last executing test programs: 29.338846329s ago: executing program 1 (id=3549): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 29.060132722s ago: executing program 1 (id=3552): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xde, 0xf, 0xf, 0x3, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x39, &(0x7f0000000180)=""/57, 0x41000, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x2, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x2, 0x0, 0x6}, {0x4, 0x5, 0x9, 0x8}], 0x10, 0x4, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000840)='kfree\x00', r5, 0x0, 0x2ab}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @remote}, &(0x7f0000000400)=0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x3400c800) 28.936187413s ago: executing program 1 (id=3555): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x3, 0x8, 0x543}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYRESOCT], 0xec}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) fremovexattr(r2, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 28.868315534s ago: executing program 1 (id=3558): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x3, 0x2, 0x40, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xadb1c268}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 28.656383756s ago: executing program 1 (id=3561): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000fe, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000003800000000000000ffff7b8af8ff00000000bfa200000000020007020000f8ffffffb703000008000000b704000000000000850000000300000095e075edc50ba85c97ced1797ef6f113a53d6b0f095a3a6a430d1c32bc9a3005f3d2485fdf00000000000077f87ab2f7196b69"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x8, 0x0, 0x3, 0x7ffc1ffb}]}) pause() sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7}, {0x8}, {}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xffffffff}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="4fe8fd627116ef6b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 28.655527816s ago: executing program 1 (id=3563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000091) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 28.655409896s ago: executing program 32 (id=3563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000091) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 3.481710384s ago: executing program 4 (id=3860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x1000}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.747556321s ago: executing program 3 (id=3873): r0 = timerfd_create(0x0, 0x800) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000000)=""/42, 0x2a}], 0x2, 0x1000, 0x7, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x1000001, {{0xa, 0x4e23, 0x804d8b, @mcast1, 0x401}}, {{0xa, 0x4e21, 0xfffffffa, @local, 0x400d7}}}, 0x108) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e20, @empty}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7, 0x0, 0x1000}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) 2.692084672s ago: executing program 3 (id=3874): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 2.585728663s ago: executing program 4 (id=3876): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 2.432177955s ago: executing program 4 (id=3880): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x300, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x3, 0xb, 0xfffb, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$eJzs3T9rJGUYAPBnNrN//AO7hZUIDmhhdVyutdlD7kBM5bGFWmjw7kCyi3AHAUUcrxI7v4CfQBD8DrY2dpaCH8DyhIORmZ3ZP8nsJpFsxMvv1+TJvO8z7zMzL8mkyLOfvDY7up/Fwydf/RGDQRKdcYzjaRKj6ETjm1gz/j4AgP+zp0URfxVzLcO/f7chL4mIwY5rAwB244zf/7V0Gf58JWUBADt074MP37t9cHDn/SwbxN3Zt8eT8i/78ut8/PbD+Cym8SBuxjCeRVQvCt2o3hbK8G5RFHmalUbx5iw/npSZs49/rc//y8t1sB/DGFXR4m2jyn/34M5+NreSn5d1vFivPy7XvxXDeGWRvJZ/qyU/Jr14642V+m/EMH77ND6Padyviljmf72fZe+UrzgfleWV+Ul+POlX85aKvWbx/AqfDwAAAAAAAAAAAAAAAAAAAAAAz6cbde+cflT9e8pDdf+dvWflN93IGqP1/jzz/KQ50Wp/oKIo8iJ+aPrr3MyyrKgnLvPTeDVdbSwIAAAAAAAAAAAAAAAAAAAA19fjL748OpxOHzy6lKDpBpBGxN/3Iv7tecYrR16P7ZP79ZqH02mnDtfnpKtHYq+Zk0RsLSPSRTODS7s/G4IXTtVcBz/+1JbVW39waazMGZy9aLd9rcsMmt11dJhE65z+oubBfJNUjSCWc3pxzrV6m4aKuMj267UODbdllXv99HleqoJ8w50vg0i2Ffb2n/M7Vx9JTl5Fr7qrrendOoi2wqq90f4sTgQxmKef/lmR6NYBAAAAAAAAAAAAAAAAAAA7tfzv35bBJ1tTO0V/Z2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJVafv7/BYK8Tj7H5F48evwfXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXwD8BAAD//2T0YAU=") mount$nfs(&(0x7f0000000100)='>X\xdd', 0x0, 0x0, 0x23025, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x23) 2.307484836s ago: executing program 4 (id=3882): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000fe, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000003800000000000000ffff7b8af8ff00000000bfa200000000020007020000f8ffffffb703000008000000b704000000000000850000000300000095e075edc50ba85c97ced1797ef6f113a53d6b0f095a3a6a430d1c32bc9a3005f3d2485fdf00000000000077f87ab2f7196b69"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x8, 0x0, 0x3, 0x7ffc1ffb}]}) pause() sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7}, {0x8}, {}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xffffffff}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="4fe8fd627116ef6b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 2.221077497s ago: executing program 0 (id=3884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0xb}}, './file0\x00'}) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x187280) 2.082120249s ago: executing program 0 (id=3888): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x10008000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.90608471s ago: executing program 2 (id=3895): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x764a0ea9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xa, 0x7, 0x6, 0xc, 0x3, 0xd, 0x9, 0x0, 0x6, 0x8, 0x6, 0xe, 0x7, 0xe, 0xb, 0x1], 0x1, [0x1, 0x8, 0x6, 0x2, 0xfff, 0xb, 0x4b43, 0x9, 0x1, 0x6, 0xc, 0xf801, 0x1, 0xf, 0x6, 0x2000], [0x6, 0x9, 0x926, 0x1, 0x3, 0x1c4a, 0x9, 0x0, 0x5fb0, 0x8, 0xff00, 0x401, 0x6, 0x7, 0x44, 0x6]}}}}]}, 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x2, 0xdb1e, 0x1, 0x8, 0xffffffffffffffd0, 0x242b, 0x8, 0x1f, 0x4, 0x821, 0x8e76, 0xbe8, 0x7, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000a00)={r6, 0x3}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee1568810006c0002fd208dd7bfb3a803000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d66", 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.842340341s ago: executing program 3 (id=3896): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000fe, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000003800000000000000ffff7b8af8ff00000000bfa200000000020007020000f8ffffffb703000008000000b704000000000000850000000300000095e075edc50ba85c97ced1797ef6f113a53d6b0f095a3a6a430d1c32bc9a3005f3d2485fdf00000000000077f87ab2f7196b69"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x8, 0x0, 0x3, 0x7ffc1ffb}]}) pause() sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7}, {0x8}, {}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xffffffff}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00"/131], 0xa8}}, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="4fe8fd627116ef6b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 1.342899086s ago: executing program 5 (id=3899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0xb}}, './file0\x00'}) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x187280) 1.342182106s ago: executing program 4 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x1000}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.286576507s ago: executing program 5 (id=3901): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$eJzs3M1u3MYdAPChLMULpXULBI0dx0AYJwf3YGV3VcsQ0oO3FCUx2V0uSCqQT0VQy6lQKS3qFmh88yVt0BY99Vzk2ifoG/Rp8gwquB+2vteKY29b/H6ANMPlf2b+QxEciFgyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhStaazVYUull/azs+W7JW5L1z9k/6+1f43r+HxUkLh36HKISo/gmNRrg2+ujaG89if1T/uhmujrauhkZdNMLj19/84YdvzM/VDReiKJyT0Cvx6IvHv/p0b2/nt7NO5DtwEF28zUbaz8o863U20jgr83h1ZaX5weZ6Ga9n3bS8X1ZpL06KtFPlRXwruRdCWF2O06X7+VZ/Y63TTeNbyY/j1urq3dvtZnMl/mhpkHaKMu9/8NFSmWxm3e4P5kKoY+rdt9vvhLv1ifhxVsVV2unF8cPdvZ3laUnWQa3nCWpPC2o32+1Wq91urdxZvXO32WyMz9anH8w3jwnHm8zP/qTllXstNP5cnyjDjck17rXv+loOF3WQ/G3WKQAAAAAvWTS8xx4N78tfG9bWs27aPBJzEJ3WsvGqUgQAAABe0PBf+6vjGwAhXAvRyf//AQAAgP9tfzr3GbsQRaEcXI4mj6oMtt+P9jt1rbN/afTRpeM9VuvXoyvjTobFyvx4K0lvRG+Ngt6aRH8zLh5OyyMqioXoyXMnMB9COJFA+Eu4Poq5/mBUPpjsGY2yuJ5106Uk737YCp3Olbkq3a5+//nuH0IoioNLX/V7V6LwcHdvZ+kXv957MMzlSd3Lk/3xNyROfFHi6MG4HA7l8runzz2OZ3zv6IwXhjdi6ll/1e8tjsZtHp7/3LD1wYk/6dl/gPBleHsU8/biqFw8Ov9GPWZr6ZTZH86iNdh+//J4sPHMFy6WxY1RzI1b79XFe7fGexYOZdGelkX78PEfHYswd4Ests7K4vCxWD4ni4Owu7ez/IJZAMzKw+Or0GjdDc/W/xPr7re4yk1Z3eslfOrq/supo3wZ3h3FvHt9/tlafOyK3py2rjSfc10P4fQs/hlu/uPvIWyFm5Pgs9bYety/HllVo/2v6wZfnxh38mXLstuO6o1Ll/d/E9589MXj27v7n36289nO5+328krzJ83mnXZYGE5jXFh7ADhFWnwTLVZ/jIoiG/y8tbra6lSbaVzkycdxka1tpHHWr9Ii2ez0N9J4UORVnuTduvJJtpaWcbk1GORFFa/nRTzIy2x7+OaXePzqlzLtdfpVlpSDbtop0zjJ+1UnqeK1rEziwdbPulm5mRbDxuUgTbL1LOlUWd6Py3yrSNKlOC7T9FBgtpb2q2w9q6v9eFBkvU5xP/4k72710ngtLZMiG1T5qMPJWFl/PS96w26XZn2wAeC/xKMwfoPd01fZXbgSGlNiThv3xN0DAOCVOb5KX551QgAAAAAAAAAAAAAAwAmHH9f76fihvBd+IvDcSiO8rJ7HlXuvn7brnZc76EUrIYT5lzrE5MVJM5/p/0elUVfmwqzTmLxn8dv2E4UQpgd/v46Z1RUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM72nwAAAP//TqmPYw==") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa9, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x1, 0x2, {{0x1c, 0x4, 0x0, 0x17, 0x70, 0x0, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x2c, 0x3, [{0x7, 0xb, "bff79c5b77771c69f0"}, {0x5, 0xe, "fed47a0df4af9a066b7e828a"}, {0x2, 0x2}, {0x6, 0x7, "27bed5eef0"}, {0x9dc7481d0aeb7e02, 0x4, '~\''}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x1b, 0x3, 0x1, [{@broadcast, 0x7}, {@multicast1, 0xfffffffa}, {@broadcast, 0x4}, {@loopback, 0x7}, {@multicast1}]}]}}}}}) stat(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newsa={0x328, 0x10, 0x100, 0x70bd27, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x20, 0x84, r5, r6}, {@in=@rand_addr=0x64010101, 0x4d2, 0xff}, @in=@local, {0x0, 0x9, 0x101, 0x0, 0x278, 0x21, 0x0, 0x1}, {0xffffffff00000000, 0x2, 0xffffffff, 0x100000000}, {0x7, 0x2, 0x8}, 0x70bd25, 0x34ff, 0x2, 0x2, 0xf1, 0xd3}, [@encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0x3d}}}, @etimer_thresh={0x8, 0xc, 0x81}, @lifetime_val={0x24, 0x9, {0x6f5, 0x0, 0x5, 0xffffffffffffffc0}}, @lifetime_val={0x24, 0x9, {0x6, 0xa8, 0x5, 0x3}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e21, @in6=@loopback}}, @proto={0x5, 0x19, 0x32}, @coaddr={0x14, 0xe, @in=@private=0xa010100}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x4, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0xe3, r7, r8}, {@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4d2, 0x32}, @in=@broadcast, {0x6, 0x8, 0x2, 0x7, 0x3, 0x3, 0x6d, 0x1}, {0x10000, 0xffffffffffffffff, 0x1000, 0x1}, {0x1ff, 0x29d, 0xa}, 0x70bd2a, 0x3507, 0x2, 0x0, 0xc0}}, @address_filter={0x28, 0x1a, {@in=@remote, @in=@rand_addr=0x64010100, 0x2, 0x0, 0x2}}, @algo_comp={0x85, 0x3, {{'lzs\x00'}, 0x1e8, "5c5be8eb9d9e4d460907ebc349a2e13efb3afdae9979b548d0f401c99933f9b179d82832e9d27fe87af18599fceaa6cf007981f29e6ecfaa7efe344688"}}]}, 0x328}}, 0x20040810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) fremovexattr(r2, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 1.00213675s ago: executing program 5 (id=3904): socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000fe, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) pause() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 982.37846ms ago: executing program 3 (id=3905): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x300, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x3, 0xb, 0xfffb, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mount$nfs(&(0x7f0000000100)='>X\xdd', 0x0, 0x0, 0x23025, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x23) 964.10118ms ago: executing program 0 (id=3906): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 867.198681ms ago: executing program 3 (id=3907): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000140)=0xe1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 763.920632ms ago: executing program 3 (id=3908): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x10008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) 457.519545ms ago: executing program 4 (id=3909): syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x321141) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x3, 0x8, 0x543, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r5], 0xec}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/125, 0x7d}], &(0x7f0000000200)=[0x1, 0x10000, 0x9]}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r8, 0x25, 0x0, @void}, 0x10) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 401.936846ms ago: executing program 2 (id=3910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 340.532217ms ago: executing program 2 (id=3911): r0 = timerfd_create(0x0, 0x800) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000000)=""/42, 0x2a}], 0x2, 0x1000, 0x7, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x1000001, {{0xa, 0x4e23, 0x804d8b, @mcast1, 0x401}}, {{0xa, 0x4e21, 0xfffffffa, @local, 0x400d7}}}, 0x108) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e20, @empty}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7, 0x0, 0x1000}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000040)=""/97, 0x61, 0x0, &(0x7f0000000100)=""/203, 0xcb}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r8, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) 292.048398ms ago: executing program 2 (id=3912): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa9, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x1, 0x2, {{0x1c, 0x4, 0x0, 0x17, 0x70, 0x0, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x2c, 0x3, [{0x7, 0xb, "bff79c5b77771c69f0"}, {0x5, 0xe, "fed47a0df4af9a066b7e828a"}, {0x2, 0x2}, {0x6, 0x7, "27bed5eef0"}, {0x9dc7481d0aeb7e02, 0x4, '~\''}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x1b, 0x3, 0x1, [{@broadcast, 0x7}, {@multicast1, 0xfffffffa}, {@broadcast, 0x4}, {@loopback, 0x7}, {@multicast1}]}]}}}}}) stat(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newsa={0x328, 0x10, 0x100, 0x70bd27, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x20, 0x84, r5, r6}, {@in=@rand_addr=0x64010101, 0x4d2, 0xff}, @in=@local, {0x0, 0x9, 0x101, 0x0, 0x278, 0x21, 0x0, 0x1}, {0xffffffff00000000, 0x2, 0xffffffff, 0x100000000}, {0x7, 0x2, 0x8}, 0x70bd25, 0x34ff, 0x2, 0x2, 0xf1, 0xd3}, [@encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e21, @in=@dev={0xac, 0x14, 0x14, 0x3d}}}, @etimer_thresh={0x8, 0xc, 0x81}, @lifetime_val={0x24, 0x9, {0x6f5, 0x0, 0x5, 0xffffffffffffffc0}}, @lifetime_val={0x24, 0x9, {0x6, 0xa8, 0x5, 0x3}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e21, @in6=@loopback}}, @proto={0x5, 0x19, 0x32}, @coaddr={0x14, 0xe, @in=@private=0xa010100}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x4, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0xe3, r7, r8}, {@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4d2, 0x32}, @in=@broadcast, {0x6, 0x8, 0x2, 0x7, 0x3, 0x3, 0x6d, 0x1}, {0x10000, 0xffffffffffffffff, 0x1000, 0x1}, {0x1ff, 0x29d, 0xa}, 0x70bd2a, 0x3507, 0x2, 0x0, 0xc0}}, @address_filter={0x28, 0x1a, {@in=@remote, @in=@rand_addr=0x64010100, 0x2, 0x0, 0x2}}, @algo_comp={0x85, 0x3, {{'lzs\x00'}, 0x1e8, "5c5be8eb9d9e4d460907ebc349a2e13efb3afdae9979b548d0f401c99933f9b179d82832e9d27fe87af18599fceaa6cf007981f29e6ecfaa7efe344688"}}]}, 0x328}}, 0x20040810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 40.37343ms ago: executing program 5 (id=3916): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x3, 0x8, 0x543}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) fremovexattr(r2, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 