104497][ T7938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.137970][ T7938] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.328588][ T7937] lo speed is unknown, defaulting to 1000 [ 138.412587][ T2903] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 138.421903][ T2903] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 138.426381][ T7951] loop3: detected capacity change from 0 to 8192 [ 138.684670][ T7957] lo speed is unknown, defaulting to 1000 [ 138.822802][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.395066][ T7980] loop3: detected capacity change from 0 to 128 [ 139.412135][ T7980] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.442775][ T7980] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.672972][ T7992] @ÿ: renamed from hsr0 (while UP) [ 139.759932][ T7978] lo speed is unknown, defaulting to 1000 [ 140.045319][ T8009] loop2: detected capacity change from 0 to 1024 [ 140.055794][ T8009] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.070861][ T8009] EXT4-fs: inline encryption not supported [ 140.078342][ T8009] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.093821][ T8009] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1489: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.108085][ T8009] EXT4-fs (loop2): Remounting filesystem read-only [ 140.114838][ T8009] EXT4-fs (loop2): 1 orphan inode deleted [ 140.116761][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.121100][ T8009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.158842][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.185488][ T8019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1494'. [ 140.195092][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1493'. [ 140.218122][ T8022] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1495'. [ 140.281093][ T8030] loop2: detected capacity change from 0 to 512 [ 140.293559][ T8030] journal_path: Lookup failure for 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8//file0' [ 140.306437][ T8030] EXT4-fs: error: could not find journal device path [ 140.313645][ T8032] loop3: detected capacity change from 0 to 1024 [ 140.320275][ T8032] EXT4-fs: Ignoring removed orlov option [ 140.349332][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.471894][ T8049] @ÿ: renamed from hsr0 [ 140.485481][ T8052] wireguard0: entered promiscuous mode [ 140.491126][ T8052] wireguard0: entered allmulticast mode [ 140.694556][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1508'. [ 140.724521][ T8063] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1509'. [ 141.044612][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 141.053674][ T8072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1513'. [ 141.369025][ T8074] lo speed is unknown, defaulting to 1000 [ 141.429881][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 141.635530][ T8089] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1519'. [ 141.647765][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 141.779811][ T8099] loop2: detected capacity change from 0 to 512 [ 141.804105][ T8099] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.841890][ T8099] EXT4-fs (loop2): mount failed [ 141.898207][ T8113] loop2: detected capacity change from 0 to 512 [ 141.913672][ T8113] msdos: Unknown parameter 'ÿÿÿÿÿÿu b1á.Ø/0]pÙ¢ÉõgUFÎûj\°øžR²ÅõW®Ì5ꃠ' [ 141.935580][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 141.935599][ T29] audit: type=1400 audit(1765231999.624:7252): avc: denied { create } for pid=8114 comm="syz.1.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.023895][ T29] audit: type=1326 audit(1765231999.714:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.047523][ T29] audit: type=1326 audit(1765231999.714:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.072032][ T29] audit: type=1326 audit(1765231999.754:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.097214][ T29] audit: type=1326 audit(1765231999.754:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.120772][ T29] audit: type=1326 audit(1765231999.784:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.144259][ T29] audit: type=1326 audit(1765231999.784:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.167761][ T29] audit: type=1326 audit(1765231999.784:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.191181][ T29] audit: type=1326 audit(1765231999.784:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.214641][ T29] audit: type=1326 audit(1765231999.784:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 142.787074][ T8163] loop2: detected capacity change from 0 to 512 [ 142.824826][ T8163] EXT4-fs (loop2): too many log groups per flexible block group [ 142.833128][ T8163] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 142.840086][ T8163] EXT4-fs (loop2): mount failed [ 143.302446][ T8196] loop4: detected capacity change from 0 to 512 [ 143.312054][ T8196] EXT4-fs: Ignoring removed orlov option [ 143.319183][ T8196] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 143.323001][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.329702][ T8196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 143.345817][ T8196] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1560: corrupted in-inode xattr: e_value size too large [ 143.360605][ T8196] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1560: couldn't read orphan inode 15 (err -117) [ 143.384717][ T8196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.420795][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.439057][ T8203] loop3: detected capacity change from 0 to 512 [ 143.464412][ T8203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.477315][ T8203] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.477764][ T8205] loop4: detected capacity change from 0 to 512 [ 143.494495][ T8208] loop2: detected capacity change from 0 to 512 [ 143.503950][ T8205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.516123][ T8208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.516985][ T8205] EXT4-fs (loop4): 1 truncate cleaned up [ 143.533471][ T8208] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.541410][ T8205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.585474][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.225497][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.286872][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.331818][ T8255] loop3: detected capacity change from 0 to 512 [ 144.367424][ T8255] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.385504][ T8255] EXT4-fs (loop3): mount failed [ 144.853504][ T8289] loop2: detected capacity change from 0 to 1024 [ 144.882123][ T8289] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 144.898163][ T8289] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.910806][ T8289] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 144.924106][ T8289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.937109][ T8289] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1595: Inode bitmap for bg 0 marked uninitialized [ 144.957188][ T8289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.989022][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.105026][ T8301] loop4: detected capacity change from 0 to 512 [ 145.115333][ T8301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.140199][ T8301] EXT4-fs (loop4): 1 truncate cleaned up [ 145.146748][ T8301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.184983][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.277565][ T8317] __nla_validate_parse: 11 callbacks suppressed [ 145.277586][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1604'. [ 145.366865][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.376830][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.507908][ T8337] loop3: detected capacity change from 0 to 8192 [ 145.526980][ T8341] netlink: 'syz.4.1614': attribute type 13 has an invalid length. [ 145.610387][ T8348] loop4: detected capacity change from 0 to 512 [ 145.637996][ T8348] EXT4-fs (loop4): too many log groups per flexible block group [ 145.657496][ T8348] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 145.684338][ T8348] EXT4-fs (loop4): mount failed [ 145.787877][ T8346] lo speed is unknown, defaulting to 1000 [ 146.141602][ T8367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1623'. [ 146.291916][ T8375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.347727][ T8375] EXT4-fs (loop4): 1 truncate cleaned up [ 146.353938][ T8375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.401844][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.454171][ T8386] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1629'. [ 146.525870][ T8392] EXT4-fs: Ignoring removed orlov option [ 146.534055][ T8392] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 146.554670][ T8392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 146.563644][ T8392] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1632: corrupted in-inode xattr: e_value size too large [ 146.578543][ T8392] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1632: couldn't read orphan inode 15 (err -117) [ 146.591937][ T8392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.617218][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.718309][ T8397] EXT4-fs (loop3): too many log groups per flexible block group [ 146.742954][ T8397] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 146.750009][ T8397] EXT4-fs (loop3): mount failed [ 146.794290][ T8404] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.800890][ T8404] EXT4-fs: inline encryption not supported [ 146.850377][ T8404] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.884668][ T8404] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1636: lblock 2 mapped to illegal pblock 2 (length 1) [ 146.907121][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1640'. [ 146.989801][ T8419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.008124][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 147.008140][ T29] audit: type=1326 audit(1765232004.694:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.031776][ T8404] EXT4-fs (loop4): Remounting filesystem read-only [ 147.044486][ T8404] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 147.069407][ T8419] EXT4-fs (loop2): 1 truncate cleaned up [ 147.075594][ T29] audit: type=1326 audit(1765232004.734:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.076776][ T8419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.099243][ T29] audit: type=1326 audit(1765232004.734:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.134944][ T29] audit: type=1326 audit(1765232004.734:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.158612][ T29] audit: type=1326 audit(1765232004.734:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.177802][ T8404] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 147.182151][ T29] audit: type=1326 audit(1765232004.734:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.234209][ T8430] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 147.245446][ T8404] EXT4-fs (loop4): 1 orphan inode deleted [ 147.251436][ T8428] wireguard0: entered promiscuous mode [ 147.257145][ T8428] wireguard0: entered allmulticast mode [ 147.265780][ T8430] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.290631][ T8404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.304098][ T8430] EXT4-fs (loop3): mount failed [ 147.311378][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.330865][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.433108][ T29] audit: type=1326 audit(1765232005.124:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 147.475795][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1652'. [ 147.513997][ T8440] EXT4-fs (loop4): too many log groups per flexible block group [ 147.521817][ T8440] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 147.531488][ T8440] EXT4-fs (loop4): mount failed [ 147.634451][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1657'. [ 147.676587][ T8465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.699032][ T8465] EXT4-fs (loop4): 1 truncate cleaned up [ 147.713024][ T8465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.755647][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.806246][ T8475] set_capacity_and_notify: 8 callbacks suppressed [ 147.806277][ T8475] loop4: detected capacity change from 0 to 512 [ 147.823930][ T8475] EXT4-fs: Ignoring removed orlov option [ 147.842013][ T8475] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 147.857600][ T8475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 147.860778][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1663'. [ 147.869672][ T8475] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1662: corrupted in-inode xattr: e_value size too large [ 147.889561][ T8475] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1662: couldn't read orphan inode 15 (err -117) [ 147.890497][ T8475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.922420][ T8462] loop3: detected capacity change from 0 to 1024 [ 147.930786][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.956850][ T8462] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 148.015040][ T8483] loop4: detected capacity change from 0 to 512 [ 148.047192][ T8483] EXT4-fs (loop4): too many log groups per flexible block group [ 148.055073][ T8483] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 148.062046][ T8483] EXT4-fs (loop4): mount failed [ 148.206327][ T8500] loop2: detected capacity change from 0 to 512 [ 148.223466][ T8500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.244029][ T8500] EXT4-fs (loop2): 1 truncate cleaned up [ 148.250268][ T8500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.278663][ T8497] lo speed is unknown, defaulting to 1000 [ 148.310514][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.458415][ T8511] loop2: detected capacity change from 0 to 512 [ 148.481772][ T8511] EXT4-fs: Ignoring removed orlov option [ 148.513292][ T8511] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 148.534009][ T8511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 148.594400][ T8511] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1675: corrupted in-inode xattr: e_value size too large [ 148.609241][ T8511] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1675: couldn't read orphan inode 15 (err -117) [ 148.626816][ T8511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.696042][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.741008][ T8516] loop2: detected capacity change from 0 to 1024 [ 148.770257][ T8516] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 148.792796][ T8516] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.816899][ T8516] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.825108][ T8516] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.831801][ T8516] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1676: Inode bitmap for bg 0 marked uninitialized [ 148.845399][ T8516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.914036][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.927266][ T8522] netlink: 'syz.4.1677': attribute type 4 has an invalid length. [ 148.989927][ T8522] netlink: 'syz.4.1677': attribute type 4 has an invalid length. [ 149.042906][ T8527] FAULT_INJECTION: forcing a failure. [ 149.042906][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 149.055644][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.2.1682 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.055679][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.055697][ T8527] Call Trace: [ 149.055707][ T8527] [ 149.055718][ T8527] __dump_stack+0x1d/0x30 [ 149.055763][ T8527] dump_stack_lvl+0xe8/0x140 [ 149.055793][ T8527] dump_stack+0x15/0x1b [ 149.055820][ T8527] should_fail_ex+0x265/0x280 [ 149.055860][ T8527] should_failslab+0x8c/0xb0 [ 149.055926][ T8527] __kmalloc_noprof+0xb9/0x5a0 [ 149.055996][ T8527] ? io_cache_alloc_new+0x2a/0xb0 [ 149.056029][ T8527] ? pin_user_pages_fast+0x5f/0x90 [ 149.056132][ T8527] io_cache_alloc_new+0x2a/0xb0 [ 149.056187][ T8527] io_sqe_buffer_register+0x337/0x14c0 [ 149.056226][ T8527] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 149.056340][ T8527] ? __kvmalloc_node_noprof+0x4f0/0x6b0 [ 149.056372][ T8527] ? iovec_from_user+0x179/0x210 [ 149.056412][ T8527] io_sqe_buffers_register+0x2b1/0x540 [ 149.056534][ T8527] __se_sys_io_uring_register+0x9ef/0xf20 [ 149.056568][ T8527] ? schedule+0x5f/0xd0 [ 149.056595][ T8527] ? exit_to_user_mode_loop+0xf1/0x740 [ 149.056624][ T8527] __x64_sys_io_uring_register+0x55/0x70 [ 149.056663][ T8527] x64_sys_call+0x27ad/0x3000 [ 149.056695][ T8527] do_syscall_64+0xd8/0x2a0 [ 149.056737][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.056849][ T8527] RIP: 0033:0x7f47bb85f749 [ 149.056866][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.056940][ T8527] RSP: 002b:00007f47ba2c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 149.056966][ T8527] RAX: ffffffffffffffda RBX: 00007f47bbab5fa0 RCX: 00007f47bb85f749 [ 149.056982][ T8527] RDX: 0000200000000740 RSI: 0000000000000000 RDI: 0000000000000006 [ 149.056999][ T8527] RBP: 00007f47ba2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.057015][ T8527] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 149.057031][ T8527] R13: 00007f47bbab6038 R14: 00007f47bbab5fa0 R15: 00007fff6a79d5c8 [ 149.057057][ T8527] [ 149.308981][ T8536] loop2: detected capacity change from 0 to 512 [ 149.310048][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8518 comm=syz.4.1677 [ 149.328897][ T8536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.347422][ T8536] EXT4-fs (loop2): 1 truncate cleaned up [ 149.381625][ T8540] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.421100][ T8546] loop3: detected capacity change from 0 to 512 [ 149.438240][ T8547] loop4: detected capacity change from 0 to 1024 [ 149.438748][ T8546] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.445015][ T8547] EXT4-fs: Ignoring removed orlov option [ 149.460066][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 149.467037][ T8546] EXT4-fs (loop3): mount failed [ 149.483028][ T8550] IPVS: Error connecting to the multicast addr [ 149.550545][ T8553] loop3: detected capacity change from 0 to 8192 [ 149.742176][ T8557] lo speed is unknown, defaulting to 1000 [ 150.281340][ T8563] lo speed is unknown, defaulting to 1000 [ 150.454396][ T8578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.481907][ T8578] EXT4-fs (loop4): 1 truncate cleaned up [ 150.617992][ T8573] lo speed is unknown, defaulting to 1000 [ 150.843741][ T8614] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.873745][ T8614] EXT4-fs (loop2): 1 truncate cleaned up [ 150.944380][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1715'. [ 151.038955][ T8623] EXT4-fs (loop3): too many log groups per flexible block group [ 151.049220][ T8612] lo speed is unknown, defaulting to 1000 [ 151.056089][ T8623] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 151.063052][ T8623] EXT4-fs (loop3): mount failed [ 151.243790][ T8636] EXT4-fs (loop3): too many log groups per flexible block group [ 151.251581][ T8636] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 151.274698][ T8636] EXT4-fs (loop3): mount failed [ 151.449985][ T8643] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 151.469667][ T8634] loop2: p1 p2 p3 < p5 p6 > [ 151.481461][ T8634] loop2: p2 size 16775168 extends beyond EOD, truncated [ 151.512338][ T8634] loop2: p5 start 4294970168 is beyond EOD, truncated [ 151.530911][ T3007] loop2: p1 p2 p3 < p5 p6 > [ 151.541149][ T3007] loop2: p2 size 16775168 extends beyond EOD, truncated [ 151.553763][ T8648] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 151.558601][ T8643] bridge_slave_0: left allmulticast mode [ 151.562880][ T3007] loop2: p5 start 4294970168 is beyond EOD, truncated [ 151.567490][ T8643] bridge_slave_0: left promiscuous mode [ 151.579772][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.600514][ T8643] bridge_slave_1: left allmulticast mode [ 151.606286][ T8643] bridge_slave_1: left promiscuous mode [ 151.612226][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.644466][ T8643] bond0: (slave bond_slave_0): Releasing backup interface [ 151.656584][ T8643] bond0: (slave bond_slave_1): Releasing backup interface [ 151.664838][ T8653] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1725'. [ 151.700422][ T8643] team0: Port device team_slave_0 removed [ 151.710625][ T8643] team0: Port device team_slave_1 removed [ 151.746125][ T8643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.762452][ T23] lo speed is unknown, defaulting to 1000 [ 151.781904][ T8648] bond1: entered promiscuous mode [ 151.787032][ T8648] bond1: entered allmulticast mode [ 151.792449][ T8648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.800407][ T8650] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1724'. [ 151.837873][ T8661] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.854053][ T8661] EXT4-fs (loop3): 1 truncate cleaned up [ 152.012862][ T8679] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1737'. [ 152.044525][ T8680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1735'. [ 152.115638][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 152.115657][ T29] audit: type=1326 audit(1765232009.804:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 152.145572][ T29] audit: type=1326 audit(1765232009.804:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 152.183177][ T29] audit: type=1326 audit(1765232009.834:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 152.206716][ T29] audit: type=1326 audit(1765232009.834:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 152.230406][ T29] audit: type=1326 audit(1765232009.834:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 152.283203][ T29] audit: type=1326 audit(1765232009.954:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 152.306991][ T29] audit: type=1326 audit(1765232009.954:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 152.330456][ T29] audit: type=1326 audit(1765232009.954:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 152.354046][ T29] audit: type=1326 audit(1765232009.954:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 152.377508][ T29] audit: type=1326 audit(1765232009.954:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 152.403324][ T8694] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.418731][ T8694] EXT4-fs (loop2): mount failed [ 152.425205][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 152.434166][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 152.541018][ T8713] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1747'. [ 152.567639][ T8717] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1749'. [ 152.584436][ T8715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.594943][ T8715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.623419][ T8719] netlink: 'syz.3.1748': attribute type 21 has an invalid length. [ 152.633478][ T8719] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 152.675785][ T8715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.686235][ T8715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.741555][ T8715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.751936][ T8715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.829595][ T8715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.840046][ T8715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.863579][ T8738] set_capacity_and_notify: 8 callbacks suppressed [ 152.863601][ T8738] loop2: detected capacity change from 0 to 512 [ 152.915060][ T8726] loop4: detected capacity change from 0 to 1024 [ 152.921934][ T2903] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 152.930412][ T2903] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.973373][ T8726] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 152.993439][ T8738] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.011076][ T2903] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.019514][ T2903] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.033527][ T8738] EXT4-fs (loop2): mount failed [ 153.036240][ T2903] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.046764][ T2903] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.065207][ T2903] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.073685][ T2903] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.204120][ T8758] tc_dump_action: action bad kind [ 153.212983][ T8757] loop2: detected capacity change from 0 to 512 [ 153.221839][ T8758] xt_hashlimit: max too large, truncated to 1048576 [ 153.250332][ T8757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.292112][ T8757] EXT4-fs (loop2): 1 truncate cleaned up [ 153.357815][ T8743] lo speed is unknown, defaulting to 1000 [ 153.530402][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 153.671161][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.678364][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.700236][ T8743] bridge_slave_0: entered allmulticast mode [ 153.709517][ T8743] bridge_slave_0: entered promiscuous mode [ 153.732078][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.739302][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.747044][ T8743] bridge_slave_1: entered allmulticast mode [ 153.754110][ T8743] bridge_slave_1: entered promiscuous mode [ 153.786988][ T8790] loop3: detected capacity change from 0 to 1024 [ 153.796874][ T8790] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 153.818791][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.843707][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.870336][ T8743] team0: Port device team_slave_0 added [ 153.881770][ T8743] team0: Port device team_slave_1 added [ 153.902568][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.909662][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.936200][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.957828][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.964916][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.990900][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.088117][ T8743] hsr_slave_0: entered promiscuous mode [ 154.103243][ T8743] hsr_slave_1: entered promiscuous mode [ 154.166304][ T8832] loop2: detected capacity change from 0 to 512 [ 154.173576][ T8832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.192840][ T8832] EXT4-fs (loop2): 1 truncate cleaned up [ 154.318570][ T8743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.333626][ T8743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.345414][ T8743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.373859][ T8743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.461287][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.483801][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.496763][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.503917][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.537650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.544821][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.573601][ T8873] loop4: detected capacity change from 0 to 128 [ 154.627111][ T8873] 9p: Bad value for 'rfdno' [ 154.708686][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.021761][ T8906] loop2: detected capacity change from 0 to 128 [ 155.026007][ T8743] veth0_vlan: entered promiscuous mode [ 155.040398][ T8906] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.060044][ T8743] veth1_vlan: entered promiscuous mode [ 155.076862][ T8743] veth0_macvtap: entered promiscuous mode [ 155.084794][ T8743] veth1_macvtap: entered promiscuous mode [ 155.103213][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.145337][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.165006][ T2593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.184828][ T2593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.201082][ T2593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.211383][ T2593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.347698][ T8920] wireguard0: entered promiscuous mode [ 155.353297][ T8920] wireguard0: entered allmulticast mode [ 155.625421][ T8939] lo speed is unknown, defaulting to 1000 [ 156.013198][ T8954] __nla_validate_parse: 15 callbacks suppressed [ 156.013220][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1825'. [ 156.213144][ T8963] loop4: detected capacity change from 0 to 32768 [ 156.274381][ T3890] loop4: p1 p2 p3 < p5 p6 > [ 156.280066][ T3890] loop4: p2 size 16775168 extends beyond EOD, truncated [ 156.299237][ T3890] loop4: p5 start 4294970168 is beyond EOD, truncated [ 156.323372][ T8975] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 156.334899][ T8975] bridge_slave_0: left allmulticast mode [ 156.340621][ T8975] bridge_slave_0: left promiscuous mode [ 156.346503][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.370315][ T8972] loop5: detected capacity change from 0 to 512 [ 156.383466][ T8975] bridge_slave_1: left allmulticast mode [ 156.389204][ T8975] bridge_slave_1: left promiscuous mode [ 156.394968][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.410723][ T8963] loop4: p1 p2 p3 < p5 p6 > [ 156.416419][ T8963] loop4: p2 size 16775168 extends beyond EOD, truncated [ 156.424479][ T8972] EXT4-fs (loop5): too many log groups per flexible block group [ 156.426803][ T8963] loop4: p5 start 4294970168 is beyond EOD, truncated [ 156.442381][ T8985] loop2: detected capacity change from 0 to 512 [ 156.448863][ T8972] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 156.463506][ T8972] EXT4-fs (loop5): mount failed [ 156.472281][ T8985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.495400][ T8975] bond0: (slave bond_slave_0): Releasing backup interface [ 156.522626][ T8985] EXT4-fs (loop2): 1 truncate cleaned up [ 156.529034][ T8975] bond0: (slave bond_slave_1): Releasing backup interface [ 156.538271][ T8975] team0: Port device team_slave_0 removed [ 156.545419][ T8975] team0: Port device team_slave_1 removed [ 156.551357][ T8975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.566945][ T8975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.593717][ T8975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.664995][ T8987] wireguard0: entered promiscuous mode [ 156.670546][ T8987] wireguard0: entered allmulticast mode [ 156.924412][ T9017] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1842'. [ 156.996112][ T9021] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.043360][ T9021] EXT4-fs (loop2): 1 truncate cleaned up [ 157.058646][ T8994] lo speed is unknown, defaulting to 1000 [ 157.134196][ T9029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.217141][ T9029] EXT4-fs (loop3): 1 truncate cleaned up [ 157.233363][ T3311] loop4: p1 p2 p3 < p5 p6 > [ 157.245770][ T3311] loop4: p2 size 16775168 extends beyond EOD, truncated [ 157.263788][ T3311] loop4: p5 start 4294970168 is beyond EOD, truncated [ 157.288377][ T9034] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 157.298504][ T9034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.383677][ T9040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1851'. [ 157.400231][ T9025] loop4: p1 p2 p3 < p5 p6 > [ 157.419854][ T9025] loop4: p2 size 16775168 extends beyond EOD, truncated [ 157.454409][ T9025] loop4: p5 start 4294970168 is beyond EOD, truncated [ 157.482467][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 157.482481][ T29] audit: type=1326 audit(1765232015.164:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.536917][ T29] audit: type=1326 audit(1765232015.204:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.560729][ T29] audit: type=1326 audit(1765232015.204:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.584464][ T29] audit: type=1326 audit(1765232015.204:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.608025][ T29] audit: type=1326 audit(1765232015.204:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.631739][ T29] audit: type=1326 audit(1765232015.204:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.655304][ T29] audit: type=1326 audit(1765232015.204:8472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.678885][ T29] audit: type=1326 audit(1765232015.204:8473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.702799][ T29] audit: type=1326 audit(1765232015.204:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.726428][ T29] audit: type=1326 audit(1765232015.204:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa09d6cf749 code=0x7ffc0000 [ 157.858468][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1859'. [ 157.904563][ T9056] wireguard0: entered promiscuous mode [ 157.910105][ T9056] wireguard0: entered allmulticast mode [ 157.948154][ T9032] lo speed is unknown, defaulting to 1000 [ 157.985235][ T9071] set_capacity_and_notify: 4 callbacks suppressed [ 157.985255][ T9071] loop4: detected capacity change from 0 to 8192 [ 158.058072][ T3890] udevd[3890]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 158.069037][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 158.069889][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 158.093607][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 158.472169][ T9067] loop3: detected capacity change from 0 to 1024 [ 158.484401][ T9067] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 158.564178][ T9071] lo speed is unknown, defaulting to 1000 [ 158.742669][ T9102] loop2: detected capacity change from 0 to 512 [ 158.763564][ T9084] lo speed is unknown, defaulting to 1000 [ 158.782976][ T9102] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 158.792026][ T9102] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1871: invalid indirect mapped block 2683928664 (level 1) [ 158.806248][ T9102] EXT4-fs (loop2): Remounting filesystem read-only [ 158.812946][ T9102] EXT4-fs (loop2): 1 truncate cleaned up [ 158.918563][ T9110] loop3: detected capacity change from 0 to 512 [ 158.949192][ T9110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.973179][ T9116] wireguard0: entered promiscuous mode [ 158.978747][ T9116] wireguard0: entered allmulticast mode [ 158.994831][ T9110] EXT4-fs (loop3): 1 truncate cleaned up [ 159.053937][ T9126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1880'. [ 159.139642][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1876'. [ 159.300336][ T9148] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1887'. [ 159.434333][ T9158] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1889'. [ 159.502131][ T9162] loop4: detected capacity change from 0 to 512 [ 159.504295][ T9161] loop5: detected capacity change from 0 to 512 [ 159.559695][ T9162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.602014][ T9161] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.603933][ T9162] EXT4-fs (loop4): 1 truncate cleaned up [ 159.631589][ T9161] EXT4-fs (loop5): mount failed [ 159.841061][ T9195] loop2: detected capacity change from 0 to 512 [ 159.847973][ T9196] wireguard0: entered promiscuous mode [ 159.853610][ T9196] wireguard0: entered allmulticast mode [ 159.870295][ T9195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.882652][ T9198] tc_dump_action: action bad kind [ 159.887962][ T9198] xt_hashlimit: max too large, truncated to 1048576 [ 159.894915][ T9199] loop3: detected capacity change from 0 to 512 [ 159.928674][ T9195] EXT4-fs (loop2): 1 truncate cleaned up [ 159.936397][ T9199] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.982404][ T9178] loop5: detected capacity change from 0 to 1024 [ 159.993086][ T9178] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 160.062375][ T9210] loop2: detected capacity change from 0 to 512 [ 160.084661][ T9212] FAULT_INJECTION: forcing a failure. [ 160.084661][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.097904][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.5.1910 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.097940][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.097957][ T9212] Call Trace: [ 160.097967][ T9212] [ 160.097976][ T9212] __dump_stack+0x1d/0x30 [ 160.098001][ T9212] dump_stack_lvl+0xe8/0x140 [ 160.098054][ T9212] dump_stack+0x15/0x1b [ 160.098078][ T9212] should_fail_ex+0x265/0x280 [ 160.098134][ T9212] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 160.098227][ T9212] should_fail+0xb/0x20 [ 160.098251][ T9212] should_fail_usercopy+0x1a/0x20 [ 160.098280][ T9212] _copy_from_user+0x1c/0xb0 [ 160.098371][ T9212] do_pagemap_cmd+0x77/0x9c0 [ 160.098403][ T9212] ? do_vfs_ioctl+0x7ca/0xe10 [ 160.098448][ T9212] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 160.098536][ T9212] __se_sys_ioctl+0xce/0x140 [ 160.098573][ T9212] __x64_sys_ioctl+0x43/0x50 [ 160.098612][ T9212] x64_sys_call+0x14b0/0x3000 [ 160.098663][ T9212] do_syscall_64+0xd8/0x2a0 [ 160.098702][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.098744][ T9212] RIP: 0033:0x7f2c5c22f749 [ 160.098761][ T9212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.098855][ T9212] RSP: 002b:00007f2c5ac97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.098878][ T9212] RAX: ffffffffffffffda RBX: 00007f2c5c485fa0 RCX: 00007f2c5c22f749 [ 160.098893][ T9212] RDX: 00002000000000c0 RSI: 00000000c0606610 RDI: 0000000000000007 [ 160.098955][ T9212] RBP: 00007f2c5ac97090 R08: 0000000000000000 R09: 0000000000000000 [ 160.098967][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.098978][ T9212] R13: 00007f2c5c486038 R14: 00007f2c5c485fa0 R15: 00007ffe59a92478 [ 160.098998][ T9212] [ 160.100178][ T9210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.291072][ T9210] EXT4-fs (loop2): 1 truncate cleaned up [ 160.593308][ T9234] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 160.748200][ T9247] wireguard0: entered promiscuous mode [ 160.753823][ T9247] wireguard0: entered allmulticast mode [ 160.820997][ T9256] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.972693][ T9269] wireguard0: entered promiscuous mode [ 160.978312][ T9269] wireguard0: entered allmulticast mode [ 161.008714][ T9281] tc_dump_action: action bad kind [ 161.014147][ T9281] xt_hashlimit: max too large, truncated to 1048576 [ 161.119104][ T9292] __nla_validate_parse: 9 callbacks suppressed [ 161.119124][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1942'. [ 161.301880][ T9297] EXT4-fs: Ignoring removed orlov option [ 161.317240][ T9273] lo speed is unknown, defaulting to 1000 [ 161.400135][ T9292] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 161.420305][ T9302] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 161.442610][ T3890] loop5: p1 p2 p3 < p5 p6 > [ 161.453120][ T3890] loop5: p2 size 16775168 extends beyond EOD, truncated [ 161.465295][ T9302] bridge_slave_0: left allmulticast mode [ 161.471059][ T9302] bridge_slave_0: left promiscuous mode [ 161.476940][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.485427][ T3890] loop5: p5 start 4294970168 is beyond EOD, truncated [ 161.510841][ T9302] bridge_slave_1: left allmulticast mode [ 161.516757][ T9302] bridge_slave_1: left promiscuous mode [ 161.522462][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.530899][ T9294] loop5: p1 p2 p3 < p5 p6 > [ 161.536842][ T9294] loop5: p2 size 16775168 extends beyond EOD, truncated [ 161.546604][ T9294] loop5: p5 start 4294970168 is beyond EOD, truncated [ 161.638024][ T9302] bond0: (slave bond_slave_0): Releasing backup interface [ 161.675379][ T9302] bond0: (slave bond_slave_1): Releasing backup interface [ 161.720791][ T9302] team0: Port device team_slave_0 removed [ 161.758222][ T9302] team0: Port device team_slave_1 removed [ 161.768096][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.775760][ T9302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.792146][ T9302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.799705][ T9302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.811021][ T9302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.839400][ T9311] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.865663][ T9311] EXT4-fs (loop2): mount failed [ 162.084240][ T9322] wireguard0: entered promiscuous mode [ 162.085651][ T9325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 162.089924][ T9322] wireguard0: entered allmulticast mode [ 162.100491][ T9325] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.139812][ T9325] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 162.148491][ T9325] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.213037][ T9325] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1953: Inode bitmap for bg 0 marked uninitialized [ 162.253097][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 162.351500][ T9339] EXT4-fs: Ignoring removed orlov option [ 162.367549][ T9339] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 162.398595][ T9339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 162.423362][ T9339] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1957: corrupted in-inode xattr: e_value size too large [ 162.462976][ T9344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.482066][ T9344] EXT4-fs (loop2): 1 truncate cleaned up [ 162.549383][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 162.549402][ T29] audit: type=1400 audit(1765232020.234:8785): avc: denied { setattr } for pid=9343 comm="syz.2.1958" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.556466][ T9339] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1957: couldn't read orphan inode 15 (err -117) [ 162.599011][ T29] audit: type=1400 audit(1765232020.284:8786): avc: denied { rename } for pid=9343 comm="syz.2.1958" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.621500][ T29] audit: type=1400 audit(1765232020.284:8787): avc: denied { unlink } for pid=9343 comm="syz.2.1958" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.734493][ T9350] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1960'. [ 162.787344][ T29] audit: type=1326 audit(1765232020.474:8788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 162.841229][ T29] audit: type=1326 audit(1765232020.474:8789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 162.864804][ T29] audit: type=1326 audit(1765232020.474:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 162.888302][ T29] audit: type=1326 audit(1765232020.474:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 162.911782][ T29] audit: type=1326 audit(1765232020.474:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 162.935206][ T29] audit: type=1326 audit(1765232020.474:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 162.958714][ T29] audit: type=1326 audit(1765232020.474:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 163.055961][ T9354] set_capacity_and_notify: 11 callbacks suppressed [ 163.055981][ T9354] loop3: detected capacity change from 0 to 512 [ 163.121999][ T9354] EXT4-fs (loop3): too many log groups per flexible block group [ 163.152700][ T9354] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 163.159545][ T9354] EXT4-fs (loop3): mount failed [ 163.214998][ T9367] loop5: detected capacity change from 0 to 512 [ 163.314406][ T9367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.429217][ T9373] loop3: detected capacity change from 0 to 1024 [ 163.443308][ T9367] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.455647][ T9373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 163.466740][ T9373] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.500319][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1965'. [ 163.542931][ T9373] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 163.602596][ T9373] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.612933][ T9373] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1968: Inode bitmap for bg 0 marked uninitialized [ 163.628362][ T9360] lo speed is unknown, defaulting to 1000 [ 163.635540][ T9373] EXT4-fs mount: 45 callbacks suppressed [ 163.635690][ T9373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.660544][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1969'. [ 163.706396][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.821999][ T9385] wireguard0: entered promiscuous mode [ 163.827602][ T9385] wireguard0: entered allmulticast mode [ 163.906334][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 164.137179][ T9394] loop5: detected capacity change from 0 to 512 [ 164.167225][ T9394] EXT4-fs: Ignoring removed orlov option [ 164.183702][ T9390] loop2: detected capacity change from 0 to 8192 [ 164.196434][ T9394] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 164.257045][ T9394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 164.275026][ T9394] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1973: corrupted in-inode xattr: e_value size too large [ 164.310158][ T9394] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1973: couldn't read orphan inode 15 (err -117) [ 164.323121][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.381756][ T9405] loop4: detected capacity change from 0 to 128 [ 164.387863][ T9394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.403295][ T9405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.416406][ T9405] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.493038][ T9409] loop3: detected capacity change from 0 to 128 [ 164.503131][ T9409] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.546426][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.578848][ T9409] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.633525][ T8743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.634234][ T9412] loop4: detected capacity change from 0 to 512 [ 164.654093][ T9412] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 164.681585][ T9412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 164.689814][ T9412] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.696228][ T9412] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1979: bad orphan inode 267 [ 164.707697][ T9412] EXT4-fs (loop4): Remounting filesystem read-only [ 164.708923][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.715111][ T9412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 164.737697][ T9412] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1979: dx entry: limit 0 != root limit 125 [ 164.749560][ T9412] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1979: Corrupt directory, running e2fsck is recommended [ 164.768624][ T9415] loop5: detected capacity change from 0 to 1024 [ 164.802857][ T9401] lo speed is unknown, defaulting to 1000 [ 164.823786][ T9415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 164.850981][ T9415] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.877834][ T9417] loop3: detected capacity change from 0 to 512 [ 164.903463][ T9417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.913167][ T9415] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 164.945032][ T9417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.961872][ T9415] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.978757][ T9415] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.1980: Inode bitmap for bg 0 marked uninitialized [ 165.001515][ T9415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.023722][ T9417] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.093211][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 165.110057][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.190373][ T8743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.209500][ T9431] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1983'. [ 165.230071][ T9429] wireguard0: entered promiscuous mode [ 165.235695][ T9429] wireguard0: entered allmulticast mode [ 165.273968][ T9437] xt_hashlimit: max too large, truncated to 1048576 [ 165.286776][ T9431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1983'. [ 165.295852][ T9431] tc_dump_action: action bad kind [ 165.314881][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1982'. [ 165.563616][ T9447] EXT4-fs (loop4): too many log groups per flexible block group [ 165.571381][ T9447] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 165.623740][ T9447] EXT4-fs (loop4): mount failed [ 165.705819][ T9454] lo speed is unknown, defaulting to 1000 [ 165.804651][ T9470] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 165.843175][ T9470] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.875042][ T9470] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.903101][ T9470] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.941441][ T9470] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1995: Inode bitmap for bg 0 marked uninitialized [ 166.023050][ T9467] lo speed is unknown, defaulting to 1000 [ 166.061417][ T9470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.179362][ T9483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.189351][ T9483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.227909][ T9493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9493 comm=syz.3.2000 [ 166.240983][ T36] hid (null): report_id 3804673681 is invalid [ 166.247216][ T36] hid (null): global environment stack underflow [ 166.253689][ T36] hid (null): report_id 0 is invalid [ 166.259048][ T36] hid (null): invalid report_size 11153 [ 166.297603][ T36] hid-generic 0002:0400:01F0.000B: report_id 3804673681 is invalid [ 166.305622][ T36] hid-generic 0002:0400:01F0.000B: item 0 4 1 8 parsing failed [ 166.313467][ T9495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.315256][ T36] hid-generic 0002:0400:01F0.000B: probe with driver hid-generic failed with error -22 [ 166.325419][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.343732][ T9483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.353665][ T9483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.367555][ T9495] EXT4-fs (loop5): 1 truncate cleaned up [ 166.374221][ T9495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.411519][ T9502] __nla_validate_parse: 2 callbacks suppressed [ 166.411539][ T9502] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2006'. [ 166.438624][ T9483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.448671][ T9483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.515236][ T8743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.558353][ T9483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.568423][ T9483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.581950][ T9510] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.597577][ T9510] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.647812][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.656328][ T52] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.675584][ T8743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.681986][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.692950][ T52] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.701223][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.709746][ T52] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.718324][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.726669][ T52] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.077186][ T9528] lo speed is unknown, defaulting to 1000 [ 167.236898][ T9533] lo speed is unknown, defaulting to 1000 [ 167.302493][ T9549] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.317505][ T9549] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.407953][ T3328] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.471468][ T9563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 167.480124][ T9563] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.489129][ T9563] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 167.517205][ T9563] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 167.525852][ T9563] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.2028: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 167.544832][ T9563] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2028: couldn't read orphan inode 13 (err -117) [ 167.558975][ T9563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.560446][ T9565] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2030'. [ 167.573018][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 167.655347][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.736081][ T9568] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.754654][ T9568] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.802302][ T3328] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.927764][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 167.927813][ T29] audit: type=1326 audit(1765232025.614:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 167.975832][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2043'. [ 167.996806][ T29] audit: type=1326 audit(1765232025.654:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.015495][ T9593] 8021q: VLANs not supported on ip6_vti0 [ 168.020402][ T29] audit: type=1326 audit(1765232025.654:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.049521][ T29] audit: type=1326 audit(1765232025.654:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.073020][ T29] audit: type=1326 audit(1765232025.654:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.097030][ T29] audit: type=1326 audit(1765232025.654:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.120772][ T29] audit: type=1326 audit(1765232025.654:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.144241][ T29] audit: type=1326 audit(1765232025.654:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.167720][ T29] audit: type=1326 audit(1765232025.654:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.191256][ T29] audit: type=1326 audit(1765232025.654:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.4.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f140c28f749 code=0x7ffc0000 [ 168.218370][ T9601] set_capacity_and_notify: 10 callbacks suppressed [ 168.218394][ T9601] loop4: detected capacity change from 0 to 512 [ 168.254991][ T9604] loop5: detected capacity change from 0 to 128 [ 168.261817][ T9593] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 168.282702][ T9604] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.297960][ T9604] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.364548][ T8743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.405373][ T9602] lo speed is unknown, defaulting to 1000 [ 168.523602][ T9625] loop2: detected capacity change from 0 to 512 [ 168.535772][ T9625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.574762][ T9625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.616166][ T9625] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.631204][ T9637] loop5: detected capacity change from 0 to 128 [ 168.658544][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.669051][ T9637] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.682041][ T9637] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.697861][ T9642] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2060'. [ 168.723903][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9642 comm=syz.1.2060 [ 168.737891][ T8743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.747684][ T9642] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2060'. [ 168.874772][ T9654] wireguard0: entered promiscuous mode [ 168.880399][ T9654] wireguard0: entered allmulticast mode [ 168.898127][ T9657] loop2: detected capacity change from 0 to 1024 [ 168.905592][ T9657] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 168.915527][ T9657] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.931098][ T9657] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 168.955431][ T9657] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.969577][ T9657] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2065: Inode bitmap for bg 0 marked uninitialized [ 168.988492][ T9657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.060186][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.115692][ T9673] loop2: detected capacity change from 0 to 512 [ 169.136390][ T9673] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.153315][ T9673] EXT4-fs (loop2): mount failed [ 169.240158][ T9685] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2071'. [ 169.281841][ T9686] wireguard0: entered promiscuous mode [ 169.287379][ T9686] wireguard0: entered allmulticast mode [ 169.532037][ T9695] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2076'. [ 169.575243][ T9700] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2078'. [ 169.644920][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2083'. [ 169.656644][ T9708] loop2: detected capacity change from 0 to 512 [ 169.666098][ T9708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.700518][ T9708] EXT4-fs (loop2): 1 