last executing test programs: 1m10.448958976s ago: executing program 1 (id=165): r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x5, 0xc, 0x7}, 0x0) mmap(&(0x7f000017d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) getpid() syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x82340, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xfc00) socket$xdp(0x2c, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000004"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/notes', 0x2, 0x1a2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2, 0x9}}, 0x20) pipe2$9p(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x4800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1m10.363669595s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x1000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000080), 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m10.285960283s ago: executing program 1 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) unshare(0x2040400) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = msgget$private(0x0, 0x480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) msgctl$IPC_RMID(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r3], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x3e}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b03"], 0x0, 0x3e}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000004000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000002508b82e91bcb61fa84df3ddca4813978c95dcb68ee7629fb271422433095a8dd24bb00c0fb5084f4da4ae2b3c3662fd9235b53f5da26f5e4100317406e19070dbd066a726411c37626db1fa1d8685cec48912d9f5ed69bdffec7ea0f4274b48b162", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="2dba1f38ae6c90ec77ab73e5b8507f59938a9cdceff11cffe7a564c296b61096d268b8e38c860900000000000000f8", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) dup(r11) 1m10.203256251s ago: executing program 1 (id=170): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x200000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x3, 0x0, 0x8}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x18}, {&(0x7f0000000940)=""/114}], 0x44) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r4 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') statx(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000880)='./file1\x00', 0x6000, 0x2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) getgroups(0x1, &(0x7f0000000780)=[0xee01]) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000007c0)={{0x3, r6, r7, r8, r9, 0xa, 0x7}, 0x43, 0xffffffffffffff7f, 0x6, 0xe1, r4, r4, 0x9}) fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000840)='zonefs\x00', 0x189, 0x0) r10 = syz_open_procfs(r4, &(0x7f0000000000)='map_files\x00') getdents64(r10, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x14800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x5, &(0x7f0000000180)=[{0x1ff, 0x6, 0x7, 0xfffff000}, {0x10, 0xd, 0x3, 0xe1bd}, {0x2, 0x40, 0x2, 0x9}, {0x81, 0x0, 0x9, 0x2}, {0x0, 0x0, 0x9}]}) 1m10.071197084s ago: executing program 1 (id=171): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb0100180000000000000078000000780000000a000000080000000000000700000000040000000000000c0300000005000000000000080400000004000000030000930100000004000000050000000a0000000a00000005000000000000000d00000008000000008000000700000000000010040000000c00000000000007000000000000000000000008040000000061612e2e5f2e2e61"], 0x0, 0x9a, 0x0, 0x1, 0x10001}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xa0) 1m9.948957756s ago: executing program 1 (id=175): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 1m9.948726676s ago: executing program 32 (id=175): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 2.084633661s ago: executing program 4 (id=1024): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)=@newtaction={0x13, 0x31, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r2, 0x8, 0x1, 0x7ff, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000200008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfbe, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0xa}, 0x10, 0x65db, r7, 0x9, &(0x7f0000000ac0)=[r4, r1, r1, r1, r1], &(0x7f0000000b40)=[{0x2, 0x5, 0x2, 0xe}, {0x5, 0x2, 0xa, 0xc}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x3, 0x7, 0xc}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x5, 0xd, 0x7}, {0x1, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x3, 0x9}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r5, r8, 0x27, 0x10, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000100)={0x7, 0x1, 0xe, 0x2}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x1f4, 0x11, 0x2, 