8.688631ms ago: executing program 0 (id=3917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x300, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x3, 0xb, 0xfffb, 0x0, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mount$nfs(&(0x7f0000000100)='>X\xdd', 0x0, 0x0, 0x23025, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x23) 0s ago: executing program 2 (id=3918): r0 = open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007be93a000000000000a200000000000007020000f8ffffffb703a0000000000000b70400000000000085000000c300000095", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="060000000497cb60c80dc6450ac90cb66e02a70011bcbc7f3bf9eed54b7778bf63b0bad3d33ea3bedbf53c3772668ce0a9082588611593b3471fea9aea1c1bb277c29b492874e9545adbdae80537c8b47c6a6893dcc521cedb6e20a0f8a34bc8b03cb4cddf5d3e6dfea347c08f497eb183e9a4e9128e8b2a39e3db91080c317164226bd6a1c8cf37550df7226820ff96a3b907ddb772b45ab84dd20c580d07ffd471133956305a0b89f2609c96eff5086f8dd712ff1d30038318535b56a8240732ad29dac03ef1a5bf157ef8399b567e9a6940feb6b09cd3d8257971522453e6f01d4cc574c7f0a2186f1118e6d3ccdaa53373e6672f494cc43f9bacbbc1ea11741aea7ca6a08b45e9d62b8714609cff51190387aeafbc2072b316b0efb64941f6ade67f7fb409f281c40cd2f01397e2a7eda673f925f08e9d8b1d5a4ebd0a8413ebabd5492acff20da1a9a5b6ec47651920c5768f65f95e73262e6f4224dacb6037fba1f9203fa0988c88b2fb273bd617468cfb718605a2e33f59de1275", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x366b, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x1, 0x455b843fbdb64c65) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x0, 0x10f8, 0x11d8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xffffffff, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00', {}, {}, 0x5c}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() socket$inet6(0x10, 0x80000, 0x80004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) lseek(r7, 0x9, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 30706432 [ 315.458937][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 315.463820][T19346] max_ino=32 [ 315.463832][T19346] i_nlink=1 [ 315.465042][T19346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.473951][T19352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.499942][T19346] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 315.500359][ T23] vhci_hcd: vhci_device speed not set [ 315.514854][T19340] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 315.521493][T19340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.529275][T19340] vhci_hcd vhci_hcd.0: Device attached [ 315.535316][T19346] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 315.535679][T19356] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3428'. [ 315.553931][T19340] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 315.560554][T19340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.568230][T19340] vhci_hcd vhci_hcd.0: Device attached [ 315.575055][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.576248][T19340] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(23) [ 315.584202][ T23] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 315.590620][T19340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.590765][T19340] vhci_hcd vhci_hcd.0: Device attached [ 315.613396][T19356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.636896][T19340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(25) [ 315.637399][T19356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.643598][T19340] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.643737][T19340] vhci_hcd vhci_hcd.0: Device attached [ 315.698637][T19340] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.708147][T19356] bond0 (unregistering): Released all slaves [ 315.784931][T19352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.819507][T19365] vhci_hcd: connection closed [ 315.819610][T19359] vhci_hcd: connection closed [ 315.824408][ T31] vhci_hcd: stop threads [ 315.833801][ T31] vhci_hcd: release socket [ 315.838327][ T31] vhci_hcd: disconnect device [ 315.844113][T19348] vhci_hcd: connection closed [ 315.844178][T19357] vhci_hcd: connection closed [ 315.847352][T19353] vhci_hcd: connection closed [ 315.848984][T19341] vhci_hcd: connection reset by peer [ 315.870410][ T31] vhci_hcd: stop threads [ 315.874737][ T31] vhci_hcd: release socket [ 315.879194][ T31] vhci_hcd: disconnect device [ 315.889105][ T31] vhci_hcd: stop threads [ 315.893433][ T31] vhci_hcd: release socket [ 315.897984][ T31] vhci_hcd: disconnect device [ 315.903084][ T31] vhci_hcd: stop threads [ 315.907474][ T31] vhci_hcd: release socket [ 315.912060][ T31] vhci_hcd: disconnect device [ 315.919987][ T31] vhci_hcd: stop threads [ 315.924424][ T31] vhci_hcd: release socket [ 315.928984][ T31] vhci_hcd: disconnect device [ 315.934995][ T31] vhci_hcd: stop threads [ 315.939344][ T31] vhci_hcd: release socket [ 315.944126][ T31] vhci_hcd: disconnect device [ 316.048433][T19377] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 316.446414][T19395] loop2: detected capacity change from 0 to 512 [ 316.498533][T19395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 316.526769][T19395] EXT4-fs (loop2): 1 truncate cleaned up [ 316.537526][T19403] loop4: detected capacity change from 0 to 512 [ 316.585702][T19403] EXT4-fs (loop4): orphan cleanup on readonly fs [ 316.593234][T19395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.641048][T19403] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3439: bad orphan inode 13 [ 316.665805][T19403] ext4_test_bit(bit=12, block=18) = 1 [ 316.671370][T19403] is_bad_inode(inode)=0 [ 316.675547][T19403] NEXT_ORPHAN(inode)=2130706432 [ 316.680452][T19403] max_ino=32 [ 316.683713][T19403] i_nlink=1 [ 316.734561][T19403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.771750][T19403] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 316.801137][T19403] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 316.819605][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.866546][T19415] loop0: detected capacity change from 0 to 512 [ 316.897762][T19417] loop2: detected capacity change from 0 to 736 [ 316.906782][T19415] EXT4-fs (loop0): orphan cleanup on readonly fs [ 316.906796][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.933790][T19415] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3440: bad orphan inode 13 [ 316.947977][T19415] ext4_test_bit(bit=12, block=18) = 1 [ 316.953441][T19415] is_bad_inode(inode)=0 [ 316.957842][T19415] NEXT_ORPHAN(inode)=2130706432 [ 316.962731][T19415] max_ino=32 [ 316.966065][T19415] i_nlink=1 [ 316.969635][T19415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.986552][T19415] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 317.012886][T19423] loop4: detected capacity change from 0 to 512 [ 317.026878][T19415] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3440: bg 0: block 248: padding at end of block bitmap is not set [ 317.042780][T19429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19429 comm=syz.3.3446 [ 317.050374][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 317.050395][ T29] audit: type=1400 audit(1745621661.674:3794): avc: denied { write } for pid=19428 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 317.082231][T19423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 317.082464][T19423] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3444: bad orphan inode 13 [ 317.110326][T19415] Quota error (device loop0): write_blk: dquota write failed [ 317.114962][ T29] audit: type=1400 audit(1745621661.684:3795): avc: denied { read } for pid=19428 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 317.117796][T19415] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 317.138316][ T29] audit: type=1400 audit(1745621661.684:3796): avc: denied { nlmsg_read } for pid=19428 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 317.141260][T19423] ext4_test_bit(bit=12, block=18) = 1 [ 317.148673][T19415] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3440: Failed to acquire dquot type 1 [ 317.169562][T19423] is_bad_inode(inode)=0 [ 317.190550][T19423] NEXT_ORPHAN(inode)=2130706432 [ 317.195611][T19423] max_ino=32 [ 317.198902][T19423] i_nlink=1 [ 317.205605][T19415] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 317.206044][T19423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.253442][T19434] FAULT_INJECTION: forcing a failure. [ 317.253442][T19434] name failslab, interval 1, probability 0, space 0, times 0 [ 317.266430][T19434] CPU: 0 UID: 0 PID: 19434 Comm: syz.1.3448 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 317.266463][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.266478][T19434] Call Trace: [ 317.266487][T19434] [ 317.266496][T19434] __dump_stack+0x1d/0x30 [ 317.266521][T19434] dump_stack_lvl+0xe8/0x140 [ 317.266544][T19434] dump_stack+0x15/0x1b [ 317.266588][T19434] should_fail_ex+0x265/0x280 [ 317.266696][T19434] should_failslab+0x8c/0xb0 [ 317.266730][T19434] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 317.266822][T19434] ? __d_alloc+0x3d/0x350 [ 317.266860][T19434] __d_alloc+0x3d/0x350 [ 317.266895][T19434] ? __rcu_read_unlock+0x34/0x70 [ 317.266986][T19434] d_alloc_parallel+0x53/0xc40 [ 317.267009][T19434] ? selinux_inode_permission+0x32a/0x400 [ 317.267042][T19434] ? lockref_get_not_dead+0x120/0x1c0 [ 317.267100][T19434] ? __rcu_read_unlock+0x4f/0x70 [ 317.267156][T19434] __lookup_slow+0x8c/0x250 [ 317.267179][T19434] lookup_slow+0x3c/0x60 [ 317.267212][T19434] walk_component+0x1ec/0x220 [ 317.267248][T19434] path_lookupat+0xfe/0x2a0 [ 317.267296][T19434] filename_lookup+0x147/0x340 [ 317.267345][T19434] vfs_statx+0x9d/0x380 [ 317.267382][T19434] __se_sys_newstat+0x69/0x270 [ 317.267468][T19434] ? fput+0x8f/0xc0 [ 317.267487][T19434] ? ksys_write+0x16e/0x1a0 [ 317.267589][T19434] __x64_sys_newstat+0x31/0x40 [ 317.267625][T19434] x64_sys_call+0x781/0x2fb0 [ 317.267651][T19434] do_syscall_64+0xd0/0x1a0 [ 317.267701][T19434] ? clear_bhb_loop+0x25/0x80 [ 317.267726][T19434] ? clear_bhb_loop+0x25/0x80 [ 317.267751][T19434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.267776][T19434] RIP: 0033:0x7f69c2cce969 [ 317.267794][T19434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.267816][T19434] RSP: 002b:00007f69c1337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 317.267904][T19434] RAX: ffffffffffffffda RBX: 00007f69c2ef5fa0 RCX: 00007f69c2cce969 [ 317.267919][T19434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0 [ 317.267934][T19434] RBP: 00007f69c1337090 R08: 0000000000000000 R09: 0000000000000000 [ 317.267949][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.267963][T19434] R13: 0000000000000000 R14: 00007f69c2ef5fa0 R15: 00007ffd7e440968 [ 317.268065][T19434] [ 317.522712][T19438] loop2: detected capacity change from 0 to 512 [ 317.543455][T19423] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 317.555160][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.574816][T19438] EXT4-fs (loop2): orphan cleanup on readonly fs [ 317.584025][T19423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3444: bg 0: block 248: padding at end of block bitmap is not set [ 317.598860][T19438] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3450: bad orphan inode 13 [ 317.617601][T19438] ext4_test_bit(bit=12, block=18) = 1 [ 317.623093][T19438] is_bad_inode(inode)=0 [ 317.623824][T19423] Quota error (device loop4): write_blk: dquota write failed [ 317.627384][T19438] NEXT_ORPHAN(inode)=2130706432 [ 317.634843][T19423] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 317.639661][T19438] max_ino=32 [ 317.639672][T19438] i_nlink=1 [ 317.649702][T19423] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3444: Failed to acquire dquot type 1 [ 317.671078][T19423] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 317.688663][T19438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.717468][T19438] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 317.744192][T19438] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3450: bg 0: block 248: padding at end of block bitmap is not set [ 317.765739][T19438] Quota error (device loop2): write_blk: dquota write failed [ 317.773211][T19438] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 317.783235][T19438] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3450: Failed to acquire dquot type 1 [ 317.805503][T19438] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 317.805804][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.892445][T19452] loop0: detected capacity change from 0 to 512 [ 317.907061][T19452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.932120][T19452] EXT4-fs (loop0): 1 truncate cleaned up [ 317.965421][T19452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.122109][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.286211][ T29] audit: type=1326 audit(1745621662.914:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19466 comm="syz.2.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 318.571797][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.730187][T19509] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3471'. [ 318.751565][T19509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.784507][T19509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.811957][T19509] bond0 (unregistering): Released all slaves [ 318.874058][T19522] FAULT_INJECTION: forcing a failure. [ 318.874058][T19522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.887265][T19522] CPU: 1 UID: 0 PID: 19522 Comm: syz.4.3476 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 318.887372][T19522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.887430][T19522] Call Trace: [ 318.887437][T19522] [ 318.887445][T19522] __dump_stack+0x1d/0x30 [ 318.887465][T19522] dump_stack_lvl+0xe8/0x140 [ 318.887486][T19522] dump_stack+0x15/0x1b [ 318.887506][T19522] should_fail_ex+0x265/0x280 [ 318.887612][T19522] should_fail+0xb/0x20 [ 318.887639][T19522] should_fail_usercopy+0x1a/0x20 [ 318.887693][T19522] _copy_to_user+0x20/0xa0 [ 318.887716][T19522] simple_read_from_buffer+0xb5/0x130 [ 318.887743][T19522] proc_fail_nth_read+0x100/0x140 [ 318.887772][T19522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.887860][T19522] vfs_read+0x19d/0x6f0 [ 318.887884][T19522] ? __rcu_read_unlock+0x4f/0x70 [ 318.887934][T19522] ? __fget_files+0x184/0x1c0 [ 318.887963][T19522] ksys_read+0xda/0x1a0 [ 318.887994][T19522] __x64_sys_read+0x40/0x50 [ 318.888023][T19522] x64_sys_call+0x2d77/0x2fb0 [ 318.888075][T19522] do_syscall_64+0xd0/0x1a0 [ 318.888101][T19522] ? clear_bhb_loop+0x25/0x80 [ 318.888126][T19522] ? clear_bhb_loop+0x25/0x80 [ 318.888152][T19522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.888217][T19522] RIP: 0033:0x7ff2e436d37c [ 318.888235][T19522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.888327][T19522] RSP: 002b:00007ff2e29d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.888349][T19522] RAX: ffffffffffffffda RBX: 00007ff2e4595fa0 RCX: 00007ff2e436d37c [ 318.888364][T19522] RDX: 000000000000000f RSI: 00007ff2e29d70a0 RDI: 0000000000000003 [ 318.888379][T19522] RBP: 00007ff2e29d7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.888393][T19522] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 318.888408][T19522] R13: 0000000000000000 R14: 00007ff2e4595fa0 R15: 00007fff75b59408 [ 318.888449][T19522] [ 319.203098][T19524] loop2: detected capacity change from 0 to 512 [ 319.252124][T19524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.283893][T19524] EXT4-fs (loop2): 1 truncate cleaned up [ 319.298987][T19524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.423984][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.548634][T19563] FAULT_INJECTION: forcing a failure. [ 319.548634][T19563] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 319.561999][T19563] CPU: 0 