truncate cleaned up [ 169.709418][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.754071][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.801882][ T9712] loop4: detected capacity change from 0 to 8192 [ 169.880889][ T9710] loop5: detected capacity change from 0 to 1024 [ 169.891237][ T9710] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 170.120896][ T9734] loop5: detected capacity change from 0 to 512 [ 170.167293][ T9734] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.197915][ T9734] EXT4-fs (loop5): mount failed [ 170.297894][ T9738] EXT4-fs (loop3): too many log groups per flexible block group [ 170.313301][ T9738] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 170.320272][ T9738] EXT4-fs (loop3): mount failed [ 170.498401][ T9722] lo speed is unknown, defaulting to 1000 [ 170.867723][ T9760] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 170.934101][ T9756] lo speed is unknown, defaulting to 1000 [ 171.092440][ T9780] EXT4-fs (loop2): too many log groups per flexible block group [ 171.103577][ T9780] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 171.110499][ T9780] EXT4-fs (loop2): mount failed [ 171.182930][ T9792] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.221405][ T9792] EXT4-fs (loop3): mount failed [ 171.277890][ T3311] loop4: p1 p2 p3 < p5 p6 > [ 171.293243][ T9797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.309747][ T3311] loop4: p2 size 16775168 extends beyond EOD, truncated [ 171.331805][ T3311] loop4: p5 start 4294970168 is beyond EOD, truncated [ 171.423105][ T9812] __nla_validate_parse: 7 callbacks suppressed [ 171.423123][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2120'. [ 171.426463][ T9776] loop4: p1 p2 p3 < p5 p6 > [ 171.446482][ T9776] loop4: p2 size 16775168 extends beyond EOD, truncated [ 171.455503][ T9776] loop4: p5 start 4294970168 is beyond EOD, truncated [ 171.527761][ T9815] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2119'. [ 171.551217][ T9819] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 171.573446][ T9819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 171.622926][ T9819] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.629451][ T9819] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2122: bad orphan inode 267 [ 171.636666][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 171.651473][ T3890] udevd[3890]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 171.665806][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 171.676133][ T3555] udevd[3555]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 171.714221][ T9819] EXT4-fs (loop2): Remounting filesystem read-only [ 171.721444][ T9819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 171.754716][ T9819] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2122: dx entry: limit 0 != root limit 125 [ 171.766714][ T9819] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2122: Corrupt directory, running e2fsck is recommended [ 171.795079][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 171.812698][ T9838] 8021q: VLANs not supported on ip6_vti0 [ 171.917073][ T9812] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 172.241433][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 172.281696][ T9863] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.325420][ T9863] EXT4-fs (loop3): mount failed [ 172.391361][ T9850] lo speed is unknown, defaulting to 1000 [ 172.456663][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 172.485008][ T9876] 8021q: VLANs not supported on ip6_vti0 [ 172.534626][ T9874] EXT4-fs (loop2): too many log groups per flexible block group [ 172.556292][ T9874] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 172.563264][ T9874] EXT4-fs (loop2): mount failed [ 172.638703][ T9884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.665290][ T9884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.697323][ T9884] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.736803][ T9884] netlink: 'syz.2.2144': attribute type 13 has an invalid length. [ 172.924706][ T9890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.933126][ T29] kauditd_printk_skb: 763 callbacks suppressed [ 172.933149][ T29] audit: type=1326 audit(1765232030.624:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47bb892005 code=0x7ffc0000 [ 172.937032][ T6289] lo speed is unknown, defaulting to 1000 [ 172.972350][ T6289] syz0: Port: 1 Link DOWN [ 172.979034][ T29] audit: type=1326 audit(1765232030.634:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47bb892005 code=0x7ffc0000 [ 173.002625][ T29] audit: type=1326 audit(1765232030.634:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bb85f749 code=0x7ffc0000 [ 173.026376][ T29] audit: type=1326 audit(1765232030.634:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bb85f749 code=0x7ffc0000 [ 173.050260][ T29] audit: type=1326 audit(1765232030.674:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47bb85f749 code=0x7ffc0000 [ 173.073936][ T29] audit: type=1326 audit(1765232030.714:9883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 173.097894][ T29] audit: type=1326 audit(1765232030.714:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 173.121306][ T29] audit: type=1326 audit(1765232030.714:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 173.144880][ T29] audit: type=1326 audit(1765232030.714:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 173.168303][ T29] audit: type=1326 audit(1765232030.714:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 173.194893][ T8743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.202820][ T2903] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.244330][ T2903] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.270459][ T2903] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.282451][ T9900] set_capacity_and_notify: 12 callbacks suppressed [ 173.282469][ T9900] loop5: detected capacity change from 0 to 8192 [ 173.298580][ T2945] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.326955][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.399312][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 173.420229][ T9908] loop2: detected capacity change from 0 to 8192 [ 173.646843][ T9922] syz.1.2155 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.664216][ T9921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2152'. [ 173.847132][ T9911] lo speed is unknown, defaulting to 1000 [ 173.946531][ T9930] loop3: detected capacity change from 0 to 1024 [ 173.959452][ T9919] lo speed is unknown, defaulting to 1000 [ 173.998049][ T9930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.172097][ T9941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2161'. [ 174.387082][ T9957] loop5: detected capacity change from 0 to 512 [ 174.411156][ T9951] loop4: detected capacity change from 0 to 512 [ 174.429790][ T9957] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.446213][ T9957] EXT4-fs (loop5): mount failed [ 174.464507][ T9951] EXT4-fs (loop4): too many log groups per flexible block group [ 174.472900][ T9951] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 174.479735][ T9951] EXT4-fs (loop4): mount failed [ 174.589574][ T9976] loop5: detected capacity change from 0 to 512 [ 174.624898][ T9976] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.640413][ T9976] EXT4-fs (loop5): mount failed [ 174.646511][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 174.655755][ T9985] 8021q: VLANs not supported on ip6_vti0 [ 174.777094][ T9996] loop2: detected capacity change from 0 to 512 [ 174.792041][ T9996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.795321][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.825861][ T9996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.841094][T10000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2184'. [ 174.848006][ T9998] loop5: detected capacity change from 0 to 512 [ 174.865111][ T9996] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.879326][ T9998] EXT4-fs (loop5): too many log groups per flexible block group [ 174.889690][ T9998] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 174.892347][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.896887][ T9998] EXT4-fs (loop5): mount failed [ 174.949446][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 174.999568][T10012] loop2: detected capacity change from 0 to 128 [ 175.015014][T10015] loop3: detected capacity change from 0 to 512 [ 175.027649][T10012] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.041766][T10015] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 175.053234][T10015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 175.054082][T10012] ext4 filesystem being mounted at /444/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.069168][T10015] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.077874][T10015] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2189: bad orphan inode 267 [ 175.092952][T10015] EXT4-fs (loop3): Remounting filesystem read-only [ 175.129781][T10015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 175.152434][T10015] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.2189: dx entry: limit 0 != root limit 125 [ 175.164470][T10015] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2189: Corrupt directory, running e2fsck is recommended [ 175.180557][T10024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 175.224401][ T3328] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.350641][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 175.378224][T10034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.460092][T10027] lo speed is unknown, defaulting to 1000 [ 175.519266][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 175.781541][T10060] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.801796][T10051] EXT4-fs (loop3): too many log groups per flexible block group [ 175.811264][T10060] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.812899][T10051] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 175.842575][T10051] EXT4-fs (loop3): mount failed [ 175.849339][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.003620][T10067] FAULT_INJECTION: forcing a failure. [ 176.003620][T10067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.016924][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.4.2206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.016958][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.016975][T10067] Call Trace: [ 176.016984][T10067] [ 176.016994][T10067] __dump_stack+0x1d/0x30 [ 176.017023][T10067] dump_stack_lvl+0xe8/0x140 [ 176.017075][T10067] dump_stack+0x15/0x1b [ 176.017098][T10067] should_fail_ex+0x265/0x280 [ 176.017125][T10067] should_fail+0xb/0x20 [ 176.017147][T10067] should_fail_usercopy+0x1a/0x20 [ 176.017177][T10067] _copy_from_user+0x1c/0xb0 [ 176.017280][T10067] ___sys_sendmsg+0xc1/0x1d0 [ 176.017328][T10067] __x64_sys_sendmsg+0xd4/0x160 [ 176.017369][T10067] x64_sys_call+0x17ba/0x3000 [ 176.017401][T10067] do_syscall_64+0xd8/0x2a0 [ 176.017474][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.017518][T10067] RIP: 0033:0x7f140c28f749 [ 176.017536][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.017584][T10067] RSP: 002b:00007f140acef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.017680][T10067] RAX: ffffffffffffffda RBX: 00007f140c4e5fa0 RCX: 