0x801, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4}, [@generic="80af2240d07ee4c3ed01b2f2c679cef9870069f2ea9ec81529ae8eaedf697099bf3aa8b225fef118131c8c4951d8629413ae86b37a5c7ff8f0f7274a7c213f", @generic="fa65e7f696c796553ccb107394f0f58498815525fa9ec075422244fdce47ab403f346e98269a6f80e877725d8a610c4f0ef99b6887ec475cd65e46bb603fea08dc4eacaae64cd9e3f762510c22bbab5ba813aa3746c945377d8051c3a60f3592cb3830a2dfb2181bfbd5d10291a5ef1deb55574a54be8d78d4c82660c515db331fe9c299c9d0f8fbab038427ec30", @generic="76e5f58b9202fc34909621e9e729ee4de278d49f9d7cfd93a343564126b457d339cd3d4b1dcebe3c2428c90d501f59dec6308f600dc9176c07c5d82753c2c5c4eeb5108a4b087ca36807dac0200f11345a510f141257", @generic="1b7027a447a40b5e693447b5139ce0d9da37ec5c88e0bbfaa2a2de2f50a74e61997a97a48e0a7805197ee03874f8e80aee97f1d46a7098457a4154d13e805e15b33753401e300183a9bf75d3a447935afc3eff3fc7060890a5d2000000b6e1fe3af9a7b4ba22aa381a26047fa64251f707912a394ab122c8fbf689b3564dfe3bdcfeb0e84864ca6c965e86d7bc55a61c39bb12", @generic="ba864edeabc8894cb679d1e8370fe1535d9fe15e4eecd323d7936f4f2210a41819eaf755ed11d2e0b6"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x11dd722846665d7f}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x80}, 0x18) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r12, &(0x7f0000000000)=0xfe8e, 0x12) open(&(0x7f0000001ec0)='./file1/../file0\x00', 0x10d000, 0x142) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0x0, 0x0, 0x0, 0x0, 0xcfb, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.019404727s ago: executing program 3 (id=1026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000980)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r3, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.950464844s ago: executing program 3 (id=1028): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x17, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0xf1]}, &(0x7f00000000c0), 0x8) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x14, 0x9, 0x2, 0x0, 0x0, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xa1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x6, 0x8}, {0xb7, 0x18}]}, 0x18, 0x2) epoll_pwait(r2, 0x0, 0x0, 0x7, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lremovexattr(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) 1.760585354s ago: executing program 0 (id=1031): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.757050683s ago: executing program 4 (id=1032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6e4", 0x6}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x480e0) 1.639612185s ago: executing program 5 (id=1035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.603651869s ago: executing program 5 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e00000013c8c3bc7f36f28e13808ac4808000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000"], 0x6c}}, 0x8000) pipe(&(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x365}]}) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 1.471411102s ago: executing program 5 (id=1040): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000980)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r2, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.440974495s ago: executing program 5 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex(0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.39297614s ago: executing program 3 (id=1044): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x54}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1.147922285s ago: executing program 2 (id=1045): r0 = socket(0x11, 0x3, 0x0) capset(0x0, &(0x7f0000001080)={0x5c, 0x200003, 0x4, 0x10, 0x0, 0xfffffff7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180), 0x14) sendmsg$netlink(r0, 0x0, 0x20040051) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0xc912bf5bae549f38) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/147, 0x93}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x158d617f513333b8}}]}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.146908305s ago: executing program 3 (id=1046): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.132728646s ago: executing program 2 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_JITTER64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.117723528s ago: executing program 3 (id=1048): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000004cbb0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.068557463s ago: executing program 2 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x5d, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 921.800867ms ago: executing program 3 (id=1050): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0xffffffffffffff19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40085507, &(0x7f0000000100)=0x1d) socket$pppl2tp(0x18, 0x1, 0x1) 890.767111ms ago: executing program 2 (id=1051): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 