last executing test programs: 35.232800601s ago: executing program 0 (id=469): futex_waitv(&(0x7f0000000180)=[{0x7f00000000000000, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) timerfd_create(0x2, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000003000000000046548"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa4010000b70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x400c815) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 34.204196647s ago: executing program 0 (id=475): socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x0, 0x404042bbe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000001d40)={'syztnl0\x00', 0x0, 0x4, 0xfd, 0x3, 0x5e, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001cc0)=ANY=[@ANYRES32=r2, @ANYBLOB="a157f899250c2dbbbe40a0e8388130cd932c285f89830608", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x18) 33.424572105s ago: executing program 0 (id=480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x5434, 0x1, 0x2000, 0xffffffff}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) io_uring_register$IORING_REGISTER_FILES2(r4, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) read$rfkill(r5, &(0x7f00000004c0), 0x8) 32.910802953s ago: executing program 0 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffffffff000000000001000018280000", @ANYRES32, @ANYBLOB="000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018400000fdffffff00000000000000009500000000000000851000000000000018120000", @ANYRES32, @ANYBLOB="0000040000000000b703040000000000850040000c300000b7a39d26de91087029"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close_range(r4, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000), 0x1, 0x784, &(0x7f00000007c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f00000001c0)='./file0\x00') signalfd(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pwritev(r7, &(0x7f0000000f80)=[{&(0x7f0000000200)="829ca0ce6556016f9e038e4d710372892be086e4083b04b5e98d3066f7b99606485121ce799414fe45ca9f", 0x2b}, {&(0x7f0000000540)="142b790f0fa4a73840250e8075997ac7d135d616aa45268f08aa80bd8a12b877bfc1e1aabace2c40076e2260463995fa571d9c403d2c20abb87ffb2cd028838dc41d12a47b76919411d9e372d50a59dd9bd04404960647c53394e145555b97888edf35e79675e7bb4d9df904b5a3a91d62c817194265c2f6d2c0d6d9f1e4da62111dd1c581597c82e1c47b3da79fbd810de560efed4a973808ec997418c149df9317578e76b671408fef5b1323affcfa41a5ddda37e36f8de74c5ddd4440d5079584a41f9127eb6247703109ab22ee1faa19a7ca3202808a351c22615ea46fcda9a94bb5ef1628bc64226d3ea055acd049be69ff", 0xf4}, {&(0x7f0000000280)="905e3a85f8de59", 0x7}, {&(0x7f0000000640)="1205d2783bdf280783634e59d7194f7cd89e4c7f9b8027dabde7eb9047a39dac6ce3cee3c73502b075558c165ea084091082967ea0e636380bd6de51a5b0da4dc1956faf08e6f5a3d81ac3311678d5735e5266714765c7befc36716bad4e5047910be086465b9b6359d75c5544090de7a5a9ae921ccb83979121838ee5f4fce4bbb0c4b75359621a519a77c389afe29ffa02260413065c92e0594790a7d63193edbb84cde7bfb6412d37dad7e2c8de8dafccc55d56f00feefdb6632b000aa28932d8ba78", 0xc4}, {&(0x7f00000003c0)="9099e221219db731e2b1eb40d074052bd686d59ee7c67c67f9456c2db4ce23769b6031c03420907de8013b2d64c7d1a9a36fc53472752ba428cbf2a5aeb4e4d94c6bad232c79f8e1276eee88e18e", 0x4e}], 0x5, 0x3, 0x3) socket(0x10, 0x803, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) fcntl$setsig(r1, 0xa, 0x17) syz_clone(0x40005080, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 32.753615592s ago: executing program 0 (id=487): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="2c0df992c9b33bbe000000a93e778864a00d8000f4f3d4eecc7f3e6954b636dd9035f714205ccfb231ce5e012315febcb475a10fb7322b47f952150472eb91dd5f3a20b0575e156142a3d4ad72ae23f0fbcc197d5d507fa0", @ANYRES32, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_secret(0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r4, 0x0, 0x0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() 31.497563547s ago: executing program 0 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86042, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) stat(&(0x7f0000000040)='./file0\x00', 0x0) 31.444406647s ago: executing program 32 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86042, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) stat(&(0x7f0000000040)='./file0\x00', 0x0) 3.209943822s ago: executing program 4 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000fc0)={0xffffffffffffffff, r4}) 3.084840492s ago: executing program 1 (id=789): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000017c0)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000008000000000000000000800000000001000000000000000400000000000000000000000000000000000000000000000000000000000000f307000009f2605b0300000000000000100000000000000005000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b601c51b0fcb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/582]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1400) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001640)=""/165, &(0x7f0000000040)=0xa5) syz_pidfd_open(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000001280)=""/3, 0x3a, 0x3, 0x1, 0x10, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) 3.066188762s ago: executing program 3 (id=790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file1\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) inotify_init1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @remote}, 0x10) 3.031088162s ago: executing program 2 (id=791): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/llc/socket\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000800), 0x0) setxattr$security_selinux(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff01800000080039ba4751a1ec"], 0xffffff32) dup(r0) 2.915219891s ago: executing program 2 (id=793): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x1, 0xc, 0x7, 0x59c, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 2.914648301s ago: executing program 2 (id=794): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 2.871360631s ago: executing program 3 (id=795): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="18b9ef4bac4b2922000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) 2.77563468s ago: executing program 3 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 2.717499211s ago: executing program 3 (id=797): futex_waitv(&(0x7f0000000180)=[{0x7f00000000000000, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) timerfd_create(0x2, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000030000000000465485a"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa4010000b702000008000000182300", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x400c815) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.7019629s ago: executing program 2 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) 2.357327089s ago: executing program 4 (id=799): futex_waitv(&(0x7f0000000180)=[{0x7f00000000000000, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) timerfd_create(0x2, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x000\x00'], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa4010000b70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x400c815) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.716571827s ago: executing program 5 (id=802): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="2c0df992c9b33bbe000000a93e778864a00d8000f4f3d4eecc7f3e6954b636dd9035f714205ccfb231ce5e012315febcb475a10fb7322b47f952150472eb91dd5f3a20b0575e156142a3d4ad72ae23f0fbcc197d5d507fa0", @ANYRES32, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_secret(0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r4, 0x0, 0x0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() 1.509955716s ago: executing program 5 (id=803): socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x0, 0x404042bbe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000001d40)={'syztnl0\x00', 0x0, 0x4, 0xfd, 0x3, 0x5e, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001cc0)=ANY=[@ANYRES32=r2, @ANYBLOB="a157f899250c2dbbbe40a0e8388130cd932c285f89830608", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x18) 1.393872386s ago: executing program 1 (id=804): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/llc/socket\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000800)=[{0x0}], 0x1) setxattr$security_selinux(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff01800000080039ba4751a1ec"], 0xffffff32) dup(r0) 1.348617825s ago: executing program 5 (id=805): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x1, 0xc, 0x7, 0x59c, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.158941864s ago: executing program 1 (id=806): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="18b9ef4bac4b2922000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) 1.157758474s ago: executing program 4 (id=807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 1.101634514s ago: executing program 3 (id=808): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 1.069282085s ago: executing program 4 (id=809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000fc0)={0xffffffffffffffff, r4}) 1.028023754s ago: executing program 1 (id=810): syz_io_uring_setup(0x77fc, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x5, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=ANY=[], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) 872.286434ms ago: executing program 5 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 664.065543ms ago: executing program 2 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 635.840693ms ago: executing program 5 (id=813): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="2c0df992c9b33bbe000000a93e778864a00d8000f4f3d4eecc7f3e6954b636dd9035f714205ccfb231ce5e012315febcb475a10fb7322b47f952150472eb91dd5f3a20b0575e156142a3d4ad72ae23f0fbcc197d5d507fa0", @ANYRES32, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_secret(0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r4, 0x0, 0x0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() 565.317612ms ago: executing program 2 (id=814): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000017c0)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000008000000000000000000800000000001000000000000000400000000000000000000000000000000000000000000000000000000000000f307000009f2605b0300000000000000100000000000000005000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b601c51b0fcb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/582]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1400) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001640)=""/165, &(0x7f0000000040)=0xa5) syz_pidfd_open(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000001280)=""/3, 0x3a, 0x3, 0x1, 0x10, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 481.471222ms ago: executing program 3 (id=815): futex_waitv(&(0x7f0000000180)=[{0x7f00000000000000, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) timerfd_create(0x2, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000030000000000465485a"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa4010000b702000008000000182300", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x400c815) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 175.657601ms ago: executing program 4 (id=816): socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x0, 0x404042bbe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000001d40)={'syztnl0\x00', 0x0, 0x4, 0xfd, 0x3, 0x5e, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001cc0)=ANY=[@ANYRES32=r2, @ANYBLOB="a157f899250c2dbbbe40a0e8388130cd932c285f89830608", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x18) 125.002631ms ago: executing program 1 (id=817): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/llc/socket\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000800)=[{0x0}], 0x1) setxattr$security_selinux(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff01800000080039ba4751a1ec"], 0xffffff32) dup(r0) 30.81732ms ago: executing program 1 (id=818): futex_waitv(&(0x7f0000000180)=[{0x7f00000000000000, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) timerfd_create(0x2, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000030000000000465485a"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa4010000b70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x400c815) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 14.362491ms ago: executing program 5 (id=819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x5434, 0x1, 0x2000, 0xffffffff}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) io_uring_register$IORING_REGISTER_FILES2(r5, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="24002d800800020003000000050001"], 0x40}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000440)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) 0s ago: executing program 4 (id=820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): city change from 0 to 1024 [ 51.145060][ T4201] EXT4-fs: Ignoring removed orlov option [ 51.159988][ T4201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.166454][ T4193] IPVS: using max 2880 ests per chain, 144000 per kthread [ 51.430886][ T4222] loop3: detected capacity change from 0 to 512 [ 51.445205][ T4223] loop4: detected capacity change from 0 to 512 [ 51.447051][ T4222] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 51.466792][ T4222] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.473719][ T4223] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.482110][ T4223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.496850][ T4222] __quota_error: 187 