00007f140c28f749 [ 176.017697][T10067] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 176.017713][T10067] RBP: 00007f140acef090 R08: 0000000000000000 R09: 0000000000000000 [ 176.017728][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.017745][T10067] R13: 00007f140c4e6038 R14: 00007f140c4e5fa0 R15: 00007ffc8bd0b658 [ 176.017819][T10067] [ 176.186965][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.200358][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.255704][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.495401][T10112] EXT4-fs (loop4): too many log groups per flexible block group [ 176.543788][T10112] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 176.563097][T10115] siw: device registration error -23 [ 176.622103][T10112] EXT4-fs (loop4): mount failed [ 176.950880][T10123] __nla_validate_parse: 5 callbacks suppressed [ 176.950901][T10123] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2225'. [ 177.007443][T10116] lo speed is unknown, defaulting to 1000 [ 177.039806][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 177.098477][T10118] lo speed is unknown, defaulting to 1000 [ 177.102949][ T3890] loop5: p1 p3 p4 [ 177.113531][ T3890] loop5: p4 size 589824 extends beyond EOD, truncated [ 177.128910][T10128] loop5: p1 p3 p4 [ 177.145772][T10128] loop5: p4 size 589824 extends beyond EOD, truncated [ 177.261175][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 177.262440][ T3890] udevd[3890]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 177.282949][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 177.303626][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 177.315533][ T3890] udevd[3890]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 177.323859][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 177.396054][T10150] lo speed is unknown, defaulting to 1000 [ 177.444632][T10156] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.454816][T10162] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2240'. [ 177.475364][T10150] lo speed is unknown, defaulting to 1000 [ 177.481413][T10150] lo speed is unknown, defaulting to 1000 [ 177.499092][T10156] ext4 filesystem being mounted at /475/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.578169][T10166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.605378][T10166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.612474][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2242'. [ 177.627863][T10166] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.645283][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.651918][T10150] infiniband syz1: set down [ 177.659187][T10150] infiniband syz1: added lo [ 177.673226][ T6077] lo speed is unknown, defaulting to 1000 [ 177.709882][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.732314][T10176] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2243'. [ 177.737430][T10150] RDS/IB: syz1: added [ 177.766176][T10150] smc: adding ib device syz1 with port count 1 [ 177.767115][T10177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.772814][T10150] smc: ib device syz1 port 1 has no pnetid [ 177.790837][ T6077] lo speed is unknown, defaulting to 1000 [ 177.797309][T10150] lo speed is unknown, defaulting to 1000 [ 177.947918][ T29] kauditd_printk_skb: 887 callbacks suppressed [ 177.947934][ T29] audit: type=1326 audit(1765232035.624:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 177.977912][ T29] audit: type=1326 audit(1765232035.624:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 178.001893][ T29] audit: type=1326 audit(1765232035.624:10775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 178.025661][ T29] audit: type=1326 audit(1765232035.624:10776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 178.049471][ T29] audit: type=1326 audit(1765232035.624:10777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2c5c22f749 code=0x7ffc0000 [ 178.049513][ T29] audit: type=1326 audit(1765232035.624:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c5c22f783 code=0x7ffc0000 [ 178.049564][ T29] audit: type=1326 audit(1765232035.624:10779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c5c22e1ff code=0x7ffc0000 [ 178.049598][ T29] audit: type=1326 audit(1765232035.634:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2c5c22f7d7 code=0x7ffc0000 [ 178.049636][ T29] audit: type=1326 audit(1765232035.634:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5c22df90 code=0x7ffc0000 [ 178.049675][ T29] audit: type=1326 audit(1765232035.634:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2c5c22e3aa code=0x7ffc0000 [ 178.052565][T10150] lo speed is unknown, defaulting to 1000 [ 178.140168][T10200] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.170136][T10150] lo speed is unknown, defaulting to 1000 [ 178.202799][T10200] ext4 filesystem being mounted at /478/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.289888][T10203] set_capacity_and_notify: 13 callbacks suppressed [ 178.289906][T10203] loop4: detected capacity change from 0 to 512 [ 178.320936][T10150] lo speed is unknown, defaulting to 1000 [ 178.322134][T10203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.337649][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.379713][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'. [ 178.388876][T10212] 8021q: VLANs not supported on ip6_vti0 [ 178.398752][T10203] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.407110][T10150] lo speed is unknown, defaulting to 1000 [ 178.450921][T10150] lo speed is unknown, defaulting to 1000 [ 178.524171][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2263'. [ 178.617150][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 178.635995][T10226] loop2: detected capacity change from 0 to 8192 [ 178.683385][T10239] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2271'. [ 178.706867][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 178.809421][T10261] loop5: detected capacity change from 0 to 1024 [ 178.930652][T10262] lo speed is unknown, defaulting to 1000 [ 178.940385][T10262] lo speed is unknown, defaulting to 1000 [ 179.155885][T10282] loop3: detected capacity change from 0 to 1024 [ 179.171633][T10282] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 179.188313][T10282] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.204788][T10286] FAULT_INJECTION: forcing a failure. [ 179.204788][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 179.217651][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.1.2286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.217686][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.217703][T10286] Call Trace: [ 179.217712][T10286] [ 179.217722][T10286] __dump_stack+0x1d/0x30 [ 179.217762][T10286] dump_stack_lvl+0xe8/0x140 [ 179.217837][T10286] dump_stack+0x15/0x1b [ 179.217869][T10286] should_fail_ex+0x265/0x280 [ 179.217897][T10286] should_failslab+0x8c/0xb0 [ 179.217996][T10286] kmem_cache_alloc_noprof+0x69/0x4b0 [ 179.218025][T10286] ? getname_flags+0x80/0x3b0 [ 179.218051][T10286] getname_flags+0x80/0x3b0 [ 179.218080][T10286] user_path_at+0x28/0x130 [ 179.218165][T10286] __se_sys_name_to_handle_at+0xfd/0x640 [ 179.218204][T10286] ? ksys_write+0x192/0x1a0 [ 179.218230][T10286] __x64_sys_name_to_handle_at+0x67/0x80 [ 179.218321][T10286] x64_sys_call+0x164a/0x3000 [ 179.218348][T10286] do_syscall_64+0xd8/0x2a0 [ 179.218389][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.218459][T10286] RIP: 0033:0x7fa09d6cf749 [ 179.218478][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.218511][T10286] RSP: 002b:00007fa09c12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 179.218535][T10286] RAX: ffffffffffffffda RBX: 00007fa09d925fa0 RCX: 00007fa09d6cf749 [ 179.218550][T10286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 179.218565][T10286] RBP: 00007fa09c12f090 R08: 0000000000001000 R09: 0000000000000000 [ 179.218646][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.218662][T10286] R13: 00007fa09d926038 R14: 00007fa09d925fa0 R15: 00007ffefa02feb8 [ 179.218686][T10286] [ 179.234741][T10282] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 179.409291][T10282] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.415897][T10282] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.2283: Inode bitmap for bg 0 marked uninitialized [ 179.572209][T10289] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 179.772860][T10318] loop5: detected capacity change from 0 to 1024 [ 179.790526][T10318] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 179.839505][T10318] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.850508][T10318] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 179.858820][T10318] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.872700][T10318] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.2298: Inode bitmap for bg 0 marked uninitialized [ 179.900423][T10303] loop3: detected capacity change from 0 to 1024 [ 179.937805][T10303] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 180.211701][T10315] lo speed is unknown, defaulting to 1000 [ 180.221477][T10347] loop3: detected capacity change from 0 to 512 [ 180.228714][T10315] lo speed is unknown, defaulting to 1000 [ 180.237779][T10347] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.273026][T10347] EXT4-fs (loop3): 1 truncate cleaned up [ 180.289772][T10354] loop2: detected capacity change from 0 to 1024 [ 180.297694][T10354] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 180.375991][T10354] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.386839][T10354] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 180.395934][T10354] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.422770][T10354] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2312: Inode bitmap for bg 0 marked uninitialized [ 180.491342][T10367] loop4: detected capacity change from 0 to 1024 [ 180.506327][T10367] EXT4-fs: Ignoring removed orlov option [ 180.753623][T10385] FAULT_INJECTION: forcing a failure. [ 180.753623][T10385] name failslab, interval 1, probability 0, space 0, times 0 [ 180.766416][T10385] CPU: 0 UID: 0 PID: 10385 Comm: syz.1.2324 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.766509][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.766526][T10385] Call Trace: [ 180.766535][T10385] [ 180.766545][T10385] __dump_stack+0x1d/0x30 [ 180.766613][T10385] dump_stack_lvl+0xe8/0x140 [ 180.766642][T10385] dump_stack+0x15/0x1b [ 180.766666][T10385] should_fail_ex+0x265/0x280 [ 180.766689][T10385] should_failslab+0x8c/0xb0 [ 180.766749][T10385] kmem_cache_alloc_noprof+0x69/0x4b0 [ 180.766779][T10385] ? getname_flags+0x80/0x3b0 [ 180.766845][T10385] getname_flags+0x80/0x3b0 [ 180.766871][T10385] user_path_at+0x28/0x130 [ 180.766903][T10385] __se_sys_name_to_handle_at+0xfd/0x640 [ 180.766935][T10385] ? ksys_write+0x192/0x1a0 [ 180.766957][T10385] __x64_sys_name_to_handle_at+0x67/0x80 [ 180.767100][T10385] x64_sys_call+0x164a/0x3000 [ 180.767132][T10385] do_syscall_64+0xd8/0x2a0 [ 180.767174][T10385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.767261][T10385] RIP: 0033:0x7fa09d6cf749 [ 180.767277][T10385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.767329][T10385] RSP: 002b:00007fa09c12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 180.767402][T10385] RAX: ffffffffffffffda RBX: 00007fa09d925fa0 RCX: 