731.755596ms ago: executing program 4 (id=1052): io_uring_setup(0x36, &(0x7f0000000340)={0x0, 0x94f9, 0x407, 0x0, 0x253}) (async) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = fsmount(r0, 0x1, 0x38) fsmount(r1, 0x0, 0x80) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) (async) fstat(r0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000340)={[{@grpquota}, {@delalloc}, {@resuid}, {@block_validity}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5ec, &(0x7f00000011c0)="$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") (async) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x9, 0x1, 0xca, 0x533e, 0x7, 0x28000, 0x4, 0x0, 0x9d}) (async) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040844}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='bpf\x00', 0x1) 731.308857ms ago: executing program 2 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000980)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r3, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 655.285324ms ago: executing program 0 (id=1054): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 597.83972ms ago: executing program 0 (id=1055): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) 596.40216ms ago: executing program 2 (id=1056): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x54}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 524.371157ms ago: executing program 4 (id=1057): r0 = socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, 0xffffffffffffffff, 0xb}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 423.422908ms ago: executing program 5 (id=1058): r0 = socket(0x11, 0x3, 0x0) capset(0x0, &(0x7f0000001080)={0x5c, 0x200003, 0x4, 0x10, 0x0, 0xfffffff7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180), 0x14) sendmsg$netlink(r0, 0x0, 0x20040051) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0xc912bf5bae549f38) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/147, 0x93}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x158d617f513333b8}}]}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 291.136051ms ago: executing program 5 (id=1059): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)=@newtaction={0x13, 0x31, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r2, 0x8, 0x1, 0x7ff, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000200008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfbe, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0xa}, 0x10, 0x65db, r7, 0x9, &(0x7f0000000ac0)=[r4, r1, r1, r1, r1], &(0x7f0000000b40)=[{0x2, 0x5, 0x2, 0xe}, {0x5, 0x2, 0xa, 0xc}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x3, 0x7, 0xc}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x5, 0xd, 0x7}, {0x1, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x3, 0x9}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r5, r8, 0x27, 0x10, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000100)={0x7, 0x1, 0xe, 0x2}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x1f4, 0x11, 0x2, 0x801, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4}, [@generic="80af2240d07ee4c3ed01b2f2c679cef9870069f2ea9ec81529ae8eaedf697099bf3aa8b225fef118131c8c4951d8629413ae86b37a5c7ff8f0f7274a7c213f", @generic="fa65e7f696c796553ccb107394f0f58498815525fa9ec075422244fdce47ab403f346e98269a6f80e877725d8a610c4f0ef99b6887ec475cd65e46bb603fea08dc4eacaae64cd9e3f762510c22bbab5ba813aa3746c945377d8051c3a60f3592cb3830a2dfb2181bfbd5d10291a5ef1deb55574a54be8d78d4c82660c515db331fe9c299c9d0f8fbab038427ec30", @generic="76e5f58b9202fc34909621e9e729ee4de278d49f9d7cfd93a343564126b457d339cd3d4b1dcebe3c2428c90d501f59dec6308f600dc9176c07c5d82753c2c5c4eeb5108a4b087ca36807dac0200f11345a510f141257", @generic="1b7027a447a40b5e693447b5139ce0d9da37ec5c88e0bbfaa2a2de2f50a74e61997a97a48e0a7805197ee03874f8e80aee97f1d46a7098457a4154d13e805e15b33753401e300183a9bf75d3a447935afc3eff3fc7060890a5d2000000b6e1fe3af9a7b4ba22aa381a26047fa64251f707912a394ab122c8fbf689b3564dfe3bdcfeb0e84864ca6c965e86d7bc55a61c39bb12", @generic="ba864edeabc8894cb679d1e8370fe1535d9fe15e4eecd323d7936f4f2210a41819eaf755ed11d2e0b6"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x11dd722846665d7f}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x80}, 0x18) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r12, &(0x7f0000000000)=0xfe8e, 0x12) open(&(0x7f0000001ec0)='./file1/../file0\x00', 0x10d000, 0x142) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0x0, 0x0, 0x0, 0x0, 0xcfb, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 256.681634ms ago: executing program 4 (id=1060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 239.897526ms ago: executing program 0 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e00000013c8c3bc7f36f28e13808ac4808000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000"], 