callbacks suppressed [ 51.496918][ T4222] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 51.497342][ T4223] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 51.503726][ T4222] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.515321][ T4223] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.527088][ T4222] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 51.572084][ T4223] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 51.572520][ T4222] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.220: casefold flag without casefold feature [ 51.589565][ T4223] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.222: casefold flag without casefold feature [ 51.593602][ T4222] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.220: couldn't read orphan inode 16 (err -117) [ 51.618661][ T4223] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.222: couldn't read orphan inode 16 (err -117) [ 51.626611][ T4222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.636598][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.090864][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.117746][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.128201][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.143331][ T29] audit: type=1326 audit(1738075938.073:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.169858][ T29] audit: type=1326 audit(1738075938.073:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.206766][ T29] audit: type=1326 audit(1738075938.135:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.230703][ T29] audit: type=1326 audit(1738075938.135:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.254224][ T29] audit: type=1326 audit(1738075938.135:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.279584][ T29] audit: type=1326 audit(1738075938.135:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.306679][ T29] audit: type=1326 audit(1738075938.135:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.319397][ T4244] loop1: detected capacity change from 0 to 1024 [ 52.332218][ T29] audit: type=1326 audit(1738075938.135:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 52.373610][ T4244] EXT4-fs: Ignoring removed orlov option [ 52.444947][ T4244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.474797][ T4252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 52.633653][ T4262] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 53.139985][ T4274] loop0: detected capacity change from 0 to 512 [ 53.209631][ T4274] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 53.445356][ T4274] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.468484][ T4274] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.492917][ T4279] loop3: detected capacity change from 0 to 2048 [ 53.526850][ T4279] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.562158][ T4274] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 53.581147][ T4274] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.238: casefold flag without casefold feature [ 53.609721][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.641037][ T4274] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.238: couldn't read orphan inode 16 (err -117) [ 53.691015][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.705377][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.738966][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.975257][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.009495][ T4292] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.099530][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 54.206761][ T4312] loop2: detected capacity change from 0 to 4096 [ 54.225387][ T4319] loop1: detected capacity change from 0 to 1024 [ 54.239178][ T4319] EXT4-fs: Ignoring removed orlov option [ 54.263624][ T4312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.284247][ T4319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.314110][ T4326] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 54.315518][ T35] IPVS: starting estimator thread 0... [ 54.343672][ T4312] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.365605][ T4337] loop3: detected capacity change from 0 to 512 [ 54.375772][ T4337] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.384482][ T4337] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.392740][ T4337] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.426567][ T4335] IPVS: using max 3024 ests per chain, 151200 per kthread [ 54.426678][ T4337] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 54.446267][ T4337] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.256: casefold flag without casefold feature [ 54.462215][ T4337] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.256: couldn't read orphan inode 16 (err -117) [ 54.475878][ T4337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.583455][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.587425][ T4347] loop0: detected capacity change from 0 to 4096 [ 54.599971][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.610340][ T4347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.670082][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.724511][ T4350] loop0: detected capacity change from 0 to 512 [ 54.735548][ T4350] EXT4-fs: Ignoring removed oldalloc option [ 54.742395][ T4350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.753649][ T4350] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 54.766973][ T4350] EXT4-fs (loop0): 1 truncate cleaned up [ 54.774197][ T4350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.844302][ T4350] Zero length message leads to an empty skb [ 54.865517][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.908026][ T4355] loop0: detected capacity change from 0 to 2048 [ 54.915326][ T4355] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.939788][ T4355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.978704][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.034281][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.044238][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.077309][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 55.192081][ T4375] loop0: detected capacity change from 0 to 1024 [ 55.292297][ T4380] loop0: detected capacity change from 0 to 512 [ 55.309212][ T4380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.327495][ T4382] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 55.378018][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.390287][ T4380] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.276: bad orphan inode 131083 [ 55.409994][ T4385] loop1: detected capacity change from 0 to 512 [ 55.432818][ T4385] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.491956][ T4380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.518166][ T4385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.526874][ T4389] sd 0:0:1:0: device reset [ 55.537437][ T4385] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.555339][ T4385] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 55.563106][ T4385] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.274: casefold flag without casefold feature [ 55.576856][ T4385] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.274: couldn't read orphan inode 16 (err -117) [ 55.594783][ T4389] loop2: detected capacity change from 0 to 164 [ 55.598534][ T4385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.615253][ T4389] ISOFS: unable to read i-node block [ 55.620734][ T4389] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 55.683185][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.724439][ T4395] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 55.824500][ T4406] loop2: detected capacity change from 0 to 512 [ 55.839707][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 55.861739][ T4406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.939827][ T4415] FAULT_INJECTION: forcing a failure. [ 55.939827][ T4415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.950494][ T4416] loop3: detected capacity change from 0 to 512 [ 55.953620][ T4415] CPU: 0 UID: 0 PID: 4415 Comm: syz.4.289 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 55.953684][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.953695][ T4415] Call Trace: [ 55.953702][ T4415] [ 55.953710][ T4415] dump_stack_lvl+0xf2/0x150 [ 55.953736][ T4415] dump_stack+0x15/0x1a [ 55.953754][ T4415] should_fail_ex+0x24a/0x260 [ 55.953803][ T4415] should_fail+0xb/0x10 [ 55.953864][ T4415] should_fail_usercopy+0x1a/0x20 [ 55.953881][ T4415] _copy_from_user+0x1c/0xa0 [ 55.953902][ T4415] move_addr_to_kernel+0x82/0x120 [ 55.953925][ T4415] __sys_sendto+0x12e/0x230 [ 55.954024][ T4415] __x64_sys_sendto+0x78/0x90 [ 55.954050][ T4415] x64_sys_call+0x29fa/0x2dc0 [ 55.954073][ T4415] do_syscall_64+0xc9/0x1c0 [ 55.954099][ T4415] ? clear_bhb_loop+0x55/0xb0 [ 55.954122][ T4415] ? clear_bhb_loop+0x55/0xb0 [ 55.954222][ T4415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.954274][ T4415] RIP: 0033:0x7f1d91fccda9 [ 55.954289][ T4415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.954305][ T4415] RSP: 002b:00007f1d90637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 55.954323][ T4415] RAX: ffffffffffffffda RBX: 00007f1d921e5fa0 RCX: 00007f1d91fccda9 [ 55.954334][ T4415] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 55.954419][ T4415] RBP: 00007f1d90637090 R08: 0000000020b63fe4 R09: 000000000000001c [ 55.954429][ T4415] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 55.954440][ T4415] R13: 0000000000000000 R14: 00007f1d921e5fa0 R15: 00007fff35b9bc78 [ 55.954455][ T4415] [ 55.973194][ T4406] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.285: bad orphan inode 131083 [ 55.984538][ T4416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.987836][ T4416] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.288: bad orphan inode 131083 [ 56.066121][ T4420] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 56.178243][ T4421] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 56.214742][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.051462][ T4431] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 57.072515][ T4433] loop2: detected capacity change from 0 to 1024 [ 57.108326][ T4435] loop1: detected capacity change from 0 to 512 [ 57.133849][ T4435] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.215265][ T4435] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.291: bad orphan inode 131083 [ 57.334459][ T4450] loop0: detected capacity change from 0 to 4096 [ 57.367031][ T4451] loop4: detected capacity change from 0 to 512 [ 57.391162][ T4451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.415088][ T4456] loop1: detected capacity change from 0 to 512 [ 57.425861][ T4451] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.301: bad orphan inode 131083 [ 57.437203][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 57.437215][ T29] audit: type=1400 audit(1738075943.449:1196): avc: denied { read append } for pid=4432 comm="syz.2.292" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.467314][ T29] audit: type=1400 audit(1738075943.449:1197): avc: denied { open } for pid=4432 comm="syz.2.292" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.490725][ T29] audit: type=1400 audit(1738075943.449:1198): avc: denied { ioctl } for pid=4432 comm="syz.2.292" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.518129][ T4456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.540888][ T4456] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.303: bad orphan inode 131083 [ 57.597248][ T4461] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 57.640340][ T4466] loop0: detected capacity change from 0 to 1024 [ 57.647221][ T4466] EXT4-fs: Ignoring removed orlov option [ 57.751917][ T4470] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 57.952265][ T29] audit: type=1326 audit(1738075943.976:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 57.980125][ T29] audit: type=1326 audit(1738075943.976:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 58.183409][ T4483] netlink: 'syz.3.314': attribute type 9 has an invalid length. [ 58.213540][ T29] audit: type=1326 audit(1738075944.037:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 58.238301][ T29] audit: type=1326 audit(1738075944.037:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 58.262280][ T29] audit: type=1326 audit(1738075944.047:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 58.286054][ T29] audit: type=1326 audit(1738075944.047:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 58.310808][ T29] audit: type=1326 audit(1738075944.047:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 58.341263][ T4485] loop1: detected capacity change from 0 to 1024 [ 58.348334][ T4485] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 58.358990][ T4485] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 58.363812][ T4488] loop3: detected capacity change from 0 to 512 [ 58.376979][ T4485] EXT4-fs (loop1): journal inode is deleted [ 58.383779][ T4488] journal_path: Non-blockdev passed as './bus' [ 58.390017][ T4488] EXT4-fs: error: could not find journal device path [ 58.398909][ T4490] FAULT_INJECTION: forcing a failure. [ 58.398909][ T4490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.412277][ T4490] CPU: 1 UID: 0 PID: 4490 Comm: syz.2.316 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 58.412302][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.412322][ T4490] Call Trace: [ 58.412327][ T4490] [ 58.412332][ T4490] dump_stack_lvl+0xf2/0x150 [ 58.412358][ T4490] dump_stack+0x15/0x1a [ 58.412377][ T4490] should_fail_ex+0x24a/0x260 [ 58.412457][ T4490] should_fail+0xb/0x10 [ 58.412482][ T4490] should_fail_usercopy+0x1a/0x20 [ 58.412499][ T4490] _copy_from_user+0x1c/0xa0 [ 58.412605][ T4490] io_submit_one+0x54/0x1230 [ 58.412709][ T4490] ? __rcu_read_unlock+0x4e/0x70 [ 58.412728][ T4490] __se_sys_io_submit+0xf5/0x280 [ 58.412748][ T4490] __x64_sys_io_submit+0x43/0x50 [ 58.412768][ T4490] x64_sys_call+0x2c20/0x2dc0 [ 58.412791][ T4490] do_syscall_64+0xc9/0x1c0 [ 58.412836][ T4490] ? clear_bhb_loop+0x55/0xb0 [ 58.412860][ T4490] ? clear_bhb_loop+0x55/0xb0 [ 58.412881][ T4490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.412963][ T4490] RIP: 0033:0x7fcf3825cda9 [ 58.412977][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.412991][ T4490] RSP: 002b:00007fcf368c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 58.413009][ T4490] RAX: ffffffffffffffda RBX: 00007fcf38475fa0 RCX: 00007fcf3825cda9 [ 58.413020][ T4490] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 00007fcf38fb2000 [ 58.413030][ T4490] RBP: 00007fcf368c7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.413070][ T4490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.413079][ T4490] R13: 0000000000000000 R14: 00007fcf38475fa0 R15: 00007ffdf9c875f8 [ 58.413097][ T4490] [ 58.716005][ T4494] sch_tbf: burst 4096 is lower than device lo mtu (65550) ! [ 58.764083][ T4496] loop3: detected capacity change from 0 to 2048 [ 58.782068][ T4498] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 58.794262][ T4496] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.907875][ T4492] loop1: detected capacity change from 0 to 512 [ 58.958628][ T4492] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.013502][ T4492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.022422][ T4492] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.104420][ T4492] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 59.113895][ T4492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.317: bg 0: block 40: padding at end of block bitmap is not set [ 59.131954][ T4492] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.165344][ T4492] EXT4-fs (loop1): 1 truncate cleaned up [ 59.178579][ T4521] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 59.188009][ T4521] SELinux: failed to load policy [ 59.421403][ T4532] loop2: detected capacity change from 0 to 1024 [ 59.428678][ T4532] EXT4-fs: Ignoring removed orlov option [ 59.904736][ T4544] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.975889][ T4546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.333'. [ 59.991465][ T4549] process 'syz.4.334' launched '/dev/fd/4' with NULL argv: empty string added [ 60.102994][ T4556] loop3: detected capacity change from 0 to 512 [ 60.120858][ T4556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.134458][ T4556] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.336: bad orphan inode 131083 [ 60.261195][ T4560] loop4: detected capacity change from 0 to 512 [ 60.285653][ T4562] loop0: detected capacity change from 0 to 512 [ 60.287803][ T4560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.307302][ T4562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.349305][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.338: bad orphan inode 131083 [ 60.349408][ T4562] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.337: bad orphan inode 131083 [ 60.439464][ T4567] dvmrp0: entered allmulticast mode [ 60.522100][ T4571] sd 0:0:1:0: device reset [ 60.577824][ T4575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.625633][ T4578] mmap: syz.0.342 (4578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.627384][ T4571] loop4: detected capacity change from 0 to 164 [ 60.652002][ T4571] ISOFS: unable to read i-node block [ 60.652946][ T4575] netlink: 'syz.3.343': attribute type 11 has an invalid length. [ 60.657597][ T4571] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 60.746011][ T4587] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 60.760139][ T4589] loop2: detected capacity change from 0 to 512 [ 60.780422][ T4584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 60.791734][ T4589] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.803765][ T4588] loop0: detected capacity change from 0 to 4096 [ 60.830833][ T4589] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.838277][ T4589] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.855951][ T4589] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 60.868728][ T4589] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.344: casefold flag without casefold feature [ 60.886118][ T4589] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.344: couldn't read orphan inode 16 (err -117) [ 60.914841][ T4596] loop1: detected capacity change from 0 to 512 [ 60.925881][ T4596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.946896][ T4598] rdma_op ffff888103151180 conn xmit_rdma 0000000000000000 [ 60.956328][ T4598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.966468][ T4598] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.976576][ T4596] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.349: bad orphan inode 131083 [ 61.006203][ T4602] Cannot find add_set index 0 as target [ 61.161109][ T4591] loop4: detected capacity change from 0 to 512 [ 61.185727][ T4609] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 61.191204][ T4591] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.225034][ T4591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.233811][ T4591] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.251510][ T4591] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 61.261973][ T4591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.348: bg 0: block 40: padding at end of block bitmap is not set [ 61.295655][ T4591] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 61.319282][ T4591] EXT4-fs (loop4): 1 truncate cleaned up [ 61.366895][ T4607] loop0: detected capacity change from 0 to 512 [ 61.433051][ T4618] loop3: detected capacity change from 0 to 2048 [ 61.772752][ T4607] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.783650][ T4607] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.791237][ T4607] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.806706][ T4607] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 61.814398][ T4607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.352: bg 0: block 40: padding at end of block bitmap is not set [ 61.830398][ T4607] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 61.841927][ T4607] EXT4-fs (loop0): 1 truncate cleaned up [ 61.843531][ T4631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 61.971683][ T4644] loop3: detected capacity change from 0 to 512 [ 61.985993][ T4644] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.012180][ T4644] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.362: bad orphan inode 131083 [ 62.018365][ T4648] loop0: detected capacity change from 0 to 2048 [ 62.034429][ T4648] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.100330][ T4660] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 62.110424][ T4660] SELinux: failed to load policy [ 62.121474][ T4658] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 62.164775][ T4663] FAULT_INJECTION: forcing a failure. [ 62.164775][ T4663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.180030][ T4663] CPU: 0 UID: 0 PID: 4663 Comm: syz.3.368 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 62.180050][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.180060][ T4663] Call Trace: [ 62.180071][ T4663] [ 62.180172][ T4663] dump_stack_lvl+0xf2/0x150 [ 62.180198][ T4663] dump_stack+0x15/0x1a [ 62.180215][ T4663] should_fail_ex+0x24a/0x260 [ 62.180266][ T4663] should_fail+0xb/0x10 [ 62.180286][ T4663] should_fail_usercopy+0x1a/0x20 [ 62.180330][ T4663] _copy_from_user+0x1c/0xa0 [ 62.180367][ T4663] dev_ethtool+0x180/0x14c0 [ 62.180466][ T4663] ? strcmp+0x21/0x50 [ 62.180490][ T4663] ? __rcu_read_unlock+0x4e/0x70 [ 62.180509][ T4663] dev_ioctl+0x854/0xab0 [ 62.180531][ T4663] sock_do_ioctl+0x11c/0x260 [ 62.180551][ T4663] sock_ioctl+0x40f/0x600 [ 62.180628][ T4663] ? __pfx_sock_ioctl+0x10/0x10 [ 62.180645][ T4663] __se_sys_ioctl+0xc9/0x140 [ 62.180665][ T4663] __x64_sys_ioctl+0x43/0x50 [ 62.180681][ T4663] x64_sys_call+0x1690/0x2dc0 [ 62.180731][ T4663] do_syscall_64+0xc9/0x1c0 [ 62.180755][ T4663] ? clear_bhb_loop+0x55/0xb0 [ 62.180797][ T4663] ? clear_bhb_loop+0x55/0xb0 [ 62.180817][ T4663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.180841][ T4663] RIP: 0033:0x7f01b3f8cda9 [ 62.180915][ T4663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.180929][ T4663] RSP: 002b:00007f01b25f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.180944][ T4663] RAX: ffffffffffffffda RBX: 00007f01b41a5fa0 RCX: 00007f01b3f8cda9 [ 62.181004][ T4663] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000004 [ 62.181014][ T4663] RBP: 00007f01b25f7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.181024][ T4663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.181089][ T4663] R13: 0000000000000000 R14: 00007f01b41a5fa0 R15: 00007ffd967080d8 [ 62.181102][ T4663] [ 62.436219][ T4665] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.489966][ T4673] loop3: detected capacity change from 0 to 1024 [ 62.502439][ T4673] EXT4-fs: Ignoring removed orlov option [ 62.742260][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 62.742278][ T29] audit: type=1400 audit(1738075948.265:1687): avc: denied { append } for pid=4668 comm="syz.1.371" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.772637][ T29] audit: type=1400 audit(1738075948.265:1688): avc: denied { open } for pid=4668 comm="syz.1.371" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.796901][ T29] audit: type=1400 audit(1738075948.265:1689): avc: denied { ioctl } for pid=4668 comm="syz.1.371" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.824415][ T29] audit: type=1400 audit(1738075948.618:1690): avc: denied { read open } for pid=4672 comm="syz.3.372" path="/72/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.851618][ T29] audit: type=1400 audit(1738075948.618:1691): avc: denied { write } for pid=4672 comm="syz.3.372" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.873877][ T29] audit: type=1400 audit(1738075948.729:1692): avc: denied { ioctl } for pid=4672 comm="syz.3.372" path="/72/bus/bus" dev="loop3" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.915058][ T4681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 62.955298][ T4685] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.988375][ T29] audit: type=1326 audit(1738075949.062:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 63.013345][ T29] audit: type=1326 audit(1738075949.062:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 63.053331][ T29] audit: type=1326 audit(1738075949.072:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 63.080688][ T29] audit: type=1326 audit(1738075949.072:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3825cda9 code=0x7ffc0000 [ 63.138294][ T4693] loop1: detected capacity change from 0 to 512 [ 63.165454][ T4693] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.196252][ T4693] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.379: bad orphan inode 131083 [ 63.335265][ T4700] sd 0:0:1:0: device reset [ 63.376107][ T4705] loop2: detected capacity change from 0 to 512 [ 63.402634][ T4700] loop4: detected capacity change from 0 to 164 [ 63.416978][ T4700] ISOFS: unable to read i-node block [ 63.422825][ T4700] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 63.441296][ T4705] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.469994][ T4705] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.483121][ T4705] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.575358][ T4705] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 63.608860][ T4705] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.383: bg 0: block 40: padding at end of block bitmap is not set [ 63.609067][ T4705] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.626293][ T4705] EXT4-fs (loop2): 1 truncate cleaned up [ 63.779333][ T4716] loop3: detected capacity change from 0 to 2048 [ 63.843462][ T4716] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.886416][ T4726] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 63.911429][ T4730] loop4: detected capacity change from 0 to 1024 [ 63.912768][ T4728] dvmrp0: entered allmulticast mode [ 63.918378][ T4730] EXT4-fs: Ignoring removed orlov option [ 63.957398][ T4716] EXT4-fs (loop3): stripe (157) is not aligned with cluster size (16), stripe is disabled [ 63.977773][ T4716] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 63.989199][ T4716] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 64.026946][ T4735] loop2: detected capacity change from 0 to 512 [ 64.047738][ T4735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.062949][ T4735] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.394: bad orphan inode 131083 [ 64.155223][ T4746] sd 0:0:1:0: device reset [ 64.195893][ T4743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.397'. [ 64.204095][ T4748] loop0: detected capacity change from 0 to 512 [ 64.214387][ T4746] loop3: detected capacity change from 0 to 164 [ 64.228593][ T4748] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 64.237419][ T4748] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.244783][ T4748] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.274045][ T4748] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 64.308038][ T4748] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.395: casefold flag without casefold feature [ 64.332187][ T4746] ISOFS: unable to read i-node block [ 64.337963][ T4746] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 64.377524][ T4748] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.395: couldn't read orphan inode 16 (err -117) [ 64.599946][ T4764] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 64.789181][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 64.869979][ T4769] dummy0: entered promiscuous mode [ 64.900853][ T4752] loop1: detected capacity change from 0 to 512 [ 65.527843][ T4752] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.553471][ T4752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.576166][ T4779] loop3: detected capacity change from 0 to 1024 [ 65.591582][ T4752] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.591678][ T4779] EXT4-fs: Ignoring removed orlov option [ 65.613544][ T4752] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 65.628849][ T4752] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.398: bg 0: block 40: padding at end of block bitmap is not set [ 65.645136][ T4752] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.655885][ T4752] EXT4-fs (loop1): 1 truncate cleaned up [ 65.679608][ T4781] loop0: detected capacity change from 0 to 1024 [ 65.695472][ T4781] EXT4-fs: Ignoring removed orlov option [ 66.082447][ T4796] sd 0:0:1:0: device reset [ 66.090992][ T4799] loop1: detected capacity change from 0 to 512 [ 66.092984][ T4801] $Hÿ: renamed from bond0 (while UP) [ 66.108567][ T4799] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.205122][ T4801] $Hÿ: entered promiscuous mode [ 66.211598][ T4801] bond_slave_0: entered promiscuous mode [ 66.218612][ T4801] bond_slave_1: entered promiscuous mode [ 66.243634][ T4805] loop2: detected capacity change from 0 to 164 [ 66.329216][ T4799] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.416: bad orphan inode 131083 [ 66.340572][ T4805] ISOFS: unable to read i-node block [ 66.346779][ T4805] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 66.533470][ T4807] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 66.863149][ T4824] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 66.977939][ T4833] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 66.987493][ T4833] SELinux: failed to load policy [ 67.067510][ T4836] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 67.135897][ T4838] loop3: detected capacity change from 0 to 512 [ 67.168151][ T4838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.210302][ T4838] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.429: bad orphan inode 131083 [ 67.355060][ T4843] loop3: detected capacity change from 0 to 1024 [ 67.367904][ T4843] EXT4-fs: Ignoring removed orlov option [ 67.523922][ T4846] loop1: detected capacity change from 0 to 1024 [ 67.580030][ T4846] EXT4-fs: Ignoring removed orlov option [ 67.655566][ T4831] loop0: detected capacity change from 0 to 512 [ 67.694453][ T4846] EXT4-fs mount: 67 callbacks suppressed [ 67.694468][ T4846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.752477][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 67.752489][ T29] audit: type=1326 audit(1738075953.871:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 67.817980][ T4831] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.831931][ T4851] dvmrp0: entered allmulticast mode [ 67.849443][ T4831] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.899837][ T4831] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 67.927566][ T29] audit: type=1326 audit(1738075953.911:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 67.958149][ T29] audit: type=1326 audit(1738075953.911:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 67.985170][ T29] audit: type=1326 audit(1738075953.911:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 68.011361][ T29] audit: type=1326 audit(1738075953.911:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 68.042078][ T29] audit: type=1326 audit(1738075953.911:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 68.071479][ T29] audit: type=1326 audit(1738075953.911:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 68.099320][ T29] audit: type=1326 audit(1738075953.911:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 68.128935][ T29] audit: type=1326 audit(1738075953.911:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 68.177327][ T4831] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.215046][ T4831] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 68.225476][ T4831] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.427: bg 0: block 40: padding at end of block bitmap is not set [ 68.240987][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.265220][ T4831] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.292423][ T4831] EXT4-fs (loop0): 1 truncate cleaned up [ 68.304770][ T4831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.401565][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.442773][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.517618][ T4870] loop0: detected capacity change from 0 to 1024 [ 68.527216][ T4873] sd 0:0:1:0: device reset [ 68.528972][ T4870] EXT4-fs: Ignoring removed orlov option [ 68.553533][ T4870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.599450][ T4873] loop3: detected capacity change from 0 to 164 [ 68.600465][ T4877] loop2: detected capacity change from 0 to 512 [ 68.615836][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.618631][ T4873] ISOFS: unable to read i-node block [ 68.632744][ T4873] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 68.652604][ T4877] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.666506][ T4877] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.676861][ T4877] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.769874][ T4877] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 68.781609][ T4877] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.436: casefold flag without casefold feature [ 68.799259][ T4884] FAULT_INJECTION: forcing a failure. [ 68.799259][ T4884] name failslab, interval 1, probability 0, space 0, times 0 [ 68.804555][ T4877] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.436: couldn't read orphan inode 16 (err -117) [ 68.816810][ T4884] CPU: 1 UID: 0 PID: 4884 Comm: syz.3.442 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 68.816882][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.816929][ T4884] Call Trace: [ 68.816936][ T4884] [ 68.816944][ T4884] dump_stack_lvl+0xf2/0x150 [ 68.816970][ T4884] dump_stack+0x15/0x1a [ 68.816989][ T4884] should_fail_ex+0x24a/0x260 [ 68.817021][ T4884] should_failslab+0x8f/0xb0 [ 68.817045][ T4884] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 68.817110][ T4884] ? should_failslab+0x8f/0xb0 [ 68.817161][ T4884] ? snd_timer_instance_new+0x4a/0x160 [ 68.817188][ T4884] kstrdup+0x38/0x80 [ 68.817208][ T4884] snd_timer_instance_new+0x4a/0x160 [ 68.817246][ T4884] snd_seq_timer_open+0x128/0x350 [ 68.817264][ T4884] ? snd_timer_instance_free+0x5e/0x70 [ 68.817289][ T4884] ? kfree+0xd8/0x2f0 [ 68.817391][ T4884] snd_seq_queue_timer_open+0x85/0xe0 [ 68.817491][ T4884] snd_seq_ioctl_set_queue_timer+0x154/0x170 [ 68.817517][ T4884] snd_seq_ioctl+0x169/0x2a0 [ 68.817543][ T4884] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 68.817567][ T4884] __se_sys_ioctl+0xc9/0x140 [ 68.817641][ T4884] __x64_sys_ioctl+0x43/0x50 [ 68.817659][ T4884] x64_sys_call+0x1690/0x2dc0 [ 68.817718][ T4884] do_syscall_64+0xc9/0x1c0 [ 68.817744][ T4884] ? clear_bhb_loop+0x55/0xb0 [ 68.817771][ T4884] ? clear_bhb_loop+0x55/0xb0 [ 68.817859][ T4884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.817890][ T4884] RIP: 0033:0x7f01b3f8cda9 [ 68.817905][ T4884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.817985][ T4884] RSP: 002b:00007f01b25f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.818003][ T4884] RAX: ffffffffffffffda RBX: 00007f01b41a5fa0 RCX: 00007f01b3f8cda9 [ 68.818091][ T4884] RDX: 0000000020000100 RSI: 0000000040605346 RDI: 0000000000000004 [ 68.818177][ T4884] RBP: 00007f01b25f7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.818260][ T4884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.818271][ T4884] R13: 0000000000000000 R14: 00007f01b41a5fa0 R15: 00007ffd967080d8 [ 68.818287][ T4884] [ 69.095195][ T4877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.175219][ T4894] sd 0:0:1:0: device reset [ 69.281317][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.293261][ T4894] loop3: detected capacity change from 0 to 164 [ 69.309953][ T4892] vhci_hcd: invalid port number 128 [ 69.315814][ T4892] vhci_hcd: default hub control req: 800e vfffb i0080 l0 [ 69.324111][ T4894] ISOFS: unable to read i-node block [ 69.330656][ T4894] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 69.498176][ T4902] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 70.033259][ T4907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 70.247298][ T4907] geneve0: entered allmulticast mode [ 70.269125][ T4915] loop0: detected capacity change from 0 to 128 [ 70.296261][ T4913] loop2: detected capacity change from 0 to 2048 [ 70.303386][ T4915] msdos: Unknown parameter '€' [ 70.334920][ T4913] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.402385][ T4913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.452102][ T4923] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.487067][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.614146][ T4927] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.624821][ T4927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 70.635917][ T4927] geneve0: entered allmulticast mode [ 70.677312][ T4929] loop0: detected capacity change from 0 to 2048 [ 70.685769][ T4929] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.712586][ T4929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.740453][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.014978][ T4936] loop4: detected capacity change from 0 to 512 [ 71.132161][ T4936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.171277][ T4946] loop1: detected capacity change from 0 to 1024 [ 71.188594][ T4936] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.212848][ T4946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.394057][ T4951] loop2: detected capacity change from 0 to 512 [ 71.429389][ T4946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.449367][ T4946] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 71.457570][ T4951] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.475305][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.479852][ T4944] loop3: detected capacity change from 0 to 512 [ 71.488047][ T4951] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.504675][ T4946] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 71.510983][ T4951] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.533880][ T4951] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 71.541555][ T4944] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.553646][ T4951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.462: bg 0: block 40: padding at end of block bitmap is not set [ 71.574376][ T4944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.583427][ T4944] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.604659][ T4944] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 71.608364][ T4951] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.624761][ T4944] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.463: bg 0: block 40: padding at end of block bitmap is not set [ 71.645499][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.657187][ T4944] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.658040][ T4951] EXT4-fs (loop2): 1 truncate cleaned up [ 71.677828][ T4944] EXT4-fs (loop3): 1 truncate cleaned up [ 71.678486][ T4951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.688395][ T4944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.797327][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.893084][ T4970] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.926758][ T4971] loop4: detected capacity change from 0 to 512 [ 71.935611][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.951521][ T4963] loop1: detected capacity change from 0 to 512 [ 71.959068][ T4971] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.969458][ T4971] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.013025][ T4971] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.031851][ T4971] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 72.042974][ T4971] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.467: casefold flag without casefold feature [ 72.058789][ T4971] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.467: couldn't read orphan inode 16 (err -117) [ 72.078644][ T4978] loop3: detected capacity change from 0 to 2048 [ 72.079364][ T4971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.087142][ T4978] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.109676][ T4963] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.122135][ T4963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.162588][ T4982] loop0: detected capacity change from 0 to 512 [ 72.184558][ T4983] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 72.374586][ T4982] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.386755][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.400525][ T4963] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.416552][ T4982] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.425152][ T4982] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.491133][ T4963] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 72.535619][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.547778][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.559361][ T4963] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.466: bg 0: block 40: padding at end of block bitmap is not set [ 72.578880][ T4982] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 72.588683][ T4982] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.469: casefold flag without casefold feature [ 72.607181][ T4963] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.621218][ T4982] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.469: couldn't read orphan inode 16 (err -117) [ 72.637546][ T4963] EXT4-fs (loop1): 1 truncate cleaned up [ 72.644384][ T4963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.662653][ T4982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.837147][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.885206][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.158457][ T4995] loop0: detected capacity change from 0 to 512 [ 73.210924][ T4995] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.245204][ T5001] loop1: detected capacity change from 0 to 512 [ 73.270048][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 73.270063][ T29] audit: type=1400 audit(1738075959.423:2187): avc: denied { create } for pid=5002 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.302751][ T5001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.330055][ T4995] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.475: bad orphan inode 131083 [ 73.367605][ T5001] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.476: bad orphan inode 131083 [ 73.394586][ T4995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.420186][ T29] audit: type=1400 audit(1738075959.453:2188): avc: denied { create } for pid=5002 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.443328][ T29] audit: type=1400 audit(1738075959.473:2189): avc: denied { setopt } for pid=5002 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.464739][ T29] audit: type=1400 audit(1738075959.473:2190): avc: denied { create } for pid=5002 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.485122][ T29] audit: type=1400 audit(1738075959.483:2191): avc: denied { name_bind } for pid=5002 comm="syz.4.477" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.517716][ T5008] loop4: detected capacity change from 0 to 512 [ 73.525807][ T5001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.661990][ T5008] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 73.670474][ T5008] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.680529][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.680560][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.690557][ T5008] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 73.754103][ T5008] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.837575][ T5008] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 73.845653][ T5008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.478: bg 0: block 40: padding at end of block bitmap is not set [ 73.880584][ T5008] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 73.903348][ T5008] EXT4-fs (loop4): 1 truncate cleaned up [ 73.920229][ T5008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.959612][ T29] audit: type=1326 audit(1738075960.116:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 73.989041][ T29] audit: type=1326 audit(1738075960.116:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 74.013546][ T29] audit: type=1326 audit(1738075960.116:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 74.020320][ T5018] 9pnet_fd: Insufficient options for proto=fd [ 74.103342][ T5022] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 74.110375][ T29] audit: type=1400 audit(1738075960.267:2195): avc: denied { read } for pid=5023 comm="syz.1.483" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.144177][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.195428][ T5029] loop0: detected capacity change from 0 to 2048 [ 74.211460][ T5029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.231114][ T5029] EXT4-fs (loop0): shut down requested (2) [ 74.256241][ T5030] loop1: detected capacity change from 0 to 512 [ 74.302277][ T5030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.315289][ T5030] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.335070][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.344957][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.354382][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.364073][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.373732][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.384729][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.394185][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.403355][ T3298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 74.573489][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.645495][ T5046] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 74.706430][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.764061][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.824959][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.885772][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.035561][ T28] bridge_slave_1: left allmulticast mode [ 75.041500][ T28] bridge_slave_1: left promiscuous mode [ 75.047291][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.134412][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.155690][ T5050] sd 0:0:1:0: device reset [ 75.233581][ T28] bridge_slave_0: left allmulticast mode [ 75.239403][ T28] bridge_slave_0: left promiscuous mode [ 75.246164][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.258951][ T5050] loop4: detected capacity change from 0 to 164 [ 75.270541][ T5050] ISOFS: unable to read i-node block [ 75.276064][ T5050] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 75.492634][ T28] dvmrp0 (unregistering): left allmulticast mode [ 75.566190][ T28] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.576272][ T5073] loop1: detected capacity change from 0 to 512 [ 75.606995][ T5073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.636134][ T28] bond_slave_0: left promiscuous mode [ 75.647673][ T28] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.673287][ T5073] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.491: bad orphan inode 131083 [ 75.689701][ T5073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.702365][ T28] bond_slave_1: left promiscuous mode [ 75.717411][ T28] $Hÿ (unregistering): Released all slaves [ 75.738263][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.750081][ T28] bond1 (unregistering): Released all slaves [ 75.758692][ T28] bond2 (unregistering): Released all slaves [ 75.767443][ T28] bond3 (unregistering): Released all slaves [ 75.775771][ T28] bond4 (unregistering): Released all slaves [ 75.784555][ T28] bond0 (unregistering): Released all slaves [ 76.098126][ T28] hsr_slave_0: left promiscuous mode [ 76.130213][ T28] hsr_slave_1: left promiscuous mode [ 76.147386][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.155753][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.236539][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.244160][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.296210][ T28] veth1_macvtap: left promiscuous mode [ 76.302353][ T28] veth0_macvtap: left promiscuous mode [ 76.309252][ T28] veth1_vlan: left promiscuous mode [ 76.315948][ T28] veth0_vlan: left promiscuous mode [ 76.341993][ T5110] loop2: detected capacity change from 0 to 512 [ 76.354041][ T5110] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.363280][ T5110] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.373285][ T5110] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.490429][ T5110] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 76.527758][ T5104] loop1: detected capacity change from 0 to 512 [ 76.547011][ T5104] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 76.581831][ T5104] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.610936][ T5110] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.497: casefold flag without casefold feature [ 76.628388][ T5104] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.678574][ T5104] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 76.687726][ T5110] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.497: couldn't read orphan inode 16 (err -117) [ 76.699907][ T5104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.496: bg 0: block 40: padding at end of block bitmap is not set [ 76.707063][ T5110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.717321][ T5104] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 76.738373][ T5104] EXT4-fs (loop1): 1 truncate cleaned up [ 76.746309][ T28] team0 (unregistering): Port device team_slave_1 removed [ 76.766332][ T5104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.779974][ T28] team0 (unregistering): Port device team_slave_0 removed [ 76.865490][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.033613][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 77.083245][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.127473][ T5139] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.169526][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.176882][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.188879][ T5078] bridge_slave_0: entered allmulticast mode [ 77.207851][ T5078] bridge_slave_0: entered promiscuous mode [ 77.234129][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.241325][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.260758][ T5078] bridge_slave_1: entered allmulticast mode [ 77.273169][ T5078] bridge_slave_1: entered promiscuous mode [ 77.303890][ T28] IPVS: stop unused estimator thread 0... [ 77.327928][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.343878][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.406399][ T5158] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 77.524297][ T5078] team0: Port device team_slave_0 added [ 77.555348][ T5078] team0: Port device team_slave_1 added [ 77.695787][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.703392][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.733885][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.797184][ T5159] loop3: detected capacity change from 0 to 2048 [ 77.870743][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.960907][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.968168][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.996183][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.742357][ T5190] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 78.879999][ T5078] hsr_slave_0: entered promiscuous mode [ 78.895647][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 78.895659][ T29] audit: type=1400 audit(1738075965.076:2379): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.959722][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.988789][ T5078] hsr_slave_1: entered promiscuous mode [ 79.017445][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.051129][ T29] audit: type=1400 audit(1738075965.126:2380): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.075604][ T29] audit: type=1400 audit(1738075965.126:2381): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.097045][ T29] audit: type=1400 audit(1738075965.126:2382): avc: denied { unlink } for pid=3303 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.131695][ T5078] Cannot create hsr debugfs directory [ 79.186617][ T5206] loop1: detected capacity change from 0 to 512 [ 79.209527][ T5209] loop2: detected capacity change from 0 to 512 [ 79.238920][ T5211] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 79.277783][ T5206] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.287114][ T5209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.315589][ T5206] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.338143][ T5206] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 79.362246][ T5209] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.517: bad orphan inode 131083 [ 79.372823][ T5206] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.389944][ T29] audit: type=1400 audit(1738075965.477:2383): avc: denied { sys_chroot } for pid=5212 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 79.414731][ T29] audit: type=1400 audit(1738075965.477:2384): avc: denied { setgid } for pid=5212 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 79.437247][ T29] audit: type=1400 audit(1738075965.477:2385): avc: denied { setuid } for pid=5212 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 79.459794][ T29] audit: type=1400 audit(1738075965.477:2386): avc: denied { setrlimit } for pid=5212 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 79.491299][ T5206] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 79.501421][ T5209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.518440][ T5206] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.515: casefold flag without casefold feature [ 79.569163][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.589889][ T5206] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.515: couldn't