UID: 0 PID: 19563 Comm: syz.0.3490 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 319.562060][T19563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.562076][T19563] Call Trace: [ 319.562083][T19563] [ 319.562092][T19563] __dump_stack+0x1d/0x30 [ 319.562116][T19563] dump_stack_lvl+0xe8/0x140 [ 319.562134][T19563] dump_stack+0x15/0x1b [ 319.562149][T19563] should_fail_ex+0x265/0x280 [ 319.562276][T19563] should_fail_alloc_page+0xf2/0x100 [ 319.562316][T19563] __alloc_frozen_pages_noprof+0xff/0x360 [ 319.562342][T19563] alloc_pages_bulk_noprof+0x4b7/0x540 [ 319.562362][T19563] ? __kmalloc_noprof+0x1dd/0x3e0 [ 319.562437][T19563] ? copy_splice_read+0xc2/0x5f0 [ 319.562456][T19563] copy_splice_read+0xf3/0x5f0 [ 319.562517][T19563] ? __pfx_copy_splice_read+0x10/0x10 [ 319.562536][T19563] splice_direct_to_actor+0x26c/0x680 [ 319.562556][T19563] ? __pfx_direct_splice_actor+0x10/0x10 [ 319.562580][T19563] do_splice_direct+0xda/0x150 [ 319.562638][T19563] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 319.562663][T19563] do_sendfile+0x380/0x640 [ 319.562696][T19563] __x64_sys_sendfile64+0x105/0x150 [ 319.562770][T19563] x64_sys_call+0xb39/0x2fb0 [ 319.562857][T19563] do_syscall_64+0xd0/0x1a0 [ 319.562876][T19563] ? clear_bhb_loop+0x25/0x80 [ 319.562920][T19563] ? clear_bhb_loop+0x25/0x80 [ 319.562939][T19563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.562958][T19563] RIP: 0033:0x7fe7cb48e969 [ 319.562971][T19563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.562987][T19563] RSP: 002b:00007fe7c9af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.563050][T19563] RAX: ffffffffffffffda RBX: 00007fe7cb6b5fa0 RCX: 00007fe7cb48e969 [ 319.563061][T19563] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 319.563071][T19563] RBP: 00007fe7c9af7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.563081][T19563] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 319.563092][T19563] R13: 0000000000000000 R14: 00007fe7cb6b5fa0 R15: 00007ffc2d55c888 [ 319.563130][T19563] [ 319.878342][T19569] loop0: detected capacity change from 0 to 512 [ 319.886301][T19569] EXT4-fs (loop0): orphan cleanup on readonly fs [ 319.893931][T19569] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3492: bad orphan inode 13 [ 319.904454][T19569] ext4_test_bit(bit=12, block=18) = 1 [ 319.910054][T19569] is_bad_inode(inode)=0 [ 319.914677][T19569] NEXT_ORPHAN(inode)=2130706432 [ 319.919747][T19569] max_ino=32 [ 319.923045][T19569] i_nlink=1 [ 319.926807][T19569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.940418][T19569] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 319.960584][T19569] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 320.108316][T19586] loop3: detected capacity change from 0 to 2048 [ 320.122478][T19586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.134968][T19586] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.144465][T19593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 320.154710][T19593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.162343][T19593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.171315][T19593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.178842][T19593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.208680][T19596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3495'. [ 320.402974][T19600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=19600 comm=syz.1.3499 [ 320.423188][T19602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=19602 comm=syz.4.3501 [ 320.509493][T19615] FAULT_INJECTION: forcing a failure. [ 320.509493][T19615] name failslab, interval 1, probability 0, space 0, times 0 [ 320.522569][T19615] CPU: 0 UID: 0 PID: 19615 Comm: syz.2.3506 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 320.522598][T19615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.522610][T19615] Call Trace: [ 320.522616][T19615] [ 320.522625][T19615] __dump_stack+0x1d/0x30 [ 320.522650][T19615] dump_stack_lvl+0xe8/0x140 [ 320.522678][T19615] dump_stack+0x15/0x1b [ 320.522696][T19615] should_fail_ex+0x265/0x280 [ 320.522735][T19615] should_failslab+0x8c/0xb0 [ 320.522778][T19615] kmem_cache_alloc_noprof+0x50/0x310 [ 320.522811][T19615] ? security_file_alloc+0x32/0x100 [ 320.522841][T19615] security_file_alloc+0x32/0x100 [ 320.522871][T19615] init_file+0x5c/0x1d0 [ 320.522929][T19615] alloc_empty_file+0x8b/0x200 [ 320.522960][T19615] path_openat+0x68/0x2170 [ 320.523063][T19615] ? _parse_integer_limit+0x170/0x190 [ 320.523099][T19615] ? kstrtoull+0x111/0x140 [ 320.523183][T19615] ? kstrtouint+0x76/0xc0 [ 320.523218][T19615] do_filp_open+0x109/0x230 [ 320.523258][T19615] do_sys_openat2+0xa6/0x110 [ 320.523354][T19615] __x64_sys_openat+0xf2/0x120 [ 320.523402][T19615] x64_sys_call+0x1af/0x2fb0 [ 320.523429][T19615] do_syscall_64+0xd0/0x1a0 [ 320.523525][T19615] ? clear_bhb_loop+0x25/0x80 [ 320.523583][T19615] ? clear_bhb_loop+0x25/0x80 [ 320.523611][T19615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.523682][T19615] RIP: 0033:0x7fc2c0b1d2d0 [ 320.523747][T19615] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 320.523777][T19615] RSP: 002b:00007fc2bf186f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 320.523796][T19615] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2c0b1d2d0 [ 320.523808][T19615] RDX: 0000000000000000 RSI: 00007fc2c0ba0bc9 RDI: 00000000ffffff9c [ 320.523820][T19615] RBP: 00007fc2c0ba0bc9 R08: 0000000000000000 R09: 0000000000000000 [ 320.523833][T19615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 320.523849][T19615] R13: 0000000000000000 R14: 00007fc2c0d45fa0 R15: 00007fff303be828 [ 320.523874][T19615] [ 320.738803][ T23] usb 3-1: enqueue for inactive port 0 [ 320.744433][ T23] usb 3-1: enqueue for inactive port 0 [ 320.759654][T19620] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3507'. [ 320.783841][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.820318][ T23] vhci_hcd: vhci_device speed not set [ 320.902371][T19634] loop0: detected capacity change from 0 to 512 [ 320.944333][T19634] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 320.963616][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.974269][T19634] EXT4-fs (loop0): mount failed [ 321.018932][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3514'. [ 321.028017][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3514'. [ 321.037557][T19643] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3514'. [ 321.065865][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 321.075706][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 321.085617][T19648] loop3: detected capacity change from 0 to 512 [ 321.099265][T19648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 321.102547][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 321.118342][T19648] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3513: bad orphan inode 13 [ 321.129359][T19648] ext4_test_bit(bit=12, block=18) = 1 [ 321.134866][T19648] is_bad_inode(inode)=0 [ 321.139101][T19648] NEXT_ORPHAN(inode)=2130706432 [ 321.144046][T19648] max_ino=32 [ 321.147301][T19648] i_nlink=1 [ 321.157352][T19648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.178169][T19648] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 321.188522][T19658] loop0: detected capacity change from 0 to 512 [ 321.202523][T19658] EXT4-fs (loop0): orphan cleanup on readonly fs [ 321.209668][T19658] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3518: bad orphan inode 13 [ 321.220483][T19658] ext4_test_bit(bit=12, block=18) = 1 [ 321.225975][T19658] is_bad_inode(inode)=0 [ 321.230202][T19658] NEXT_ORPHAN(inode)=2130706432 [ 321.235135][T19658] max_ino=32 [ 321.238450][T19658] i_nlink=1 [ 321.241952][T19648] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3513: bg 0: block 248: padding at end of block bitmap is not set [ 321.242911][T19658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.271073][T19648] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3513: Failed to acquire dquot type 1 [ 321.282737][T19658] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 321.282915][T19648] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 321.296743][T19656] loop2: detected capacity change from 0 to 512 [ 321.321988][T19658] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.335892][T19656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.357083][T19656] EXT4-fs (loop2): 1 truncate cleaned up [ 321.365014][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.388044][T19666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.398520][T19666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.402948][T19656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.421977][T19666] bond0 (unregistering): Released all slaves [ 321.438829][T19667] loop1: detected capacity change from 0 to 512 [ 321.457806][T19667] EXT4-fs (loop1): orphan cleanup on readonly fs [ 321.464908][T19667] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.3519: bad orphan inode 13 [ 321.475781][T19667] ext4_test_bit(bit=12, block=18) = 1 [ 321.481238][T19667] is_bad_inode(inode)=0 [ 321.485432][T19667] NEXT_ORPHAN(inode)=2130706432 [ 321.490393][T19667] max_ino=32 [ 321.493755][T19667] i_nlink=1 [ 321.499074][T19667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.521809][T19667] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 321.550788][T19667] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.618585][T19683] loop0: detected capacity change from 0 to 512 [ 321.643157][T19683] EXT4-fs (loop0): orphan cleanup on readonly fs [ 321.649958][T19683] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3522: bad orphan inode 13 [ 321.660808][T19683] ext4_test_bit(bit=12, block=18) = 1 [ 321.662341][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.666284][T19683] is_bad_inode(inode)=0 [ 321.679660][T19683] NEXT_ORPHAN(inode)=2130706432 [ 321.684618][T19683] max_ino=32 [ 321.687811][T19683] i_nlink=1 [ 321.691756][T19683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.708998][T19683] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 321.721459][T19683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3522: bg 0: block 248: padding at end of block bitmap is not set [ 321.745867][T19683] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3522: Failed to acquire dquot type 1 [ 321.757853][T19683] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 321.805201][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.836772][T19692] loop4: detected capacity change from 0 to 512 [ 321.850952][T19692] EXT4-fs (loop4): orphan cleanup on readonly fs [ 321.857997][T19692] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3524: bad orphan inode 13 [ 321.876138][T19692] ext4_test_bit(bit=12, block=18) = 1 [ 321.881661][T19692] is_bad_inode(inode)=0 [ 321.885890][T19692] NEXT_ORPHAN(inode)=2130706432 [ 321.890836][T19692] max_ino=32 [ 321.894051][T19692] i_nlink=1 [ 321.910879][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.943172][T19692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.001468][T19692] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 322.061055][T19692] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 322.105745][T19709] loop0: detected capacity change from 0 to 512 [ 322.141441][T19709] EXT4-fs (loop0): orphan cleanup on readonly fs [ 322.152070][T19709] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3530: bad orphan inode 13 [ 322.162520][T19709] ext4_test_bit(bit=12, block=18) = 1 [ 322.167931][T19709] is_bad_inode(inode)=0 [ 322.172214][T19709] NEXT_ORPHAN(inode)=2130706432 [ 322.177103][T19709] max_ino=32 [ 322.180351][T19709] i_nlink=1 [ 322.204755][T17427] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.217424][T19709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.232235][T19709] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 322.251229][T19713] loop3: detected capacity change from 0 to 512 [ 322.258952][T19709] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 322.274977][T19713] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 322.294848][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.308782][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 322.308802][ T29] audit: type=1400 audit(1745621666.934:3859): avc: denied { setopt } for pid=19715 comm="syz.1.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.330710][T19713] EXT4-fs (loop3): 1 truncate cleaned up [ 322.369434][T19713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.416665][T19723] loop1: detected capacity change from 0 to 512 [ 322.444929][T19723] EXT4-fs (loop1): orphan cleanup on readonly fs [ 322.463424][T19723] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.3535: bad orphan inode 13 [ 322.480840][T19723] ext4_test_bit(bit=12, block=18) = 1 [ 322.486285][T19723] is_bad_inode(inode)=0 [ 322.490487][T19723] NEXT_ORPHAN(inode)=2130706432 [ 322.495377][T19723] max_ino=32 [ 322.498582][T19723] i_nlink=1 [ 322.502926][T19723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.527177][T19723] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 322.552573][T19723] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3535: bg 0: block 248: padding at end of block bitmap is not set [ 322.568306][T19723] Quota error (device loop1): write_blk: dquota write failed [ 322.575835][T19723] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 322.585893][T19723] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3535: Failed to acquire dquot type 1 [ 322.597640][T19723] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 322.613442][T19739] loop0: detected capacity change from 0 to 512 [ 322.624830][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.631882][T19739] EXT4-fs (loop0): orphan cleanup on readonly fs [ 322.650922][T19739] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3536: bad orphan inode 13 [ 322.661610][ T29] audit: type=1400 audit(1745621667.284:3860): avc: denied { mount } for pid=19741 comm="syz.4.3537" name="/" dev="hugetlbfs" ino=45916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 322.679556][T19739] ext4_test_bit(bit=12, block=18) = 1 [ 322.685104][ T29] audit: type=1400 audit(1745621667.294:3861): avc: denied { unmount } for pid=16876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 322.690137][T19739] is_bad_inode(inode)=0 [ 322.690148][T19739] NEXT_ORPHAN(inode)=2130706432 [ 322.690157][T19739] max_ino=32 [ 322.690166][T19739] i_nlink=1 [ 322.719350][T19739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.725516][T19744] xt_hashlimit: max too large, truncated to 1048576 [ 322.726624][T17427] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.741105][ T29] audit: type=1400 audit(1745621667.374:3862): avc: denied { read } for pid=19743 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 322.773394][T19739] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 322.791259][T19739] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3536: bg 0: block 248: padding at end of block bitmap is not set [ 322.791656][ T29] audit: type=1400 audit(1745621667.424:3863): avc: denied { setopt } for pid=19743 comm="syz.4.