00007fa09d6cf749 [ 180.767415][T10385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.767428][T10385] RBP: 00007fa09c12f090 R08: 0000000000001000 R09: 0000000000000000 [ 180.767500][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.767517][T10385] R13: 00007fa09d926038 R14: 00007fa09d925fa0 R15: 00007ffefa02feb8 [ 180.767542][T10385] [ 181.033922][T10381] loop2: detected capacity change from 0 to 1024 [ 181.041891][T10381] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 181.156269][T10395] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 181.166205][T10395] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.178622][T10395] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 181.186980][T10395] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.202791][T10395] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2328: Inode bitmap for bg 0 marked uninitialized [ 181.274768][T10374] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 181.421722][T10408] FAULT_INJECTION: forcing a failure. [ 181.421722][T10408] name failslab, interval 1, probability 0, space 0, times 0 [ 181.434622][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.5.2333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.434650][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.434663][T10408] Call Trace: [ 181.434688][T10408] [ 181.434698][T10408] __dump_stack+0x1d/0x30 [ 181.434743][T10408] dump_stack_lvl+0xe8/0x140 [ 181.434770][T10408] dump_stack+0x15/0x1b [ 181.434869][T10408] should_fail_ex+0x265/0x280 [ 181.434897][T10408] should_failslab+0x8c/0xb0 [ 181.434922][T10408] kmem_cache_alloc_noprof+0x69/0x4b0 [ 181.435013][T10408] ? getname_flags+0x80/0x3b0 [ 181.435055][T10408] getname_flags+0x80/0x3b0 [ 181.435108][T10408] __x64_sys_unlinkat+0x70/0xb0 [ 181.435135][T10408] x64_sys_call+0x2b49/0x3000 [ 181.435209][T10408] do_syscall_64+0xd8/0x2a0 [ 181.435278][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.435300][T10408] RIP: 0033:0x7f2c5c22f749 [ 181.435316][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.435365][T10408] RSP: 002b:00007f2c5ac97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 181.435461][T10408] RAX: ffffffffffffffda RBX: 00007f2c5c485fa0 RCX: 00007f2c5c22f749 [ 181.435477][T10408] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffffff [ 181.435494][T10408] RBP: 00007f2c5ac97090 R08: 0000000000000000 R09: 0000000000000000 [ 181.435511][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.435562][T10408] R13: 00007f2c5c486038 R14: 00007f2c5c485fa0 R15: 00007ffe59a92478 [ 181.435587][T10408] [ 181.504228][T10398] lo speed is unknown, defaulting to 1000 [ 181.605202][T10398] lo speed is unknown, defaulting to 1000 [ 181.737996][T10416] FAULT_INJECTION: forcing a failure. [ 181.737996][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.751144][T10416] CPU: 1 UID: 0 PID: 10416 Comm: syz.5.2336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.751176][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.751193][T10416] Call Trace: [ 181.751202][T10416] [ 181.751213][T10416] __dump_stack+0x1d/0x30 [ 181.751271][T10416] dump_stack_lvl+0xe8/0x140 [ 181.751299][T10416] dump_stack+0x15/0x1b [ 181.751325][T10416] should_fail_ex+0x265/0x280 [ 181.751354][T10416] should_fail+0xb/0x20 [ 181.751390][T10416] should_fail_usercopy+0x1a/0x20 [ 181.751414][T10416] _copy_from_user+0x1c/0xb0 [ 181.751447][T10416] __sys_bpf+0x183/0x7c0 [ 181.751478][T10416] __x64_sys_bpf+0x41/0x50 [ 181.751553][T10416] x64_sys_call+0x28e1/0x3000 [ 181.751585][T10416] do_syscall_64+0xd8/0x2a0 [ 181.751629][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.751683][T10416] RIP: 0033:0x7f2c5c22f749 [ 181.751700][T10416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.751718][T10416] RSP: 002b:00007f2c5ac97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.751823][T10416] RAX: ffffffffffffffda RBX: 00007f2c5c485fa0 RCX: 00007f2c5c22f749 [ 181.751840][T10416] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 181.751926][T10416] RBP: 00007f2c5ac97090 R08: 0000000000000000 R09: 0000000000000000 [ 181.751944][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.751960][T10416] R13: 00007f2c5c486038 R14: 00007f2c5c485fa0 R15: 00007ffe59a92478 [ 181.752008][T10416] [ 182.129000][T10424] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 182.159084][T10426] __nla_validate_parse: 12 callbacks suppressed [ 182.159101][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 182.212409][T10424] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.225268][T10424] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 182.235922][T10424] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.243305][T10424] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.2339: Inode bitmap for bg 0 marked uninitialized [ 182.343605][T10414] lo speed is unknown, defaulting to 1000 [ 182.353135][T10414] lo speed is unknown, defaulting to 1000 [ 182.506024][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2344'. [ 182.584314][T10441] ext4 filesystem being mounted at /497/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.024083][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2351'. [ 183.034957][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 183.035051][ T29] audit: type=1326 audit(1765232040.724:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.104180][ T29] audit: type=1326 audit(1765232040.754:11483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.127895][ T29] audit: type=1326 audit(1765232040.754:11484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.151587][ T29] audit: type=1326 audit(1765232040.754:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.175373][ T29] audit: type=1326 audit(1765232040.754:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.199121][ T29] audit: type=1326 audit(1765232040.754:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.239581][T10466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.245872][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2352'. [ 183.255085][ T29] audit: type=1326 audit(1765232040.944:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.281326][ T29] audit: type=1326 audit(1765232040.944:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.305039][ T29] audit: type=1326 audit(1765232040.944:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e46df749 code=0x7ffc0000 [ 183.329050][ T29] audit: type=1326 audit(1765232040.944:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88e46ddf90 code=0x7ffc0000 [ 183.355485][T10466] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.497703][T10382] syz.4.2319 (10382) used greatest stack depth: 9744 bytes left [ 183.517120][T10480] set_capacity_and_notify: 7 callbacks suppressed [ 183.517138][T10480] loop5: detected capacity change from 0 to 512 [ 183.530897][T10480] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.547430][T10480] EXT4-fs (loop5): 1 truncate cleaned up [ 183.634314][T10483] loop4: detected capacity change from 0 to 8192 [ 183.762050][T10495] loop2: detected capacity change from 0 to 1024 [ 183.797698][T10495] EXT4-fs: test_dummy_encryption option not supported [ 183.922583][T10508] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2365'. [ 183.971370][T10505] loop3: detected capacity change from 0 to 512 [ 183.986917][T10505] EXT4-fs (loop3): too many log groups per flexible block group [ 184.010816][T10505] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 184.011380][T10513] loop5: detected capacity change from 0 to 512 [ 184.039245][T10513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.060412][T10505] EXT4-fs (loop3): mount failed [ 184.080871][T10513] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.099941][T10494] lo speed is unknown, defaulting to 1000 [ 184.116641][T10494] lo speed is unknown, defaulting to 1000 [ 184.205474][T10518] loop5: detected capacity change from 0 to 512 [ 184.221068][T10502] lo speed is unknown, defaulting to 1000 [ 184.239579][T10518] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.251203][T10518] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 184.261515][T10518] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2367: Corrupt directory, running e2fsck is recommended [ 184.285662][T10518] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 184.294320][T10518] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2367: corrupted in-inode xattr: e_name out of bounds [ 184.309821][T10518] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2367: couldn't read orphan inode 15 (err -117) [ 184.373632][T10524] loop3: detected capacity change from 0 to 8192 [ 184.400967][T10502] lo speed is unknown, defaulting to 1000 [ 184.518126][T10527] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.529832][T10527] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 184.540047][T10527] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2367: Corrupt directory, running e2fsck is recommended [ 184.780493][T10528] lo speed is unknown, defaulting to 1000 [ 184.789275][T10530] loop4: detected capacity change from 0 to 8192 [ 184.817417][T10528] lo speed is unknown, defaulting to 1000 [ 184.876309][T10544] loop5: detected capacity change from 0 to 1024 [ 185.066375][T10555] loop2: detected capacity change from 0 to 512 [ 185.106515][T10555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.182796][T10555] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.261313][T10550] lo speed is unknown, defaulting to 1000 [ 185.268135][T10550] lo speed is unknown, defaulting to 1000 [ 185.409447][ T3007] ================================================================== [ 185.417637][ T3007] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 185.424365][ T3007] [ 185.426702][ T3007] write to 0xffff888107a98910 of 8 bytes by task 3890 on cpu 1: [ 185.434349][ T3007] __dentry_kill+0x142/0x4b0 [ 185.438993][ T3007] finish_dput+0x2b/0x200 [ 185.443364][ T3007] dput+0x52/0x60 [ 185.447108][ T3007] lookup_one_qstr_excl+0x15a/0x250 [ 185.452336][ T3007] do_unlinkat+0x148/0x4b0 [ 185.456777][ T3007] __x64_sys_unlink+0x2e/0x40 [ 185.461489][ T3007] x64_sys_call+0x2f48/0x3000 [ 185.466206][ T3007] do_syscall_64+0xd8/0x2a0 [ 185.470755][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.476679][ T3007] [ 185.479024][ T3007] read to 0xffff888107a98910 of 8 bytes by task 3007 on cpu 0: [ 185.486581][ T3007] fast_dput+0x5f/0x2c0 [ 185.490769][ T3007] dput+0x24/0x60 [ 185.494440][ T3007] step_into_slowpath+0x36b/0x480 [ 185.499502][ T3007] path_lookupat+0x330/0x500 [ 185.504128][ T3007] filename_lookup+0x147/0x340 [ 185.508930][ T3007] do_readlinkat+0x7d/0x320 [ 185.513458][ T3007] __x64_sys_readlink+0x47/0x60 [ 185.518333][ T3007] x64_sys_call+0x2af1/0x3000 [ 185.523040][ T3007] do_syscall_64+0xd8/0x2a0 [ 185.527567][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.533480][ T3007] [ 185.535810][ T3007] value changed: 0xffff888237827350 -> 0x0000000000000000 [ 185.542925][ T3007] [ 185.545253][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 185.551550][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.560930][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.571011][ T3007] ================================================================== [ 185.883732][T10565] lo speed is unknown, defaulting to 1000 [ 185.889901][T10565] lo speed is unknown, defaulting to 1000