read orphan inode 16 (err -117) [ 79.629170][ T5078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.669758][ T5206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.687229][ T5078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.716565][ T5078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.757768][ T5078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.783202][ T5229] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 79.870712][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.882227][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.893834][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.901088][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.937188][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.937434][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.944313][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.954888][ T5078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.972645][ T5078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.003437][ T5241] loop3: detected capacity change from 0 to 1024 [ 80.066748][ T5241] EXT4-fs: Ignoring removed orlov option [ 80.075093][ T29] audit: type=1326 audit(1738075966.260:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45490cda9 code=0x7ffc0000 [ 80.135518][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.168315][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.225735][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.399564][ T5078] veth0_vlan: entered promiscuous mode [ 80.409346][ T5078] veth1_vlan: entered promiscuous mode [ 80.442311][ T5078] veth0_macvtap: entered promiscuous mode [ 80.453849][ T5078] veth1_macvtap: entered promiscuous mode [ 80.478222][ T5302] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 80.546746][ T5302] SELinux: failed to load policy [ 80.559482][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.571651][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.582028][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.593349][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.603719][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.615138][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.625548][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.640781][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.655755][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.698239][ T5301] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 80.731450][ T5301] SELinux: failed to load policy [ 80.737574][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.749965][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.761231][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.774727][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.786256][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.799268][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.812232][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.826232][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.840762][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.854750][ T5078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.865532][ T5078] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.877160][ T5078] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887741][ T5078] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.926536][ T5315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 80.955843][ T5326] loop5: detected capacity change from 0 to 2048 [ 80.963821][ T5326] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.981843][ T5326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.030210][ T5078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.077830][ T5344] loop2: detected capacity change from 0 to 256 [ 81.126563][ T5344] FAT-fs (loop2): bogus number of FAT sectors [ 81.133377][ T5344] FAT-fs (loop2): Can't find a valid FAT filesystem [ 81.159296][ T5349] loop5: detected capacity change from 0 to 1024 [ 81.238283][ T5349] EXT4-fs: Ignoring removed orlov option [ 81.248631][ T5349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.339374][ T5362] loop4: detected capacity change from 0 to 512 [ 81.358888][ T5363] loop3: detected capacity change from 0 to 1024 [ 81.372246][ T5365] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 81.393470][ T5362] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.410839][ T5362] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.527363][ T5363] EXT4-fs: Ignoring removed orlov option [ 81.544091][ T5362] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.613177][ T5363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.682471][ T5362] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 81.830403][ T5362] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.538: casefold flag without casefold feature [ 81.932333][ T5362] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.538: couldn't read orphan inode 16 (err -117) [ 82.001576][ T5362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.073146][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.217640][ T5378] loop2: detected capacity change from 0 to 512 [ 82.235739][ T5378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.251978][ T5378] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.544: bad orphan inode 131083 [ 82.263934][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.296020][ T5078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.329180][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.409972][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.508819][ T5396] loop3: detected capacity change from 0 to 512 [ 82.569575][ T5396] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.587568][ T5396] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.603369][ T5396] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.621610][ T5396] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 82.629809][ T5396] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.541: casefold flag without casefold feature [ 82.651911][ T5405] loop1: detected capacity change from 0 to 1024 [ 82.659497][ T5405] EXT4-fs: Ignoring removed orlov option [ 82.669358][ T5396] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.541: couldn't read orphan inode 16 (err -117) [ 82.679497][ T5406] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 82.684680][ T5405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.693275][ T5406] SELinux: failed to load policy [ 82.747391][ T5412] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 82.759416][ T5412] SELinux: failed to load policy [ 82.835794][ T5422] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.918345][ T5424] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.012559][ T5429] loop1: detected capacity change from 0 to 512 [ 83.020260][ T5429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.031085][ T5429] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.558: bad orphan inode 131083 [ 83.141030][ T5434] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.203676][ T5438] loop1: detected capacity change from 0 to 1024 [ 83.212833][ T5438] EXT4-fs: Ignoring removed orlov option [ 83.293556][ T5449] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.348181][ T5455] loop4: detected capacity change from 0 to 512 [ 83.360048][ T5455] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.375853][ T5455] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.569: bad orphan inode 131083 [ 83.413687][ T5457] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.509330][ T5471] loop2: detected capacity change from 0 to 1024 [ 83.516602][ T5471] EXT4-fs: Ignoring removed orlov option [ 83.594918][ T5479] loop1: detected capacity change from 0 to 512 [ 83.609722][ T5479] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.618623][ T5479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.626658][ T5479] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.658042][ T5479] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 83.688194][ T5479] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.573: casefold flag without casefold feature [ 83.710596][ T5479] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.573: couldn't read orphan inode 16 (err -117) [ 83.805104][ T5493] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 83.814048][ T5493] SELinux: failed to load policy [ 83.817015][ T5498] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.845411][ T5499] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 83.854479][ T5499] SELinux: failed to load policy [ 83.874435][ T5503] loop4: detected capacity change from 0 to 512 [ 83.882013][ T5503] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.895365][ T5503] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.585: bad orphan inode 131083 [ 83.997172][ T5513] loop4: detected capacity change from 0 to 1024 [ 84.004210][ T5513] EXT4-fs: Ignoring removed orlov option [ 84.212925][ T5518] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 84.249703][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 84.249721][ T29] audit: type=1400 audit(1738075970.421:2598): avc: denied { write } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.279087][ T29] audit: type=1400 audit(1738075970.421:2599): avc: denied { remove_name } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.304152][ T29] audit: type=1400 audit(1738075970.421:2600): avc: denied { rename } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.326694][ T29] audit: type=1400 audit(1738075970.421:2601): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.350469][ T29] audit: type=1400 audit(1738075970.421:2602): avc: denied { unlink } for pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.375807][ T29] audit: type=1400 audit(1738075970.421:2603): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.122238][ T29] audit: type=1326 audit(1738075971.303:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.3.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 85.146638][ T29] audit: type=1326 audit(1738075971.303:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.3.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 85.171138][ T29] audit: type=1326 audit(1738075971.303:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.3.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 85.196831][ T29] audit: type=1326 audit(1738075971.303:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.3.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 85.255972][ T5526] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 85.311489][ T5534] loop5: detected capacity change from 0 to 512 [ 85.332095][ T5534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.376738][ T5537] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.426353][ T5534] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.596: bad orphan inode 131083 [ 85.528680][ T5546] loop4: detected capacity change from 0 to 1024 [ 85.575432][ T5546] EXT4-fs: Ignoring removed orlov option [ 85.694770][ T5560] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 85.705061][ T5560] SELinux: failed to load policy [ 85.713042][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 85.756432][ T5569] loop5: detected capacity change from 0 to 512 [ 85.764803][ T5569] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.767566][ T5572] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 85.776331][ T5569] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.790679][ T5572] SELinux: failed to load policy [ 85.793337][ T5569] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.812499][ T5569] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 85.819802][ T5569] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.602: casefold flag without casefold feature [ 85.834116][ T5569] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.602: couldn't read orphan inode 16 (err -117) [ 85.920987][ T5576] loop4: detected capacity change from 0 to 512 [ 85.931524][ T5576] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.940886][ T5576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.948514][ T5576] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.967378][ T5576] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 85.974831][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.606: casefold flag without casefold feature [ 85.988434][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.606: couldn't read orphan inode 16 (err -117) [ 86.103297][ T5580] sd 0:0:1:0: device reset [ 86.162834][ T5580] loop1: detected capacity change from 0 to 164 [ 86.174354][ T5580] ISOFS: unable to read i-node block [ 86.180836][ T5580] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 86.248473][ T5584] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 86.441896][ T5591] loop2: detected capacity change from 0 to 2048 [ 86.457051][ T5591] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.484020][ T5593] loop3: detected capacity change from 0 to 512 [ 86.512015][ T5594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 86.529853][ T5593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.659215][ T5593] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.612: bad orphan inode 131083 [ 87.506402][ T5604] loop2: detected capacity change from 0 to 1024 [ 87.522439][ T5609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 87.546400][ T5604] EXT4-fs: Ignoring removed orlov option [ 87.630950][ T5615] sd 0:0:1:0: device reset [ 87.690129][ T8] IPVS: starting estimator thread 0... [ 87.699786][ T5615] loop4: detected capacity