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 322.811263][T19739] Quota error (device loop0): write_blk: dquota write failed [ 322.832557][T19739] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 322.843651][T19739] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3536: Failed to acquire dquot type 1 [ 322.855287][T19749] loop1: detected capacity change from 0 to 512 [ 322.861732][T19739] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 322.888860][T19749] EXT4-fs (loop1): orphan cleanup on readonly fs [ 322.896010][T19749] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.3539: bad orphan inode 13 [ 322.906586][T19749] ext4_test_bit(bit=12, block=18) = 1 [ 322.912106][T19749] is_bad_inode(inode)=0 [ 322.916283][T19749] NEXT_ORPHAN(inode)=2130706432 [ 322.921742][T19749] max_ino=32 [ 322.924947][T19749] i_nlink=1 [ 322.930460][T19749] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 322.940823][T19749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3539: bg 0: block 248: padding at end of block bitmap is not set [ 322.955419][T19749] Quota error (device loop1): write_blk: dquota write failed [ 322.963071][T19749] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3539: Failed to acquire dquot type 1 [ 322.975757][T19749] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.050378][T19755] loop3: detected capacity change from 0 to 736 [ 323.192709][T19758] loop3: detected capacity change from 0 to 512 [ 323.202167][T19758] EXT4-fs (loop3): orphan cleanup on readonly fs [ 323.208961][T19758] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3542: bad orphan inode 13 [ 323.219521][T19758] ext4_test_bit(bit=12, block=18) = 1 [ 323.225029][T19758] is_bad_inode(inode)=0 [ 323.229243][T19758] NEXT_ORPHAN(inode)=2130706432 [ 323.234137][T19758] max_ino=32 [ 323.237340][T19758] i_nlink=1 [ 323.241588][T19758] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 323.261234][T19758] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 323.330077][T19762] loop2: detected capacity change from 0 to 512 [ 323.340925][T19762] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.348030][T19762] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3543: bad orphan inode 13 [ 323.358731][T19762] ext4_test_bit(bit=12, block=18) = 1 [ 323.364313][T19762] is_bad_inode(inode)=0 [ 323.368489][T19762] NEXT_ORPHAN(inode)=2130706432 [ 323.373436][T19762] max_ino=32 [ 323.376648][T19762] i_nlink=1 [ 323.381751][T19762] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 323.400734][T19762] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 323.400741][ T10] usb usb4-port1: attempt power cycle [ 323.876293][T19779] loop1: detected capacity change from 0 to 512 [ 323.942783][T19779] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.958320][T19779] EXT4-fs (loop1): mount failed [ 324.307142][T19805] SELinux: policydb version 0 does not match my version range 15-34 [ 324.316542][T19805] SELinux: failed to load policy [ 324.331149][T19803] loop3: detected capacity change from 0 to 512 [ 324.343392][T19803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.366279][T19803] EXT4-fs (loop3): 1 truncate cleaned up [ 324.431760][T19810] __nla_validate_parse: 5 callbacks suppressed [ 324.431819][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3560'. [ 324.477706][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.543774][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.629638][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.696267][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.709690][T19819] chnl_net:caif_netlink_parms(): no params data found [ 324.751234][T19819] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.758694][T19819] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.766187][T19819] bridge_slave_0: entered allmulticast mode [ 324.772745][T19819] bridge_slave_0: entered promiscuous mode [ 324.779414][T19819] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.786562][T19819] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.794316][T19819] bridge_slave_1: entered allmulticast mode [ 324.801576][T19819] bridge_slave_1: entered promiscuous mode [ 324.828055][T19819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.838495][T19819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.856455][ T12] bridge_slave_1: left allmulticast mode [ 324.862227][ T12] bridge_slave_1: left promiscuous mode [ 324.867937][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.875851][ T12] bridge_slave_0: left allmulticast mode [ 324.881740][ T12] bridge_slave_0: left promiscuous mode [ 324.887765][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.992628][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.002618][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.012282][ T12] bond0 (unregistering): Released all slaves [ 325.029734][T19819] team0: Port device team_slave_0 added [ 325.036450][T19819] team0: Port device team_slave_1 added [ 325.052668][T19819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.059639][T19819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.085657][T19819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.099775][ T12] hsr_slave_0: left promiscuous mode [ 325.106087][ T12] hsr_slave_1: left promiscuous mode [ 325.118608][ T12] veth1_macvtap: left promiscuous mode [ 325.126375][ T12] veth0_macvtap: left promiscuous mode [ 325.132361][ T12] veth1_vlan: left promiscuous mode [ 325.137595][ T12] veth0_vlan: left promiscuous mode [ 325.195351][ T12] team0 (unregistering): Port device team_slave_1 removed [ 325.204916][ T12] team0 (unregistering): Port device team_slave_0 removed [ 325.235442][T19819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.242476][T19819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.268543][T19819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.284878][T19841] loop3: detected capacity change from 0 to 512 [ 325.295231][T19841] EXT4-fs (loop3): orphan cleanup on readonly fs [ 325.305451][T19841] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3568: bad orphan inode 13 [ 325.320795][T19841] ext4_test_bit(bit=12, block=18) = 1 [ 325.326256][T19841] is_bad_inode(inode)=0 [ 325.330477][T19841] NEXT_ORPHAN(inode)=2130706432 [ 325.335349][T19841] max_ino=32 [ 325.338553][T19841] i_nlink=1 [ 325.342248][ T10] usb usb4-port1: unable to enumerate USB device [ 325.352280][T19819] hsr_slave_0: entered promiscuous mode [ 325.358371][T19819] hsr_slave_1: entered promiscuous mode [ 325.364215][T19839] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 325.364669][T19819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.381654][T19819] Cannot create hsr debugfs directory [ 325.403498][T19839] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 325.478381][T19819] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.492401][T19819] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.529883][T19819] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.547220][T19819] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.627859][T19819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.650183][T19819] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.662060][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.669288][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.701754][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.708994][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.924158][T19819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.959825][T19888] loop2: detected capacity change from 0 to 512 [ 325.978402][T19888] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.996898][T19888] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3574: bad orphan inode 13 [ 326.019994][T19888] ext4_test_bit(bit=12, block=18) = 1 [ 326.025928][T19888] is_bad_inode(inode)=0 [ 326.030205][T19888] NEXT_ORPHAN(inode)=2130706432 [ 326.035194][T19888] max_ino=32 [ 326.038447][T19888] i_nlink=1 [ 326.069217][T19888] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 326.104202][T19902] loop3: detected capacity change from 0 to 512 [ 326.134034][T19902] EXT4-fs (loop3): orphan cleanup on readonly fs [ 326.140839][T19888] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.155301][T19902] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3575: bad orphan inode 13 [ 326.187320][T19902] ext4_test_bit(bit=12, block=18) = 1 [ 326.192832][T19902] is_bad_inode(inode)=0 [ 326.197067][T19902] NEXT_ORPHAN(inode)=2130706432 [ 326.201996][T19902] max_ino=32 [ 326.205213][T19902] i_nlink=1 [ 326.265305][T19819] veth0_vlan: entered promiscuous mode [ 326.293209][T19819] veth1_vlan: entered promiscuous mode [ 326.321362][T19819] veth0_macvtap: entered promiscuous mode [ 326.339326][T19819] veth1_macvtap: entered promiscuous mode [ 326.360004][T19819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.371522][T19819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.382736][T19819] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.391611][T19819] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.400468][T19819] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.409431][T19819] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.485381][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3565'. [ 326.494391][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3565'. [ 326.507539][T19932] loop0: detected capacity change from 0 to 512 [ 326.518534][T19930] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3565'. [ 326.532088][T19930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.542703][T19930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.553702][T19930] bond0 (unregistering): Released all slaves [ 326.554008][T19932] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.575002][T19932] EXT4-fs (loop0): mount failed [ 326.648437][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 326.761810][T19967] loop2: detected capacity change from 0 to 512 [ 326.785738][T19967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 326.793194][T19967] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3581: bad orphan inode 13 [ 326.805010][T19967] ext4_test_bit(bit=12, block=18) = 1 [ 326.810510][T19967] is_bad_inode(inode)=0 [ 326.814677][T19967] NEXT_ORPHAN(inode)=2130706432 [ 326.820321][T19967] max_ino=32 [ 326.823678][T19967] i_nlink=1 [ 326.836354][T19967] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 326.873783][T19967] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.995618][T19997] loop2: detected capacity change from 0 to 736 [ 327.024147][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 327.033569][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 327.058998][T20001] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3585'. [ 327.105798][T20001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.130084][T20001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.159731][T20001] bond0 (unregistering): Released all slaves [ 327.365016][T20030] loop4: detected capacity change from 0 to 512 [ 327.391708][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 327.391726][ T29] audit: type=1326 audit(1745621672.024:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.422512][T20030] EXT4-fs (loop4): orphan cleanup on readonly fs [ 327.453146][ T29] audit: type=1326 audit(1745621672.024:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.476950][ T29] audit: type=1326 audit(1745621672.064:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.484077][T20030] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3587: bad orphan inode 13 [ 327.500504][ T29] audit: type=1326 audit(1745621672.064:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.534205][ T29] audit: type=1326 audit(1745621672.064:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.557721][ T29] audit: type=1326 audit(1745621672.064:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.564305][T20030] ext4_test_bit(bit=12, block=18) = 1 [ 327.581293][ T29] audit: type=1326 audit(1745621672.064:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.586668][T20030] is_bad_inode(inode)=0 [ 327.610158][ T29] audit: type=1326 audit(1745621672.064:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.610285][ T29] audit: type=1326 audit(1745621672.064:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.614532][T20030] NEXT_ORPHAN(inode)=2130706432 [ 327.638015][ T29] audit: type=1326 audit(1745621672.064:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20033 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 327.661513][T20030] max_ino=32 [ 327.661528][T20030] i_nlink=1 [ 327.703996][T20042] loop2: detected capacity change from 0 to 512 [ 327.747219][T20042] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 327.766810][T20030] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 327.790760][T20042] EXT4-fs (loop2): mount failed [ 327.810063][T20030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3587: bg 0: block 248: padding at end of block bitmap is not set [ 327.832605][T20030] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3587: Failed to acquire dquot type 1 [ 327.844814][T20030] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 327.903835][T20053] loop2: detected capacity change from 0 to 512 [ 327.931096][T20053] EXT4-fs (loop2): orphan cleanup on readonly fs [ 327.944615][T20053] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3592: bad orphan inode 13 [ 327.956477][T20053] ext4_test_bit(bit=12, block=18) = 1 [ 327.962538][T20053] is_bad_inode(inode)=0 [ 327.966815][T20053] NEXT_ORPHAN(inode)=2130706432 [ 327.971827][T20053] max_ino=32 [ 327.975139][T20053] i_nlink=1 [ 327.981457][T20053] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 328.001034][T20053] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3592: bg 0: block 248: padding at end of block bitmap is not set [ 328.016866][T20053] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3592: Failed to acquire dquot type 1 [ 328.030220][T20053] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 328.620372][T20113] loop5: detected capacity change from 0 to 512 [ 328.762366][T20113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 328.793704][T20113] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3598: bad orphan inode 13 [ 328.827584][T20113] ext4_test_bit(bit=12, block=18) = 1 [ 328.833170][T20113] is_bad_inode(inode)=0 [ 328.837510][T20113] NEXT_ORPHAN(inode)=2130706432 [ 328.842531][T20113] max_ino=32 [ 328.845748][T20113] i_nlink=1 [ 328.863059][T20113] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 328.891314][T20113] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3598: bg 0: block 248: padding at end of block bitmap is not set [ 328.907182][T20113] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3598: Failed to acquire dquot type 1 [ 328.919619][T20113] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.022816][T20138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37748 sclass=netlink_route_socket pid=20138 comm=syz.4.3599 [ 329.139625][T20152] loop4: detected capacity change from 0 to 512 [ 329.175800][T20152] EXT4-fs (loop4): orphan cleanup on readonly fs [ 329.183283][T20152] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3600: bad orphan inode 13 [ 329.204896][T20152] ext4_test_bit(bit=12, block=18) = 1 [ 329.210373][T20152] is_bad_inode(inode)=0 [ 329.215130][T20152] NEXT_ORPHAN(inode)=2130706432 [ 329.220211][T20152] max_ino=32 [ 329.223526][T20152] i_nlink=1 [ 329.231288][T20152] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 329.254329][T20152] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.263040][T20160] loop2: detected capacity change from 0 to 512 [ 329.278632][T20160] EXT4-fs (loop2): orphan cleanup on readonly fs [ 329.288422][T20160] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3601: bg 0: block 248: padding at end of block bitmap is not set [ 329.312021][T20160] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3601: Failed to acquire dquot type 1 [ 329.377911][T20160] EXT4-fs (loop2): 1 truncate cleaned up [ 329.428527][T20178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3602'. [ 329.439922][T20173] loop5: detected capacity change from 0 to 512 [ 329.460685][T20160] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 329.481590][T20160] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.491870][T20173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 329.507662][T20181] loop4: detected capacity change from 0 to 256 [ 329.529635][T20170] infiniband syz!: set active [ 329.534451][T20170] infiniband syz!: added team_slave_0 [ 329.545355][T20173] EXT4-fs (loop5): 1 truncate cleaned up [ 329.582858][T20170] RDS/IB: syz!: added [ 329.614665][T20170] smc: adding ib device syz! with port count 1 [ 329.647751][T20170] smc: ib device syz! port 1 has pnetid [ 329.780115][T20205] loop0: detected capacity change from 0 to 2048 [ 329.825838][T20205] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.903485][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3606'. [ 330.143527][T20240] loop5: detected capacity change from 0 to 512 [ 330.165579][T20240] EXT4-fs (loop5): orphan cleanup on readonly fs [ 330.196603][T20240] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3609: bad orphan inode 13 [ 330.229388][T20240] ext4_test_bit(bit=12, block=18) = 1 [ 330.234906][T20240] is_bad_inode(inode)=0 [ 330.239199][T20240] NEXT_ORPHAN(inode)=2130706432 [ 330.244124][T20240] max_ino=32 [ 330.247338][T20240] i_nlink=1 [ 330.344898][T20236] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 330.381008][T20236] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 330.940013][T20261] team0: Device ipvlan2 failed to register rx_handler [ 330.955554][T20264] loop3: detected capacity change from 0 to 736 [ 330.988950][T20265] FAULT_INJECTION: forcing a failure. [ 330.988950][T20265] name failslab, interval 1, probability 0, space 0, times 0 [ 331.001682][T20265] CPU: 0 UID: 0 PID: 20265 Comm: syz.5.3616 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 331.001793][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.001806][T20265] Call Trace: [ 331.001813][T20265] [ 331.001824][T20265] __dump_stack+0x1d/0x30 [ 331.001851][T20265] dump_stack_lvl+0xe8/0x140 [ 331.001874][T20265] dump_stack+0x15/0x1b [ 331.001959][T20265] should_fail_ex+0x265/0x280 [ 331.001995][T20265] should_failslab+0x8c/0xb0 [ 331.002027][T20265] kmem_cache_alloc_noprof+0x50/0x310 [ 331.002065][T20265] ? prepare_creds+0x37/0x4c0 [ 331.002103][T20265] prepare_creds+0x37/0x4c0 [ 331.002126][T20265] lookup_user_key+0x1fa/0xd10 [ 331.002152][T20265] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 331.002177][T20265] __se_sys_request_key+0x174/0x290 [ 331.002289][T20265] __x64_sys_request_key+0x55/0x70 [ 331.002374][T20265] x64_sys_call+0x2f19/0x2fb0 [ 331.002458][T20265] do_syscall_64+0xd0/0x1a0 [ 331.002514][T20265] ? clear_bhb_loop+0x25/0x80 [ 331.002537][T20265] ? clear_bhb_loop+0x25/0x80 [ 331.002563][T20265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.002589][T20265] RIP: 0033:0x7ffb35b7e969 [ 331.002662][T20265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.002684][T20265] RSP: 002b:00007ffb341c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 331.002706][T20265] RAX: ffffffffffffffda RBX: 00007ffb35da6080 RCX: 00007ffb35b7e969 [ 331.002719][T20265] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 331.002731][T20265] RBP: 00007ffb341c6090 R08: 0000000000000000 R09: 0000000000000000 [ 331.002744][T20265] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 331.002820][T20265] R13: 0000000000000000 R14: 00007ffb35da6080 R15: 00007ffc47acadf8 [ 331.002842][T20265] [ 331.127014][T20271] loop4: detected capacity change from 0 to 256 [ 331.291354][T20282] xt_hashlimit: max too large, truncated to 1048576 [ 331.293211][T20279] loop2: detected capacity change from 0 to 512 [ 331.304346][T20279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 331.307564][T20283] loop3: detected capacity change from 0 to 512 [ 331.316862][T20279] EXT4-fs (loop2): 1 truncate cleaned up [ 331.321433][T20283] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.321619][T20283] EXT4-fs (loop3): mount failed [ 331.437983][T20205] syz.0.3606 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 331.438031][T20205] CPU: 0 UID: 0 PID: 20205 Comm: syz.0.3606 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 331.438157][T20205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.438174][T20205] Call Trace: [ 331.438182][T20205] [ 331.438191][T20205] __dump_stack+0x1d/0x30 [ 331.438217][T20205] dump_stack_lvl+0xe8/0x140 [ 331.438243][T20205] dump_stack+0x15/0x1b [ 331.438265][T20205] dump_header+0x81/0x220 [ 331.438313][T20205] oom_kill_process+0x334/0x3f0 [ 331.438409][T20205] out_of_memory+0x979/0xb80 [ 331.438441][T20205] ? css_next_descendant_pre+0x138/0x160 [ 331.438482][T20205] mem_cgroup_out_of_memory+0x13d/0x190 [ 331.438528][T20205] try_charge_memcg+0x5e2/0x870 [ 331.438645][T20205] obj_cgroup_charge_pages+0xb7/0x1a0 [ 331.438703][T20205] __memcg_kmem_charge_page+0x9f/0x170 [ 331.438732][T20205] __alloc_frozen_pages_noprof+0x188/0x360 [ 331.438770][T20205] alloc_pages_mpol+0xb3/0x250 [ 331.438800][T20205] alloc_pages_noprof+0x90/0x130 [ 331.438869][T20205] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 331.438995][T20205] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 331.439022][T20205] ? ip_set_alloc+0x1f/0x30 [ 331.439049][T20205] ? ip_set_alloc+0x1f/0x30 [ 331.439148][T20205] ? __kmalloc_cache_noprof+0x189/0x320 [ 331.439175][T20205] ip_set_alloc+0x1f/0x30 [ 331.439210][T20205] hash_netiface_create+0x282/0x740 [ 331.439312][T20205] ? __pfx_hash_netiface_create+0x10/0x10 [ 331.439345][T20205] ip_set_create+0x3c9/0x960 [ 331.439551][T20205] ? __nla_parse+0x40/0x60 [ 331.439576][T20205] nfnetlink_rcv_msg+0x4c3/0x590 [ 331.439628][T20205] netlink_rcv_skb+0x120/0x220 [ 331.439728][T20205] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 331.439810][T20205] nfnetlink_rcv+0x16b/0x1690 [ 331.439839][T20205] ? __kfree_skb+0x109/0x150 [ 331.439878][T20205] ? nlmon_xmit+0x4f/0x60 [ 331.439908][T20205] ? consume_skb+0x49/0x150 [ 331.439980][T20205] ? nlmon_xmit+0x4f/0x60 [ 331.440004][T20205] ? dev_hard_start_xmit+0x39e/0x3d0 [ 331.440049][T20205] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 331.440090][T20205] ? __dev_queue_xmit+0x182/0x1fb0 [ 331.440208][T20205] ? ref_tracker_free+0x37d/0x3e0 [ 331.440255][T20205] ? __netlink_deliver_tap+0x4dc/0x500 [ 331.440367][T20205] netlink_unicast+0x59e/0x670 [ 331.440406][T20205] netlink_sendmsg+0x58b/0x6b0 [ 331.440468][T20205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.440511][T20205] __sock_sendmsg+0x142/0x180 [ 331.440537][T20205] ____sys_sendmsg+0x31e/0x4e0 [ 331.440614][T20205] ___sys_sendmsg+0x17b/0x1d0 [ 331.440749][T20205] __x64_sys_sendmsg+0xd4/0x160 [ 331.440870][T20205] x64_sys_call+0x2999/0x2fb0 [ 331.440909][T20205] do_syscall_64+0xd0/0x1a0 [ 331.440938][T20205] ? clear_bhb_loop+0x25/0x80 [ 331.441024][T20205] ? clear_bhb_loop+0x25/0x80 [ 331.441059][T20205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.441087][T20205] RIP: 0033:0x7fe7cb48e969 [ 331.441124][T20205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.441147][T20205] RSP: 002b:00007fe7c9af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.441171][T20205] RAX: ffffffffffffffda RBX: 00007fe7cb6b5fa0 RCX: 00007fe7cb48e969 [ 331.441188][T20205] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 331.441204][T20205] RBP: 00007fe7cb510ab1 R08: 0000000000000000 R09: 0000000000000000 [ 331.441220][T20205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.441238][T20205] R13: 0000000000000000 R14: 00007fe7cb6b5fa0 R15: 00007ffc2d55c888 [ 331.441327][T20205] [ 331.441364][T20205] memory: usage 307200kB, limit 307200kB, failcnt 1479 [ 331.441381][T20205] memory+swap: usage 308428kB, limit 9007199254740988kB, failcnt 0 [ 331.441398][T20205] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 331.441414][T20205] Memory cgroup stats for /syz0: [ 331.462282][T20205] cache 12288 [ 331.462298][T20205] rss 0 [ 331.462307][T20205] shmem 0 [ 331.462316][T20205] mapped_file 0 [ 331.462325][T20205] dirty 0 [ 331.462333][T20205] writeback 0 [ 331.462340][T20205] workingset_refault_anon 459 [ 331.462349][T20205] workingset_refault_file 855 [ 331.462359][T20205] swap 1257472 [ 331.462368][T20205] swapcached 4096 [ 331.462378][T20205] pgpgin 227029 [ 331.462405][T20205] pgpgout 227025 [ 331.462414][T20205] pgfault 126122 [ 331.462422][T20205] pgmajfault 262 [ 331.462429][T20205] inactive_anon 4096 [ 331.462454][T20205] active_anon 0 [ 331.462464][T20205] inactive_file 8192 [ 331.462473][T20205] active_file 4096 [ 331.462482][T20205] unevictable 0 [ 331.462492][T20205] hierarchical_memory_limit 314572800 [ 331.462503][T20205] hierarchical_memsw_limit 9223372036854771712 [ 331.462513][T20205] total_cache 12288 [ 331.462537][T20205] total_rss 0 [ 331.462545][T20205] total_shmem 0 [ 331.462555][T20205] total_mapped_file 0 [ 331.462575][T20205] total_dirty 0 [ 331.462584][T20205] total_writeback 0 [ 331.462593][T20205] total_workingset_refault_anon 459 [ 331.462605][T20205] total_workingset_refault_file 855 [ 331.462615][T20205] total_swap 1257472 [ 331.462625][T20205] total_swapcached 4096 [ 331.462693][T20205] total_pgpgin 227029 [ 331.462704][T20205] total_pgpgout 227025 [ 331.462714][T20205] total_pgfault 126122 [ 331.462723][T20205] total_pgmajfault 262 [ 331.462731][T20205] total_inactive_anon 4096 [ 331.462741][T20205] total_active_anon 0 [ 331.462824][T20205] total_inactive_file 8192 [ 331.462834][T20205] total_active_file 4096 [ 331.462845][T20205] total_unevictable 0 [ 331.462854][T20205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3606,pid=20204,uid=0 [ 331.463088][T20205] Memory cgroup out of memory: Killed process 20204 (syz.0.3606) total-vm:95796kB, anon-rss:1064kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 331.487474][T20293] loop3: detected capacity change from 0 to 512 [ 331.520970][T20293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 331.544306][T20293] EXT4-fs (loop3): 1 truncate cleaned up [ 332.443424][T20046] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 332.509120][T20315] loop4: detected capacity change from 0 to 512 [ 332.509759][T20317] xt_hashlimit: max too large, truncated to 1048576 [ 332.537845][T20315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 333.104984][T20315] EXT4-fs (loop4): 1 truncate cleaned up [ 333.186256][T20324] loop0: detected capacity change from 0 to 512 [ 333.291584][T20324] EXT4-fs (loop0): orphan cleanup on readonly fs [ 333.299439][T20324] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3637: bad orphan inode 13 [ 333.321075][T20324] ext4_test_bit(bit=12, block=18) = 1 [ 333.326519][T20324] is_bad_inode(inode)=0 [ 333.330712][T20324] NEXT_ORPHAN(inode)=2130706432 [ 333.335591][T20324] max_ino=32 [ 333.338879][T20324] i_nlink=1 [ 333.500834][T20340] loop2: detected capacity change from 0 to 128 [ 333.508370][T20340] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.520968][T20324] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 333.563512][T20340] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.667467][T20341] loop3: detected capacity change from 0 to 512 [ 333.771096][T20341] EXT4-fs (loop3): orphan cleanup on readonly fs [ 333.826302][T20341] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3640: bad orphan inode 13 [ 333.849807][T20324] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3637: bg 0: block 248: padding at end of block bitmap is not set [ 333.885246][T20341] ext4_test_bit(bit=12, block=18) = 1 [ 333.891281][T20341] is_bad_inode(inode)=0 [ 333.895795][T20341] NEXT_ORPHAN(inode)=2130706432 [ 333.900824][T20341] max_ino=32 [ 333.904045][T20341] i_nlink=1 [ 333.924358][T20324] __quota_error: 109 callbacks suppressed [ 333.924380][T20324] Quota error (device loop0): write_blk: dquota write failed [ 333.937887][T20324] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 333.948054][T20324] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3637: Failed to acquire dquot type 1 [ 333.980390][T20341] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 333.995601][T20324] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 334.031365][T20341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3640: bg 0: block 248: padding at end of block bitmap is not set [ 334.070856][T20341] Quota error (device loop3): write_blk: dquota write failed [ 334.078324][T20341] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 334.088581][T20341] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3640: Failed to acquire dquot type 1 [ 334.150319][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.161906][T20341] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 334.234705][T20358] loop5: detected capacity change from 0 to 512 [ 334.243060][T20358] EXT4-fs (loop5): orphan cleanup on readonly fs [ 334.261670][T20358] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3646: bad orphan inode 13 [ 334.293779][T20362] loop0: detected capacity change from 0 to 512 [ 334.309271][T20358] ext4_test_bit(bit=12, block=18) = 1 [ 334.315228][T20358] is_bad_inode(inode)=0 [ 334.319458][T20358] NEXT_ORPHAN(inode)=2130706432 [ 334.324510][T20358] max_ino=32 [ 334.327765][T20358] i_nlink=1 [ 334.348784][T20364] loop2: detected capacity change from 0 to 512 [ 334.371402][T20367] loop3: detected capacity change from 0 to 512 [ 334.372336][T20362] EXT4-fs (loop0): orphan cleanup on readonly fs [ 334.387060][T20367] EXT4-fs (loop3): orphan cleanup on readonly fs [ 334.401142][T20364] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 334.421019][T20362] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3645: bad orphan inode 13 [ 334.431938][T20367] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3648: bad orphan inode 13 [ 334.462593][T20362] ext4_test_bit(bit=12, block=18) = 1 [ 334.468120][T20362] is_bad_inode(inode)=0 [ 334.472437][T20362] NEXT_ORPHAN(inode)=2130706432 [ 334.477492][T20362] max_ino=32 [ 334.480792][T20362] i_nlink=1 [ 334.486146][T20358] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 334.496314][T20364] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 334.530937][T20367] ext4_test_bit(bit=12, block=18) = 1 [ 334.536384][T20367] is_bad_inode(inode)=0 [ 334.540627][T20367] NEXT_ORPHAN(inode)=2130706432 [ 334.545589][T20367] max_ino=32 [ 334.548812][T20367] i_nlink=1 [ 334.570061][T20364] EXT4-fs (loop2): mount failed [ 334.575385][T20358] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 334.593875][T20362] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 334.644811][T20362] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 334.661084][T20367] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 334.691599][T20367] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 335.203390][T20398] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 335.212703][T20396] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 335.228616][T20396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3656'. [ 335.251767][T20397] loop0: detected capacity change from 0 to 512 [ 335.261891][T20396] loop2: detected capacity change from 0 to 256 [ 335.315146][T20397] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.339829][T20404] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 335.351129][T20397] EXT4-fs (loop0): 1 truncate cleaned up [ 335.358290][T20404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3658'. [ 335.386670][T20404] loop2: detected capacity change from 0 to 256 [ 335.459356][T20408] loop2: detected capacity change from 0 to 512 [ 335.502722][T20408] EXT4-fs (loop2): orphan cleanup on readonly fs [ 335.519666][T20408] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3659: bad orphan inode 13 [ 335.545658][T20408] ext4_test_bit(bit=12, block=18) = 1 [ 335.551372][T20408] is_bad_inode(inode)=0 [ 335.555549][T20408] NEXT_ORPHAN(inode)=2130706432 [ 335.560549][T20408] max_ino=32 [ 335.563767][T20408] i_nlink=1 [ 335.594985][T20408] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 335.622362][T20408] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3659: bg 0: block 248: padding at end of block bitmap is not set [ 335.640667][T20408] Quota error (device loop2): write_blk: dquota write failed [ 335.648067][T20408] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 335.658065][T20408] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3659: Failed to acquire dquot type 1 [ 335.685161][ T29] audit: type=1326 audit(1745621680.314:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20417 comm="syz.3.