change from 0 to 164 [ 87.713743][ T5619] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 87.792185][ T5625] IPVS: using max 2640 ests per chain, 132000 per kthread [ 87.833615][ T5615] ISOFS: unable to read i-node block [ 87.840469][ T5615] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 87.971349][ T5636] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 87.987763][ T5644] loop4: detected capacity change from 0 to 2048 [ 87.995595][ T5636] SELinux: failed to load policy [ 88.003366][ T5644] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.057323][ T5650] loop5: detected capacity change from 0 to 512 [ 88.071297][ T5651] loop1: detected capacity change from 0 to 512 [ 88.091694][ T5651] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.105294][ T5651] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.119360][ T5650] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 88.134362][ T5651] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.134861][ T5650] EXT4-fs (loop5): orphan cleanup on readonly fs [ 88.180729][ T5650] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.201448][ T5651] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 88.216213][ T5651] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.623: casefold flag without casefold feature [ 88.216640][ T5650] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 88.242874][ T5650] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.625: casefold flag without casefold feature [ 88.261620][ T5650] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.625: couldn't read orphan inode 16 (err -117) [ 88.276762][ T5651] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.623: couldn't read orphan inode 16 (err -117) [ 88.487680][ T5665] loop4: detected capacity change from 0 to 1024 [ 88.495132][ T5665] EXT4-fs: Ignoring removed orlov option [ 88.641632][ T5668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 88.812190][ T5683] sd 0:0:1:0: device reset [ 88.898738][ T5692] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 88.973673][ T5694] loop2: detected capacity change from 0 to 164 [ 89.072119][ T5701] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 89.091241][ T5694] ISOFS: unable to read i-node block [ 89.099993][ T5694] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 89.112668][ T5699] loop1: detected capacity change from 0 to 1024 [ 89.152337][ T5699] EXT4-fs: Ignoring removed orlov option [ 89.315736][ T5704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.642'. [ 89.774224][ T5730] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 89.816402][ T5730] SELinux: failed to load policy [ 89.921329][ T5736] loop5: detected capacity change from 0 to 512 [ 89.929728][ T5735] loop1: detected capacity change from 0 to 512 [ 89.959945][ T5736] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 89.989091][ T5735] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 90.024661][ T5736] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.037768][ T5735] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.063045][ T5735] __quota_error: 193 callbacks suppressed [ 90.063061][ T5735] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 90.086549][ T5736] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 90.129852][ T5736] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.160589][ T5735] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.206025][ T5736] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 90.216208][ T5735] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 90.234626][ T5736] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.648: casefold flag without casefold feature [ 90.250652][ T5735] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.649: casefold flag without casefold feature [ 90.266661][ T5735] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.649: couldn't read orphan inode 16 (err -117) [ 90.295769][ T5736] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.648: couldn't read orphan inode 16 (err -117) [ 90.596808][ T29] audit: type=1326 audit(1738075976.793:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.606530][ T5759] loop5: detected capacity change from 0 to 1024 [ 90.624898][ T29] audit: type=1326 audit(1738075976.793:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.636127][ T5759] EXT4-fs: Ignoring removed orlov option [ 90.675672][ T29] audit: type=1326 audit(1738075976.873:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.703210][ T29] audit: type=1326 audit(1738075976.873:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.729094][ T29] audit: type=1326 audit(1738075976.873:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.753094][ T29] audit: type=1326 audit(1738075976.873:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.780811][ T29] audit: type=1326 audit(1738075976.873:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.806369][ T29] audit: type=1326 audit(1738075976.873:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d91fccda9 code=0x7ffc0000 [ 90.833458][ T5757] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.888283][ T5769] loop4: detected capacity change from 0 to 512 [ 90.897364][ T5769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.916936][ T5762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 90.928128][ T5769] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.660: bad orphan inode 131083 [ 91.005633][ T5776] sd 0:0:1:0: device reset [ 91.106090][ T5776] loop4: detected capacity change from 0 to 164 [ 91.127859][ T5776] ISOFS: unable to read i-node block [ 91.133860][ T5776] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.259115][ T5790] loop2: detected capacity change from 0 to 512 [ 91.270549][ T5790] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 91.296253][ T5797] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.315966][ T5790] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.324838][ T5790] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.357260][ T5790] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 91.369073][ T5790] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.664: casefold flag without casefold feature [ 91.424798][ T5802] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.457211][ T5790] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.664: couldn't read orphan inode 16 (err -117) [ 91.543777][ T5806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'. [ 91.568622][ T5810] loop5: detected capacity change from 0 to 512 [ 91.603203][ T5810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.649674][ T5810] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.675: bad orphan inode 131083 [ 91.718673][ T5819] sd 0:0:1:0: device reset [ 91.778251][ T5819] loop3: detected capacity change from 0 to 164 [ 91.800529][ T5819] ISOFS: unable to read i-node block [ 91.806473][ T5819] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.911748][ T5829] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.974707][ T5834] loop2: detected capacity change from 0 to 1024 [ 91.988407][ T5834] EXT4-fs: Ignoring removed orlov option [ 92.120318][ T5840] loop4: detected capacity change from 0 to 1024 [ 92.164676][ T5840] EXT4-fs: Ignoring removed orlov option [ 92.530167][ T5864] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 92.919936][ T5875] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 92.992769][ T5856] loop1: detected capacity change from 0 to 512 [ 93.323745][ T5899] loop5: detected capacity change from 0 to 512 [ 93.385111][ T5899] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 93.396358][ T5856] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.413575][ T5899] EXT4-fs (loop5): orphan cleanup on readonly fs [ 93.420249][ T5856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.457669][ T5899] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.493643][ T5856] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.536843][ T5899] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 93.550744][ T5856] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 93.564547][ T5899] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.698: bg 0: block 40: padding at end of block bitmap is not set [ 93.596738][ T5856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.693: bg 0: block 40: padding at end of block bitmap is not set [ 93.663912][ T5856] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 93.700366][ T5899] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 93.722760][ T5899] EXT4-fs (loop5): 1 truncate cleaned up [ 93.732929][ T5856] EXT4-fs (loop1): 1 truncate cleaned up [ 94.006104][ T5949] loop3: detected capacity change from 0 to 2048 [ 94.015203][ T5949] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.218018][ T5970] loop5: detected capacity change from 0 to 1024 [ 94.247279][ T5970] EXT4-fs: Ignoring removed orlov option [ 94.413291][ T5990] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 94.421872][ T5990] SELinux: failed to load policy [ 94.707261][ T6010] loop3: detected capacity change from 0 to 512 [ 94.743842][ T6010] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 94.759540][ T6010] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.774577][ T6010] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.792778][ T6010] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 94.801225][ T6010] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.715: bg 0: block 40: padding at end of block bitmap is not set [ 94.816256][ T6010] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 94.825763][ T6010] EXT4-fs (loop3): 1 truncate cleaned up [ 94.979105][ T6024] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 95.098098][ T6037] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 95.240325][ T6045] loop3: detected capacity change from 0 to 512 [ 95.252024][ T6045] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.260495][ T6045] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.268262][ T6045] __quota_error: 243 callbacks suppressed [ 95.268275][ T6045] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 95.285916][ T6045] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.302807][ T6045] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 95.364882][ T6045] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.730: bg 0: block 40: padding at end of block bitmap is not set [ 95.383532][ T6045] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 95.401500][ T6045] EXT4-fs (loop3): 1 truncate cleaned up [ 95.413091][ T29] audit: type=1326 audit(1738075981.620:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 95.438795][ T29] audit: type=1326 audit(1738075981.620:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 95.465970][ T29] audit: type=1326 audit(1738075981.620:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 95.530789][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.733'. [ 95.595704][ T6073] loop1: detected capacity change from 0 to 1024 [ 95.604386][ T6073] EXT4-fs: Ignoring removed orlov option [ 95.957199][ T29] audit: type=1326 audit(1738075981.720:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 95.986010][ T29] audit: type=1326 audit(1738075981.720:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 96.013746][ T29] audit: type=1326 audit(1738075981.720:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 96.040632][ T29] audit: type=1326 audit(1738075981.720:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 96.066769][ T29] audit: type=1326 audit(1738075981.720:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 96.092406][ T29] audit: type=1326 audit(1738075981.720:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 96.268779][ T6089] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 97.433638][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.745'. [ 98.064166][ T6125] loop5: detected capacity change from 0 to 512 [ 98.073793][ T6125] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 98.079225][ T6124] loop3: detected capacity change from 0 to 2048 [ 98.089960][ T6125] EXT4-fs (loop5): orphan cleanup on readonly fs [ 98.115958][ T6124] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.134885][ T6125] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.159402][ T6125] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 98.172839][ T6125] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.747: casefold flag without casefold feature [ 98.196506][ T6124] EXT4-fs mount: 71 callbacks suppressed [ 98.196522][ T6124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.219473][ T6125] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.747: couldn't read orphan inode 16 (err -117) [ 98.243488][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.293263][ T6130] loop1: detected capacity change from 0 to 512 [ 98.320645][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.329555][ T6130] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 98.344224][ T6130] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.352423][ T6130] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.369320][ T6130] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 98.376857][ T6130] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.750: bg 0: block 40: padding at end of block bitmap is not set [ 98.394983][ T6130] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 98.406451][ T6130] EXT4-fs (loop1): 1 truncate cleaned up [ 98.412978][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.491597][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.502013][ T6149] loop3: detected capacity change from 0 to 1024 [ 98.515281][ T6149] EXT4-fs: Ignoring removed orlov option [ 98.538342][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.769473][ T5078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.837830][ T6158] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 99.997348][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.116282][ T6163] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 100.839329][ T6166] sd 0:0:1:0: device reset [ 101.215489][ T6168] loop2: detected capacity change from 0 to 512 [ 101.234994][ T6166] loop4: detected capacity change from 0 to 164 [ 101.258355][ T6168] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 101.269309][ T6170] loop5: detected capacity change from 0 to 2048 [ 101.279210][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 101.279225][ T29] audit: type=1326 audit(1738075987.486:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.280784][ T6170] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.285764][ T29] audit: type=1326 audit(1738075987.486:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.311953][ T6168] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.317779][ T29] audit: type=1326 audit(1738075987.486:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.382270][ T29] audit: type=1326 audit(1738075987.486:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.382308][ T29] audit: type=1326 audit(1738075987.486:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.382329][ T29] audit: type=1326 audit(1738075987.486:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.408375][ T6168] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 101.430590][ T29] audit: type=1326 audit(1738075987.486:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.456850][ T6166] ISOFS: unable to read i-node block [ 101.467231][ T29] audit: type=1326 audit(1738075987.486:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.495385][ T6166] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 101.502360][ T29] audit: type=1326 audit(1738075987.486:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3f8cda9 code=0x7ffc0000 [ 101.544362][ T6168] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.592746][ T6168] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 101.601483][ T6168] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.758: bg 0: block 40: padding at end of block bitmap is not set [ 101.618849][ T6170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.619294][ T6168] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 101.642461][ T6168] EXT4-fs (loop2): 1 truncate cleaned up [ 101.655205][ T6168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.726178][ T5078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.820323][ T6196] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.866644][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.965376][ T6192] loop1: detected capacity change from 0 to 512 [ 102.042708][ T6192] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 102.063792][ T6192] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.072139][ T6199] loop5: detected capacity change from 0 to 512 [ 102.079931][ T6192] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.117183][ T6192] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 102.127783][ T6192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.769: bg 0: block 40: padding at end of block bitmap is not set [ 102.146248][ T6212] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 102.167254][ T6211] sd 0:0:1:0: device reset [ 102.174758][ T6192] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 102.188045][ T6192] EXT4-fs (loop1): 1 truncate cleaned up [ 102.195451][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.240777][ T6211] loop2: detected capacity change from 0 to 164 [ 102.307234][ T6199] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 102.322845][ T6211] ISOFS: unable to read i-node block [ 102.328586][ T6211] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.372341][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.385612][ T6199] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.393372][ T6199] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.435142][ T6199] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 102.572790][ T6199] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.771: bg 0: block 40: padding at end of block bitmap is not set [ 102.589061][ T6199] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 102.599163][ T6199] EXT4-fs (loop5): 1 truncate cleaned up [ 102.606713][ T6199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.410115][ T5078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.429701][ T6228] loop1: detected capacity change from 0 to 2048 [ 103.440823][ T6228] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.488531][ T6228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.566519][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.618143][ T6237] loop2: detected capacity change from 0 to 512 [ 103.635910][ T6237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.667700][ T6237] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.785: bad orphan inode 131083 [ 103.691074][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.759041][ T6235] loop3: detected capacity change from 0 to 512 [ 103.774283][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.805010][ T6235] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.814744][ T6235] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.821604][ T6235] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.841352][ T6235] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 103.850960][ T6235] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.783: bg 0: block 40: padding at end of block bitmap is not set [ 103.867958][ T6235] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 103.890649][ T6235] EXT4-fs (loop3): 1 truncate cleaned up [ 103.908933][ T6235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.952250][ T6249] loop2: detected capacity change from 0 to 512 [ 103.971150][ T6249] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.988178][ T6249] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.786: bad orphan inode 131083 [ 104.008076][ T6249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.018841][ T6256] loop1: detected capacity change from 0 to 1024 [ 104.030233][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.030453][ T6256] EXT4-fs: Ignoring removed orlov option [ 104.065170][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.077545][ T6256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.262847][ T6270] loop2: detected capacity change from 0 to 2048 [ 104.273181][ T6270] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.297381][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.406472][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.586204][ T6282] loop3: detected capacity change from 0 to 512 [ 104.688316][ T6282] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.709465][ T6282] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.734779][ T6282] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.757686][ T6282] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 104.768412][ T6282] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.797: casefold flag without casefold feature [ 104.788723][ T6282] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.797: couldn't read orphan inode 16 (err -117) [ 104.806712][ T6282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.924037][ T6292] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 105.609822][ T6302] loop5: detected capacity change from 0 to 512 [ 105.645975][ T6302] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.672668][ T6302] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.803: bad orphan inode 131083 [ 105.692711][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.704830][ T6302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.870513][ T5078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.955108][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.086081][ T6315] loop3: detected capacity change from 0 to 2048 [ 106.092904][ T6315] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.187605][ T6315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.573306][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 106.573319][ T29] audit: type=1326 audit(1738075992.789:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.619959][ T6334] loop2: detected capacity change from 0 to 1024 [ 106.630741][ T6334] EXT4-fs: Ignoring removed orlov option [ 106.638999][ T29] audit: type=1326 audit(1738075992.839:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.639799][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.668458][ T29] audit: type=1326 audit(1738075992.839:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.668494][ T29] audit: type=1326 audit(1738075992.839:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.688672][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.706873][ T29] audit: type=1326 audit(1738075992.839:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.782223][ T29] audit: type=1326 audit(1738075992.839:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.809475][ T29] audit: type=1326 audit(1738075992.839:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.837226][ T29] audit: type=1326 audit(1738075992.839:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.861870][ T29] audit: type=1326 audit(1738075992.839:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.886598][ T29] audit: type=1326 audit(1738075992.839:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.5.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e952cda9 code=0x7ffc0000 [ 106.984564][ T6341] loop4: detected capacity change from 0 to 512 [ 107.009514][ T6341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.025690][ T6341] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.816: bad orphan inode 131083 [ 107.041613][ T6341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.088816][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.136649][ T6337] ================================================================== [ 107.146626][ T6337] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 107.155362][ T6337] [ 107.158142][ T6337] write to 0xffff88811fc56e30 of 8 bytes by task 6334 on cpu 0: [ 107.169501][ T6337] filemap_splice_read+0x6c4/0x910 [ 107.175623][ T6337] ext4_file_splice_read+0x8f/0xb0 [ 107.181807][ T6337] splice_direct_to_actor+0x269/0x670 [ 107.188073][ T6337] do_splice_direct+0xd7/0x150 [ 107.193040][ T6337] do_sendfile+0x398/0x660 [ 107.197739][ T6337] __x64_sys_sendfile64+0x110/0x150 [ 107.203478][ T6337] x64_sys_call+0xfbd/0x2dc0 [ 107.208260][ T6337] do_syscall_64+0xc9/0x1c0 [ 107.214408][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.222381][ T6337] [ 107.226953][ T6337] write to 0xffff88811fc56e30 of 8 bytes by task 6337 on cpu 1: [ 107.237635][ T6337] filemap_splice_read+0x6c4/0x910 [ 107.243202][ T6337] ext4_file_splice_read+0x8f/0xb0 [ 107.248979][ T6337] splice_direct_to_actor+0x269/0x670 [ 107.254810][ T6337] do_splice_direct+0xd7/0x150 [ 107.260505][ T6337] do_sendfile+0x398/0x660 [ 107.266396][ T6337] __x64_sys_sendfile64+0x110/0x150 [ 107.272775][ T6337] x64_sys_call+0xfbd/0x2dc0 [ 107.278364][ T6337] do_syscall_64+0xc9/0x1c0 [ 107.283940][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.290907][ T6337] [ 107.293327][ T6337] value changed: 0x00000000000005e2 -> 0x00000000000005e3 [ 107.301077][ T6337] [ 107.303576][ T6337] Reported by Kernel Concurrency Sanitizer on: [ 107.310729][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.2.814 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 107.322289][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.333010][ T6337] ================================================================== [ 107.350123][ T6357] loop3: detected capacity change from 0 to 512 [ 107.350188][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.819'. [ 107.372917][ T6357] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 107.385299][ T6357] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.395114][ T6357] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.419583][ T6357] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 107.428704][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.430889][ T6360] loop1: detected capacity change from 0 to 512 [ 107.438582][ T6357] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.815: casefold flag without casefold feature [ 107.462756][ T6357] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.815: couldn't read orphan inode 16 (err -117) [ 107.466206][ T6360] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.488690][ T6360] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.494099][ T6357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.495696][ T6360] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.529768][ T6360] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 107.538091][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.818: casefold flag without casefold feature [ 107.555307][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.818: couldn't read orphan inode 16 (err -117) [ 107.569019][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.826478][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.863602][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.