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fa00e969 code=0x7ffc0000 [ 335.710097][T20408] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.710700][ T29] audit: type=1326 audit(1745621680.314:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20417 comm="syz.3.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82fa00e969 code=0x7ffc0000 [ 335.749277][ T29] audit: type=1326 audit(1745621680.314:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20417 comm="syz.3.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fa00e969 code=0x7ffc0000 [ 335.772613][T20419] loop5: detected capacity change from 0 to 512 [ 335.791821][T20419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 335.798971][T20419] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3662: bad orphan inode 13 [ 335.809727][T20419] ext4_test_bit(bit=12, block=18) = 1 [ 335.815260][T20419] is_bad_inode(inode)=0 [ 335.819459][T20419] NEXT_ORPHAN(inode)=2130706432 [ 335.824502][T20419] max_ino=32 [ 335.827714][T20419] i_nlink=1 [ 335.833255][T20419] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 335.852869][T20423] loop3: detected capacity change from 0 to 2048 [ 335.862836][T20419] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 335.873086][T20423] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.970306][T20432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3663'. [ 336.291489][T20450] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 336.417589][T20453] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3672'. [ 336.432118][T20449] loop2: detected capacity change from 0 to 512 [ 336.472872][T20449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 336.726984][T20449] EXT4-fs (loop2): 1 truncate cleaned up [ 336.734634][T20460] loop4: detected capacity change from 0 to 512 [ 336.778105][T20460] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 336.816635][T20460] EXT4-fs (loop4): mount failed [ 337.187605][T20501] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 337.347920][T20517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3681'. [ 337.974565][T20555] loop4: detected capacity change from 0 to 512 [ 338.045647][T20555] EXT4-fs (loop4): orphan cleanup on readonly fs [ 338.106269][T20555] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3683: bad orphan inode 13 [ 338.117174][T20555] ext4_test_bit(bit=12, block=18) = 1 [ 338.122686][T20555] is_bad_inode(inode)=0 [ 338.126917][T20555] NEXT_ORPHAN(inode)=2130706432 [ 338.131854][T20555] max_ino=32 [ 338.135126][T20555] i_nlink=1 [ 338.192420][T20555] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 338.253156][T20555] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3683: bg 0: block 248: padding at end of block bitmap is not set [ 338.276649][T20555] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3683: Failed to acquire dquot type 1 [ 338.290744][T20555] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.535800][T20632] loop2: detected capacity change from 0 to 736 [ 338.543103][T20637] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 338.849059][T20670] loop4: detected capacity change from 0 to 512 [ 338.890762][T20670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 338.929710][T20670] EXT4-fs (loop4): 1 truncate cleaned up [ 338.967071][T20689] loop3: detected capacity change from 0 to 512 [ 339.024499][T20689] EXT4-fs (loop3): orphan cleanup on readonly fs [ 339.054368][T20689] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3700: bad orphan inode 13 [ 339.105362][T20689] ext4_test_bit(bit=12, block=18) = 1 [ 339.110861][T20689] is_bad_inode(inode)=0 [ 339.115060][T20689] NEXT_ORPHAN(inode)=2130706432 [ 339.119967][T20689] max_ino=32 [ 339.123490][T20689] i_nlink=1 [ 339.219164][T20689] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 339.245034][T20731] loop2: detected capacity change from 0 to 512 [ 339.264562][T20731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 339.312579][T20731] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3702: bad orphan inode 13 [ 339.344315][T20689] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 339.356659][T20731] ext4_test_bit(bit=12, block=18) = 1 [ 339.362250][T20731] is_bad_inode(inode)=0 [ 339.366434][T20731] NEXT_ORPHAN(inode)=2130706432 [ 339.371413][T20731] max_ino=32 [ 339.374625][T20731] i_nlink=1 [ 339.398709][T20731] EXT4-fs mount: 64 callbacks suppressed [ 339.398725][T20731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.433625][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.446880][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 339.459403][T20731] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 339.501283][T20731] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3702: bg 0: block 248: padding at end of block bitmap is not set [ 339.525851][T20731] __quota_error: 97 callbacks suppressed [ 339.525891][T20731] Quota error (device loop2): write_blk: dquota write failed [ 339.539318][T20731] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 339.541200][T20769] loop0: detected capacity change from 0 to 512 [ 339.549295][T20731] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3702: Failed to acquire dquot type 1 [ 339.552449][T20770] loop3: detected capacity change from 0 to 512 [ 339.583257][T20731] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.609800][T20770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 339.615216][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.633190][T20769] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 339.648294][T20770] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3707: bad orphan inode 13 [ 339.665803][T20770] ext4_test_bit(bit=12, block=18) = 1 [ 339.671320][T20770] is_bad_inode(inode)=0 [ 339.671442][T20769] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.675473][T20770] NEXT_ORPHAN(inode)=2130706432 [ 339.675485][T20770] max_ino=32 [ 339.675492][T20770] i_nlink=1 [ 339.696431][T20770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.715037][T20769] EXT4-fs (loop0): mount failed [ 339.730881][T20770] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 339.741971][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.780572][T20770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3707: bg 0: block 248: padding at end of block bitmap is not set [ 339.809827][T20770] Quota error (device loop3): write_blk: dquota write failed [ 339.817410][T20770] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 339.827451][T20770] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3707: Failed to acquire dquot type 1 [ 339.870630][T20770] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.893719][T20798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.902720][T20798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.928810][ T29] audit: type=1326 audit(1745621684.554:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb35b7e969 code=0x7ffc0000 [ 339.956102][ T29] audit: type=1326 audit(1745621684.584:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffb35b7e969 code=0x7ffc0000 [ 339.980261][ T29] audit: type=1326 audit(1745621684.584:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb35b7e969 code=0x7ffc0000 [ 340.003960][ T29] audit: type=1326 audit(1745621684.584:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb35b7e969 code=0x7ffc0000 [ 340.099419][T20828] loop2: detected capacity change from 0 to 512 [ 340.114781][T20828] EXT4-fs (loop2): orphan cleanup on readonly fs [ 340.128051][T20828] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3718: bad orphan inode 13 [ 340.139945][T20828] ext4_test_bit(bit=12, block=18) = 1 [ 340.146105][T20828] is_bad_inode(inode)=0 [ 340.150925][T20828] NEXT_ORPHAN(inode)=2130706432 [ 340.155889][T20828] max_ino=32 [ 340.159184][T20828] i_nlink=1 [ 340.163588][T20828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.177115][T20828] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 340.190989][T20828] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 340.331372][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.378992][ T29] audit: type=1326 audit(1745621685.004:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20867 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fa00e969 code=0x7ffc0000 [ 340.648879][T20901] loop5: detected capacity change from 0 to 512 [ 340.672619][T20901] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 340.695306][T20901] EXT4-fs (loop5): 1 truncate cleaned up [ 340.715273][T20901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.926979][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.939693][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.965431][T20943] loop5: detected capacity change from 0 to 736 [ 341.034310][T20948] loop2: detected capacity change from 0 to 512 [ 341.046208][T20948] EXT4-fs (loop2): orphan cleanup on readonly fs [ 341.059318][T20948] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3723: bad orphan inode 13 [ 341.099345][T20948] ext4_test_bit(bit=12, block=18) = 1 [ 341.104889][T20948] is_bad_inode(inode)=0 [ 341.109090][T20948] NEXT_ORPHAN(inode)=2130706432 [ 341.114017][T20948] max_ino=32 [ 341.117243][T20948] i_nlink=1 [ 341.138770][T20948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.163564][T20948] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 341.182985][T20954] loop5: detected capacity change from 0 to 512 [ 341.191130][T20948] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 341.211597][T20954] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 341.227152][T20954] EXT4-fs (loop5): mount failed [ 341.562003][T20969] loop5: detected capacity change from 0 to 512 [ 341.590953][T20969] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 341.634345][T20969] EXT4-fs (loop5): 1 truncate cleaned up [ 341.675227][T20969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.764270][T20977] loop4: detected capacity change from 0 to 736 [ 341.851192][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.888340][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.143597][T21002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3743'. [ 342.294663][T21023] loop0: detected capacity change from 0 to 512 [ 342.312579][T21023] EXT4-fs (loop0): orphan cleanup on readonly fs [ 342.321216][T21023] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3749: bad orphan inode 13 [ 342.333499][T21023] ext4_test_bit(bit=12, block=18) = 1 [ 342.339141][T21023] is_bad_inode(inode)=0 [ 342.343538][T21023] NEXT_ORPHAN(inode)=2130706432 [ 342.348468][T21023] max_ino=32 [ 342.351934][T21023] i_nlink=1 [ 342.356579][T21023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.372771][T21023] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 342.412427][T21023] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3749: bg 0: block 248: padding at end of block bitmap is not set [ 342.433204][T20995] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 342.442265][T21023] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3749: Failed to acquire dquot type 1 [ 342.465739][T21023] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.513180][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.697470][T21053] xt_hashlimit: max too large, truncated to 1048576 [ 343.447907][T21113] loop3: detected capacity change from 0 to 512 [ 343.533522][T21113] EXT4-fs (loop3): orphan cleanup on readonly fs [ 343.540620][T21113] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3758: bad orphan inode 13 [ 343.551389][T21113] ext4_test_bit(bit=12, block=18) = 1 [ 343.556865][T21113] is_bad_inode(inode)=0 [ 343.561201][T21113] NEXT_ORPHAN(inode)=2130706432 [ 343.566075][T21113] max_ino=32 [ 343.569329][T21113] i_nlink=1 [ 343.573193][T21113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.627301][T21131] loop2: detected capacity change from 0 to 512 [ 343.635063][T21113] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 343.650881][T21131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 343.657867][T21113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3758: bg 0: block 248: padding at end of block bitmap is not set [ 343.661855][T21131] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3761: bad orphan inode 13 [ 343.677201][T21113] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3758: Failed to acquire dquot type 1 [ 343.694942][T21131] ext4_test_bit(bit=12, block=18) = 1 [ 343.695242][T21113] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.700410][T21131] is_bad_inode(inode)=0 [ 343.719334][T21131] NEXT_ORPHAN(inode)=2130706432 [ 343.724227][T21131] max_ino=32 [ 343.727516][T21131] i_nlink=1 [ 343.732353][T21131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.754723][T21131] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 343.771180][T21131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3761: bg 0: block 248: padding at end of block bitmap is not set [ 343.786115][T21131] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3761: Failed to acquire dquot type 1 [ 343.798093][T21131] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.827534][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.041878][T21172] loop2: detected capacity change from 0 to 512 [ 344.055813][T21172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.069097][T21172] EXT4-fs (loop2): 1 truncate cleaned up [ 344.077585][T21172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.197477][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.218256][T21177] loop2: detected capacity change from 0 to 512 [ 344.229194][T21177] EXT4-fs (loop2): orphan cleanup on readonly fs [ 344.240024][T21177] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3767: bad orphan inode 13 [ 344.250652][T21177] ext4_test_bit(bit=12, block=18) = 1 [ 344.250995][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.256261][T21177] is_bad_inode(inode)=0 [ 344.269429][T21177] NEXT_ORPHAN(inode)=2130706432 [ 344.274323][T21177] max_ino=32 [ 344.277523][T21177] i_nlink=1 [ 344.281656][T21177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.326075][T21177] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 344.353572][T21177] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 344.423461][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.617260][T21198] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 344.644377][T21200] loop5: detected capacity change from 0 to 512 [ 344.664201][T21200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 344.673104][T21200] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3775: bad orphan inode 13 [ 344.683920][T21200] ext4_test_bit(bit=12, block=18) = 1 [ 344.689364][T21200] is_bad_inode(inode)=0 [ 344.693600][T21200] NEXT_ORPHAN(inode)=2130706432 [ 344.698481][T21200] max_ino=32 [ 344.701704][T21200] i_nlink=1 [ 344.706454][T21200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.720888][T21200] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 344.740853][T21200] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 344.915800][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 344.915816][ T29] audit: type=1326 audit(1745621689.544:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 344.930639][T21212] loop0: detected capacity change from 0 to 512 [ 344.959600][ T29] audit: type=1326 audit(1745621689.574:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 344.983245][ T29] audit: type=1326 audit(1745621689.574:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 345.006967][ T29] audit: type=1326 audit(1745621689.574:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 345.030503][ T29] audit: type=1326 audit(1745621689.574:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 345.054029][ T29] audit: type=1326 audit(1745621689.574:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 345.055003][T21212] EXT4-fs (loop0): orphan cleanup on readonly fs [ 345.077670][ T29] audit: type=1326 audit(1745621689.574:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 345.107626][ T29] audit: type=1326 audit(1745621689.574:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c0b1e969 code=0x7ffc0000 [ 345.131192][ T29] audit: type=1326 audit(1745621689.574:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2c0b1d2d0 code=0x7ffc0000 [ 345.154785][ T29] audit: type=1326 audit(1745621689.574:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.2.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc2c0b20197 code=0x7ffc0000 [ 345.186291][T21212] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3778: bad orphan inode 13 [ 345.197626][T21212] ext4_test_bit(bit=12, block=18) = 1 [ 345.203127][T21212] is_bad_inode(inode)=0 [ 345.207326][T21212] NEXT_ORPHAN(inode)=2130706432 [ 345.212342][T21212] max_ino=32 [ 345.215625][T21212] i_nlink=1 [ 345.223467][T21212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.263157][T21212] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 345.284689][T21212] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3778: bg 0: block 248: padding at end of block bitmap is not set [ 345.299578][T21217] loop2: detected capacity change from 0 to 736 [ 345.311550][T21212] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3778: Failed to acquire dquot type 1 [ 345.333446][T21212] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.423640][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.466442][T21220] xt_hashlimit: max too large, truncated to 1048576 [ 345.665352][T21229] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 345.677086][T21229] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3786'. [ 345.689986][T21229] loop5: detected capacity change from 0 to 256 [ 345.711594][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.875457][T21247] loop5: detected capacity change from 0 to 512 [ 345.903775][T21247] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.940751][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3794'. [ 345.955016][T21247] EXT4-fs (loop5): 1 truncate cleaned up [ 345.970756][T21247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.208521][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.331885][T21267] loop2: detected capacity change from 0 to 512 [ 346.348611][T21267] EXT4-fs (loop2): orphan cleanup on readonly fs [ 346.360311][T21267] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3799: bad orphan inode 13 [ 346.380309][T21267] ext4_test_bit(bit=12, block=18) = 1 [ 346.385811][T21267] is_bad_inode(inode)=0 [ 346.390016][T21267] NEXT_ORPHAN(inode)=2130706432 [ 346.394894][T21267] max_ino=32 [ 346.398157][T21267] i_nlink=1 [ 346.422780][T21267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.454543][T21267] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 346.473513][T21271] loop5: detected capacity change from 0 to 512 [ 346.512258][T21271] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.3801: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 346.531211][T21271] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.3801: Bad quota inode: 3, type: 0 [ 346.543277][T21271] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 346.559204][T21267] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3799: bg 0: block 248: padding at end of block bitmap is not set [ 346.574080][T21271] EXT4-fs (loop5): mount failed [ 346.579099][T21267] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3799: Failed to acquire dquot type 1 [ 346.584077][T21276] loop3: detected capacity change from 0 to 512 [ 346.599202][T21267] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 346.630208][T21276] EXT4-fs (loop3): orphan cleanup on readonly fs [ 346.654282][T21276] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3802: bad orphan inode 13 [ 346.698526][T21276] ext4_test_bit(bit=12, block=18) = 1 [ 346.704056][T21276] is_bad_inode(inode)=0 [ 346.708285][T21276] NEXT_ORPHAN(inode)=2130706432 [ 346.713335][T21276] max_ino=32 [ 346.716559][T21276] i_nlink=1 [ 346.720432][T21276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.754758][T21285] loop0: detected capacity change from 0 to 512 [ 346.763153][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.786390][T21285] EXT4-fs (loop0): orphan cleanup on readonly fs [ 346.793327][T21285] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3805: bad orphan inode 13 [ 346.814343][T21285] ext4_test_bit(bit=12, block=18) = 1 [ 346.819766][T21285] is_bad_inode(inode)=0 [ 346.823990][T21285] NEXT_ORPHAN(inode)=2130706432 [ 346.828983][T21285] max_ino=32 [ 346.832283][T21285] i_nlink=1 [ 346.836639][T21285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.873972][T21285] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 346.889624][T21294] syz!: rxe_newlink: already configured on team_slave_0 [ 346.897749][T21294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3807'. [ 346.928009][T21285] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 346.944862][T21290] loop4: detected capacity change from 0 to 256 [ 347.107036][T21311] loop5: detected capacity change from 0 to 512 [ 347.118700][T21311] EXT4-fs (loop5): orphan cleanup on readonly fs [ 347.126761][T21311] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3816: bad orphan inode 13 [ 347.127017][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.139807][T21311] ext4_test_bit(bit=12, block=18) = 1 [ 347.151324][T21311] is_bad_inode(inode)=0 [ 347.155498][T21311] NEXT_ORPHAN(inode)=2130706432 [ 347.160402][T21311] max_ino=32 [ 347.163722][T21311] i_nlink=1 [ 347.170287][T21311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.185845][T21311] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 347.201320][T21311] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3816: bg 0: block 248: padding at end of block bitmap is not set [ 347.216223][T21311] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3816: Failed to acquire dquot type 1 [ 347.228110][T21311] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 347.542100][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.667623][T21340] loop2: detected capacity change from 0 to 512 [ 347.676779][T21340] EXT4-fs (loop2): orphan cleanup on readonly fs [ 347.683854][T21340] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3827: bad orphan inode 13 [ 347.694257][T21340] ext4_test_bit(bit=12, block=18) = 1 [ 347.699644][T21340] is_bad_inode(inode)=0 [ 347.703881][T21340] NEXT_ORPHAN(inode)=2130706432 [ 347.708768][T21340] max_ino=32 [ 347.712013][T21340] i_nlink=1 [ 347.715627][T21340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.729427][T21340] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 347.751671][T21340] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3827: bg 0: block 248: padding at end of block bitmap is not set [ 347.766288][T21340] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3827: Failed to acquire dquot type 1 [ 347.778598][T21340] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 347.899877][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.902216][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 348.027174][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3835'. [ 348.086230][T21360] loop4: detected capacity change from 0 to 512 [ 348.113980][T21360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 348.198180][T21360] EXT4-fs (loop4): 1 truncate cleaned up [ 348.213598][T21360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.458431][T17742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.583218][T21373] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 348.603834][T21373] loop2: detected capacity change from 0 to 256 [ 348.775147][T21388] loop2: detected capacity change from 0 to 512 [ 348.782116][T21356] syz.5.3835 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 348.793287][T21356] CPU: 1 UID: 0 PID: 21356 Comm: syz.5.3835 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 348.793354][T21356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.793369][T21356] Call Trace: [ 348.793376][T21356] [ 348.793385][T21356] __dump_stack+0x1d/0x30 [ 348.793410][T21356] dump_stack_lvl+0xe8/0x140 [ 348.793435][T21356] dump_stack+0x15/0x1b [ 348.793492][T21356] dump_header+0x81/0x220 [ 348.793527][T21356] oom_kill_process+0x334/0x3f0 [ 348.793552][T21356] out_of_memory+0x979/0xb80 [ 348.793610][T21356] ? css_next_descendant_pre+0x138/0x160 [ 348.793663][T21356] mem_cgroup_out_of_memory+0x13d/0x190 [ 348.793768][T21356] try_charge_memcg+0x5e2/0x870 [ 348.793801][T21356] charge_memcg+0x51/0xc0 [ 348.793823][T21356] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 348.793851][T21356] __read_swap_cache_async+0x1df/0x350 [ 348.793939][T21356] swap_cluster_readahead+0x376/0x3e0 [ 348.793968][T21356] swapin_readahead+0xde/0x6f0 [ 348.794016][T21356] ? __filemap_get_folio+0x49f/0x650 [ 348.794046][T21356] ? __rcu_read_unlock+0x34/0x70 [ 348.794081][T21356] ? swap_cache_get_folio+0x77/0x200 [ 348.794156][T21356] do_swap_page+0x301/0x2460 [ 348.794192][T21356] ? cgroup_rstat_updated+0xa3/0x510 [ 348.794284][T21356] ? __pfx_default_wake_function+0x10/0x10 [ 348.794318][T21356] handle_mm_fault+0xb60/0x2ae0 [ 348.794479][T21356] ? mas_walk+0xf2/0x120 [ 348.794510][T21356] do_user_addr_fault+0x636/0x1090 [ 348.794546][T21356] ? restore_fpregs_from_fpstate+0x61/0x120 [ 348.794615][T21356] ? fpregs_restore_userregs+0xbb/0x190 [ 348.794685][T21356] exc_page_fault+0x54/0xc0 [ 348.794716][T21356] asm_exc_page_fault+0x26/0x30 [ 348.794809][T21356] RIP: 0033:0x7ffb35a55399 [ 348.794828][T21356] Code: 35 00 00 0f 8e 09 fe ff ff e8 f3 9f fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 80 7b 20 [ 348.794884][T21356] RSP: 002b:00007ffc47acaf60 EFLAGS: 00010206 [ 348.794904][T21356] RAX: 0000000000055245 RBX: 00007ffb35da5fa0 RCX: 0000000000054f60 [ 348.794920][T21356] RDX: 00000000000002e5 RSI: 00007ffc47acaf40 RDI: 00000000000003e8 [ 348.794936][T21356] RBP: 00007ffb35da7ba0 R08: 000000002c2d9e01 R09: 7fffffffffffffff [ 348.794952][T21356] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000005526c [ 348.794967][T21356] R13: 00007ffb35da6080 R14: ffffffffffffffff R15: 00007ffc47acb070 [ 348.795117][T21356] [ 348.795128][T21356] memory: usage 307200kB, limit 307200kB, failcnt 146 [ 348.834656][T21388] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 348.838081][T21356] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 348.843446][T21388] EXT4-fs (loop2): mount failed [ 348.847112][T21356] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 348.847131][T21356] Memory cgroup stats for /syz5: [ 349.078612][T21356] cache 0 [ 349.086592][T21356] rss 0 [ 349.089369][T21356] shmem 0 [ 349.092358][T21356] mapped_file 0 [ 349.095830][T21356] dirty 0 [ 349.098792][T21356] writeback 0 [ 349.102166][T21356] workingset_refault_anon 30 [ 349.106767][T21356] workingset_refault_file 0 [ 349.111446][T21356] swap 200704 [ 349.114761][T21356] swapcached 0 [ 349.118148][T21356] pgpgin 22967 [ 349.121550][T21356] pgpgout 22967 [ 349.125540][T21356] pgfault 17692 [ 349.129187][T21356] pgmajfault 23 [ 349.132700][T21356] inactive_anon 0 [ 349.136345][T21356] active_anon 0 [ 349.139823][T21356] inactive_file 0 [ 349.143508][T21356] active_file 0 [ 349.145042][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.147089][T21356] unevictable 0 [ 349.159654][T21356] hierarchical_memory_limit 314572800 [ 349.165071][T21356] hierarchical_memsw_limit 9223372036854771712 [ 349.171266][T21356] total_cache 0 [ 349.174760][T21356] total_rss 0 [ 349.178115][T21356] total_shmem 0 [ 349.181633][T21356] total_mapped_file 0 [ 349.185664][T21356] total_dirty 0 [ 349.189135][T21356] total_writeback 0 [ 349.192992][T21356] total_workingset_refault_anon 30 [ 349.198205][T21356] total_workingset_refault_file 0 [ 349.203275][T21356] total_swap 200704 [ 349.207101][T21356] total_swapcached 0 [ 349.211051][T21356] total_pgpgin 22967 [ 349.215247][T21356] total_pgpgout 22967 [ 349.219245][T21356] total_pgfault 17692 [ 349.223747][T21356] total_pgmajfault 23 [ 349.227735][T21356] total_inactive_anon 0 [ 349.232172][T21356] total_active_anon 0 [ 349.236164][T21356] total_inactive_file 0 [ 349.240369][T21356] total_active_file 0 [ 349.244797][T21356] total_unevictable 0 [ 349.248817][T21356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3835,pid=21356,uid=0 [ 349.263548][T21356] Memory cgroup out of memory: Killed process 21356 (syz.5.3835) total-vm:93748kB, anon-rss:936kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 349.448618][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'. [ 349.712284][T21422] loop2: detected capacity change from 0 to 512 [ 349.748550][T21422] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 349.791155][T21423] loop0: detected capacity change from 0 to 512 [ 349.798279][T21422] EXT4-fs (loop2): mount failed [ 349.818657][T21423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 349.878429][T21423] EXT4-fs (loop0): 1 truncate cleaned up [ 349.953906][T21423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.975711][T21434] loop5: detected capacity change from 0 to 512 [ 350.015539][T21434] EXT4-fs (loop5): orphan cleanup on readonly fs [ 350.052997][T21434] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3864: bad orphan inode 13 [ 350.078618][T21434] ext4_test_bit(bit=12, block=18) = 1 [ 350.084194][T21434] is_bad_inode(inode)=0 [ 350.088459][T21434] NEXT_ORPHAN(inode)=2130706432 [ 350.093370][T21434] max_ino=32 [ 350.096640][T21434] i_nlink=1 [ 350.100399][T21434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.114450][T21434] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 350.141259][T21434] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 350.149982][T21443] xt_hashlimit: max too large, truncated to 1048576 [ 350.156740][T21441] loop2: detected capacity change from 0 to 256 [ 350.231333][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.294125][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 350.325413][T21456] loop5: detected capacity change from 0 to 512 [ 350.341852][T21456] EXT4-fs (loop5): orphan cleanup on readonly fs [ 350.348592][T21456] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3869: bad orphan inode 13 [ 350.359091][T21456] ext4_test_bit(bit=12, block=18) = 1 [ 350.364573][T21456] is_bad_inode(inode)=0 [ 350.368843][T21456] NEXT_ORPHAN(inode)=2130706432 [ 350.373805][T21456] max_ino=32 [ 350.377010][T21456] i_nlink=1 [ 350.381192][T21456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.405774][T21461] loop2: detected capacity change from 0 to 512 [ 350.434333][T21456] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 350.445144][T21461] __quota_error: 138 callbacks suppressed [ 350.445196][T21461] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 350.466977][T21461] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 350.467228][T21456] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3869: bg 0: block 248: padding at end of block bitmap is not set [ 350.482488][T21461] EXT4-fs (loop2): mount failed [ 350.497008][T21456] Quota error (device loop5): write_blk: dquota write failed [ 350.508673][T21456] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 350.518741][T21456] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3869: Failed to acquire dquot type 1 [ 350.533083][T21456] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 350.548274][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.603035][ T29] audit: type=1326 audit(1745621695.234:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.627351][ T29] audit: type=1326 audit(1745621695.234:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.651075][ T29] audit: type=1326 audit(1745621695.234:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.674720][ T29] audit: type=1326 audit(1745621695.234:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.698335][ T29] audit: type=1326 audit(1745621695.234:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.722478][ T29] audit: type=1326 audit(1745621695.234:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.746624][ T29] audit: type=1326 audit(1745621695.234:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21475 comm="syz.0.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cb48e969 code=0x7ffc0000 [ 350.780682][T21483] loop4: detected capacity change from 0 to 256 [ 350.795865][T21479] loop0: detected capacity change from 0 to 512 [ 350.813089][T21479] EXT4-fs (loop0): orphan cleanup on readonly fs [ 350.820791][T21479] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.3879: bad orphan inode 13 [ 350.831279][T21479] ext4_test_bit(bit=12, block=18) = 1 [ 350.836738][T21479] is_bad_inode(inode)=0 [ 350.840989][T21479] NEXT_ORPHAN(inode)=2130706432 [ 350.846039][T21479] max_ino=32 [ 350.847426][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'. [ 350.849362][T21479] i_nlink=1 [ 350.861824][T21479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.877638][T21479] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 350.910919][T21479] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 350.935618][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.963322][T21494] loop4: detected capacity change from 0 to 512 [ 350.983288][T21494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 350.993970][T21494] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3882: bad orphan inode 13 [ 351.007571][T21494] ext4_test_bit(bit=12, block=18) = 1 [ 351.013096][T21494] is_bad_inode(inode)=0 [ 351.017275][T21494] NEXT_ORPHAN(inode)=2130706432 [ 351.022359][T21494] max_ino=32 [ 351.025585][T21494] i_nlink=1 [ 351.029483][T21494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.044289][T21494] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 351.061466][T21494] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 351.111749][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.143877][T21512] loop0: detected capacity change from 0 to 2048 [ 351.194071][T21516] loop5: detected capacity change from 0 to 256 [ 351.203137][T21512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.215936][T21512] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.288711][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3888'. [ 351.392632][T21530] loop3: detected capacity change from 0 to 512 [ 351.447958][T21530] EXT4-fs (loop3): orphan cleanup on readonly fs [ 351.463733][T21530] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3896: bad orphan inode 13 [ 351.475301][T21530] ext4_test_bit(bit=12, block=18) = 1 [ 351.480728][T21530] is_bad_inode(inode)=0 [ 351.484982][T21530] NEXT_ORPHAN(inode)=2130706432 [ 351.489873][T21530] max_ino=32 [ 351.493097][T21530] i_nlink=1 [ 351.500711][T21530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.523051][T21530] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 351.549100][T21530] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 351.583072][T21534] FAULT_INJECTION: forcing a failure. [ 351.583072][T21534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.596259][T21534] CPU: 0 UID: 0 PID: 21534 Comm: syz.5.3898 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 351.596296][T21534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.596312][T21534] Call Trace: [ 351.596319][T21534] [ 351.596328][T21534] __dump_stack+0x1d/0x30 [ 351.596352][T21534] dump_stack_lvl+0xe8/0x140 [ 351.596418][T21534] dump_stack+0x15/0x1b [ 351.596518][T21534] should_fail_ex+0x265/0x280 [ 351.596560][T21534] should_fail+0xb/0x20 [ 351.596654][T21534] should_fail_usercopy+0x1a/0x20 [ 351.596695][T21534] _copy_to_user+0x20/0xa0 [ 351.596715][T21534] simple_read_from_buffer+0xb5/0x130 [ 351.596739][T21534] proc_fail_nth_read+0x100/0x140 [ 351.596818][T21534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.596847][T21534] vfs_read+0x19d/0x6f0 [ 351.596869][T21534] ? __rcu_read_unlock+0x4f/0x70 [ 351.596893][T21534] ? __fget_files+0x184/0x1c0 [ 351.596979][T21534] ksys_read+0xda/0x1a0 [ 351.597011][T21534] __x64_sys_read+0x40/0x50 [ 351.597041][T21534] x64_sys_call+0x2d77/0x2fb0 [ 351.597068][T21534] do_syscall_64+0xd0/0x1a0 [ 351.597087][T21534] ? clear_bhb_loop+0x25/0x80 [ 351.597189][T21534] ? clear_bhb_loop+0x25/0x80 [ 351.597209][T21534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.597230][T21534] RIP: 0033:0x7ffb35b7d37c [ 351.597249][T21534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 351.597272][T21534] RSP: 002b:00007ffb341e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.597296][T21534] RAX: ffffffffffffffda RBX: 00007ffb35da5fa0 RCX: 00007ffb35b7d37c [ 351.597337][T21534] RDX: 000000000000000f RSI: 00007ffb341e70a0 RDI: 0000000000000003 [ 351.597348][T21534] RBP: 00007ffb341e7090 R08: 0000000000000000 R09: 0000000000000000 [ 351.597362][T21534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.597377][T21534] R13: 0000000000000001 R14: 00007ffb35da5fa0 R15: 00007ffc47acadf8 [ 351.597400][T21534] [ 351.816087][T16876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.892013][T21540] loop5: detected capacity change from 0 to 736 [ 352.088530][T17049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.168958][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.181377][T21547] loop5: detected capacity change from 0 to 512 [ 352.209629][T21547] EXT4-fs (loop5): orphan cleanup on readonly fs [ 352.220169][T21549] loop3: detected capacity change from 0 to 256 [ 352.240037][T21547] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.3904: bad orphan inode 13 [ 352.251155][T21547] ext4_test_bit(bit=12, block=18) = 1 [ 352.256572][T21547] is_bad_inode(inode)=0 [ 352.260956][T21547] NEXT_ORPHAN(inode)=2130706432 [ 352.265866][T21547] max_ino=32 [ 352.269116][T21547] i_nlink=1 [ 352.288229][T21547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.314323][T21547] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 352.345151][T21547] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3904: bg 0: block 248: padding at end of block bitmap is not set [ 352.394770][T21547] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3904: Failed to acquire dquot type 1 [ 352.433268][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3908'. [ 352.450809][T21547] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 352.879110][T21568] loop2: detected capacity change from 0 to 736 [ 352.963204][T19819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.098484][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 353.182562][T21582] loop0: detected capacity change from 0 to 256 [ 353.195057][T21557] syz.3.3908 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 353.209348][T21557] CPU: 1 UID: 0 PID: 21557 Comm: syz.3.3908 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 353.209386][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.209407][T21557] Call Trace: [ 353.209414][T21557] [ 353.209422][T21557] __dump_stack+0x1d/0x30 [ 353.209480][T21557] dump_stack_lvl+0xe8/0x140 [ 353.209500][T21557] dump_stack+0x15/0x1b [ 353.209520][T21557] dump_header+0x81/0x220 [ 353.209555][T21557] oom_kill_process+0x334/0x3f0 [ 353.209637][T21557] out_of_memory+0x979/0xb80 [ 353.209660][T21557] ? css_next_descendant_pre+0x138/0x160 [ 353.209707][T21557] mem_cgroup_out_of_memory+0x13d/0x190 [ 353.209832][T21557] try_charge_memcg+0x5e2/0x870 [ 353.209862][T21557] obj_cgroup_charge_pages+0xb7/0x1a0 [ 353.209948][T21557] __memcg_kmem_charge_page+0x9f/0x170 [ 353.209977][T21557] __alloc_frozen_pages_noprof+0x188/0x360 [ 353.210007][T21557] alloc_pages_mpol+0xb3/0x250 [ 353.210029][T21557] alloc_pages_noprof+0x90/0x130 [ 353.210061][T21557] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 353.210162][T21557] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 353.210190][T21557] ? ip_set_alloc+0x1f/0x30 [ 353.210227][T21557] ? ip_set_alloc+0x1f/0x30 [ 353.210395][T21557] ? __kmalloc_cache_noprof+0x189/0x320 [ 353.210417][T21557] ip_set_alloc+0x1f/0x30 [ 353.210446][T21557] hash_netiface_create+0x282/0x740 [ 353.210481][T21557] ? __pfx_hash_netiface_create+0x10/0x10 [ 353.210565][T21557] ip_set_create+0x3c9/0x960 [ 353.210666][T21557] ? __nla_parse+0x40/0x60 [ 353.210720][T21557] nfnetlink_rcv_msg+0x4c3/0x590 [ 353.210815][T21557] netlink_rcv_skb+0x120/0x220 [ 353.210853][T21557] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 353.210888][T21557] nfnetlink_rcv+0x16b/0x1690 [ 353.210915][T21557] ? __kfree_skb+0x109/0x150 [ 353.210975][T21557] ? nlmon_xmit+0x4f/0x60 [ 353.210997][T21557] ? consume_skb+0x49/0x150 [ 353.211026][T21557] ? nlmon_xmit+0x4f/0x60 [ 353.211070][T21557] ? dev_hard_start_xmit+0x39e/0x3d0 [ 353.211130][T21557] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 353.211171][T21557] ? __dev_queue_xmit+0x182/0x1fb0 [ 353.211215][T21557] ? ref_tracker_free+0x37d/0x3e0 [ 353.211328][T21557] ? __netlink_deliver_tap+0x4dc/0x500 [ 353.211367][T21557] netlink_unicast+0x59e/0x670 [ 353.211407][T21557] netlink_sendmsg+0x58b/0x6b0 [ 353.211480][T21557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.211519][T21557] __sock_sendmsg+0x142/0x180 [ 353.211595][T21557] ____sys_sendmsg+0x31e/0x4e0 [ 353.211707][T21557] ___sys_sendmsg+0x17b/0x1d0 [ 353.211841][T21557] __x64_sys_sendmsg+0xd4/0x160 [ 353.211878][T21557] x64_sys_call+0x2999/0x2fb0 [ 353.211899][T21557] do_syscall_64+0xd0/0x1a0 [ 353.211982][T21557] ? clear_bhb_loop+0x25/0x80 [ 353.212098][T21557] ? clear_bhb_loop+0x25/0x80 [ 353.212122][T21557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.212194][T21557] RIP: 0033:0x7f82fa00e969 [ 353.212210][T21557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.212228][T21557] RSP: 002b:00007f82f8677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.212253][T21557] RAX: ffffffffffffffda RBX: 00007f82fa235fa0 RCX: 00007f82fa00e969 [ 353.212270][T21557] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 353.212288][T21557] RBP: 00007f82fa090ab1 R08: 0000000000000000 R09: 0000000000000000 [ 353.212304][T21557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.212352][T21557] R13: 0000000000000000 R14: 00007f82fa235fa0 R15: 00007ffd549e3d88 [ 353.212371][T21557] [ 353.560719][T21557] memory: usage 307200kB, limit 307200kB, failcnt 2770 [ 353.567610][T21557] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 353.575590][T21557] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 353.583020][T21557] Memory cgroup stats for /syz3: [ 353.592569][T21557] cache 0 [ 353.600759][T21557] rss 0 [ 353.603534][T21557] shmem 0 [ 353.606484][T21557] mapped_file 0 [ 353.609972][T21557] dirty 0 [ 353.613125][T21557] writeback 0 [ 353.613197][ T2994] ================================================================== [ 353.613229][ T2994] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 353.613276][ T2994] [ 353.613281][ T2994] write to 0xffffffff86886190 of 8 bytes by task 21557 on cpu 0: [ 353.616570][T21557] workingset_refault_anon 2051 [ 353.624623][ T2994] data_alloc+0x271/0x2b0 [ 353.624659][ T2994] prb_reserve+0x808/0xaf0 [ 353.624686][ T2994] vprintk_store+0x56d/0x860 [ 353.624715][ T2994] vprintk_emit+0x178/0x650 [ 353.631653][T21557] workingset_refault_file 1170 [ 353.633958][ T2994] vprintk_default+0x26/0x30 [ 353.641674][T21557] swap 184320 [ 353.646410][ T2994] vprintk+0x1d/0x30 [ 353.646438][ T2994] _printk+0x79/0xa0 [ 353.646474][ T2994] seq_buf_do_printk+0x113/0x1a0 [ 353.650815][T21557] swapcached 20480 [ 353.655194][ T2994] mem_cgroup_print_oom_meminfo+0x169/0x250 [ 353.659767][T21557] pgpgin 336268 [ 353.659778][T21557] pgpgout 336263 [ 353.664279][ T2994] dump_header+0xa0/0x220 [ 353.664322][ T2994] oom_kill_process+0x334/0x3f0 [ 353.664350][ T2994] out_of_memory+0x979/0xb80 [ 353.669204][T21557] pgfault 117313 [ 353.673775][ T2994] mem_cgroup_out_of_memory+0x13d/0x190 [ 353.677143][T21557] pgmajfault 533 [ 353.681114][ T2994] try_charge_memcg+0x5e2/0x870 [ 353.681149][ T2994] obj_cgroup_charge_pages+0xb7/0x1a0 [ 353.681175][ T2994] __memcg_kmem_charge_page+0x9f/0x170 [ 353.685051][T21557] inactive_anon 20480 [ 353.689972][ T2994] __alloc_frozen_pages_noprof+0x188/0x360 [ 353.693710][T21557] active_anon 0 [ 353.699557][ T2994] alloc_pages_mpol+0xb3/0x250 [ 353.703024][T21557] inactive_file 0 [ 353.706541][ T2994] alloc_pages_noprof+0x90/0x130 [ 353.710958][T21557] active_file 0 [ 353.715794][ T2994] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 353.720400][T21557] unevictable 0 [ 353.723908][ T2994] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 353.729441][T21557] hierarchical_memory_limit 314572800 [ 353.732972][ T2994] ip_set_alloc+0x1f/0x30 [ 353.733003][ T2994] hash_netiface_create+0x282/0x740 [ 353.737836][T21557] hierarchical_memsw_limit 9223372036854771712 [ 353.743801][ T2994] ip_set_create+0x3c9/0x960 [ 353.743832][ T2994] nfnetlink_rcv_msg+0x4c3/0x590 [ 353.743855][ T2994] netlink_rcv_skb+0x120/0x220 [ 353.743882][ T2994] nfnetlink_rcv+0x16b/0x1690 [ 353.749425][T21557] total_cache 0 [ 353.749437][T21557] total_rss 0 [ 353.753392][ T2994] netlink_unicast+0x59e/0x670 [ 353.759208][T21557] total_shmem 0 [ 353.762666][ T2994] netlink_sendmsg+0x58b/0x6b0 [ 353.762710][ T2994] __sock_sendmsg+0x142/0x180 [ 353.762735][ T2994] ____sys_sendmsg+0x31e/0x4e0 [ 353.762769][ T2994] ___sys_sendmsg+0x17b/0x1d0 [ 353.762801][ T2994] __x64_sys_sendmsg+0xd4/0x160 [ 353.767691][T21557] total_mapped_file 0 [ 353.771322][ T2994] x64_sys_call+0x2999/0x2fb0 [ 353.771353][ T2994] do_syscall_64+0xd0/0x1a0 [ 353.776272][T21557] total_dirty 0 [ 353.776284][T21557] total_writeback 0 [ 353.779720][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.785559][T21557] total_workingset_refault_anon 2051 [ 353.788981][ T2994] [ 353.788989][ T2994] read to 0xffffffff86886190 of 16 bytes by task 2994 on cpu 1: [ 353.794383][T21557] total_workingset_refault_file 1170 [ 353.799709][ T2994] _prb_read_valid+0x1bc/0x920 [ 353.804051][T21557] total_swap 184320 [ 353.809305][ T2994] prb_read_valid+0x3c/0x60 [ 353.815495][T21557] total_swapcached 20480 [ 353.820019][ T2994] syslog_print+0x23a/0x540 [ 353.824958][T21557] total_pgpgin 336268 [ 353.829687][ T2994] do_syslog+0x52b/0x7e0 [ 353.834382][T21557] total_pgpgout 336263 [ 353.837811][ T2994] __x64_sys_syslog+0x41/0x50 [ 353.841114][T21557] total_pgfault 117313 [ 353.845830][ T2994] x64_sys_call+0x2ea0/0x2fb0 [ 353.849278][T21557] total_pgmajfault 533 [ 353.854021][ T2994] do_syscall_64+0xd0/0x1a0 [ 353.854052][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.858718][T21557] total_inactive_anon 20480 [ 353.863459][ T2994] [ 353.863466][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 353.863480][ T2994] CPU: 1 UID: 0 PID: 2994 Comm: klogd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 353.868149][T21557] total_active_anon 0 [ 353.872980][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.872998][ T2994] ================================================================== [ 353.982377][T21583] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 353.983090][T21557] total_inactive_file 0 [ 354.041555][T21557] total_active_file 0 [ 354.045666][T21557] total_unevictable 0 [ 354.049694][T21557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3908,pid=21556,uid=0 [ 354.064594][T21557] Memory cgroup out of memory: Killed process 21556 (syz.3.3908) total-vm:93748kB, anon-rss:936kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000