0x6c}}, 0x8000) pipe(&(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x365}]}) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 186.885851ms ago: executing program 4 (id=1062): setresgid(0xee00, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000002c0), 0x64, 0x50a, &(0x7f0000000940)="$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") 78.742392ms ago: executing program 0 (id=1063): r0 = syz_io_uring_setup(0x4a08, &(0x7f0000000100)={0x0, 0xa0f3, 0x2, 0x1, 0x58}, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x23, &(0x7f0000000040), 0x0) (fail_nth: 3) 0s ago: executing program 0 (id=1064): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): ted capacity change from 0 to 512 [ 81.009922][ T5246] loop3: detected capacity change from 0 to 128 [ 81.019167][ T5243] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 81.027217][ T5243] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.038572][ T5243] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.481: corrupted inode contents [ 81.058642][ T5243] EXT4-fs (loop5): Remounting filesystem read-only [ 81.065278][ T5243] EXT4-fs (loop5): 1 truncate cleaned up [ 81.071718][ T4933] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.082328][ T4933] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.100161][ T4933] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 81.120067][ T5243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.149589][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.211395][ T5252] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.223807][ T5256] tipc: Enabled bearer , priority 0 [ 81.250177][ T5256] syzkaller0: entered promiscuous mode [ 81.255715][ T5256] syzkaller0: entered allmulticast mode [ 81.284110][ T5255] tipc: Resetting bearer [ 81.293027][ T5255] tipc: Disabling bearer [ 81.325016][ T5262] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.339109][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 81.348032][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 81.357100][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 81.395294][ T5270] loop0: detected capacity change from 0 to 128 [ 81.431277][ T5275] FAULT_INJECTION: forcing a failure. [ 81.431277][ T5275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.444489][ T5275] CPU: 1 UID: 0 PID: 5275 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.444569][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.444584][ T5275] Call Trace: [ 81.444591][ T5275] [ 81.444600][ T5275] __dump_stack+0x1d/0x30 [ 81.444628][ T5275] dump_stack_lvl+0xe8/0x140 [ 81.444669][ T5275] dump_stack+0x15/0x1b [ 81.444688][ T5275] should_fail_ex+0x265/0x280 [ 81.444725][ T5275] should_fail+0xb/0x20 [ 81.444849][ T5275] should_fail_usercopy+0x1a/0x20 [ 81.444875][ T5275] _copy_from_iter+0xd2/0xe80 [ 81.444904][ T5275] ? __build_skb_around+0x1ab/0x200 [ 81.445018][ T5275] ? __alloc_skb+0x223/0x320 [ 81.445053][ T5275] netlink_sendmsg+0x471/0x6b0 [ 81.445077][ T5275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.445143][ T5275] __sock_sendmsg+0x145/0x180 [ 81.445197][ T5275] ____sys_sendmsg+0x31e/0x4e0 [ 81.445218][ T5275] ___sys_sendmsg+0x17b/0x1d0 [ 81.445294][ T5275] __x64_sys_sendmsg+0xd4/0x160 [ 81.445321][ T5275] x64_sys_call+0x191e/0x3000 [ 81.445343][ T5275] do_syscall_64+0xd2/0x200 [ 81.445363][ T5275] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.445398][ T5275] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.445504][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.445543][ T5275] RIP: 0033:0x7f052ed5f6c9 [ 81.445563][ T5275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.445614][ T5275] RSP: 002b:00007f052d7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.445637][ T5275] RAX: ffffffffffffffda RBX: 00007f052efb5fa0 RCX: 00007f052ed5f6c9 [ 81.445650][ T5275] RDX: 0000000000044000 RSI: 0000200000000500 RDI: 0000000000000003 [ 81.445661][ T5275] RBP: 00007f052d7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.445673][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.445712][ T5275] R13: 00007f052efb6038 R14: 00007f052efb5fa0 R15: 00007ffefcf513e8 [ 81.445742][ T5275] [ 81.733351][ T29] kauditd_printk_skb: 992 callbacks suppressed [ 81.733369][ T29] audit: type=1326 audit(1763324425.398:14110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.765319][ T29] audit: type=1326 audit(1763324425.408:14111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f052ed5df10 code=0x7ffc0000 [ 81.788841][ T29] audit: type=1326 audit(1763324425.408:14112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f052ed5df10 code=0x7ffc0000 [ 81.812261][ T29] audit: type=1326 audit(1763324425.408:14113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.835802][ T29] audit: type=1326 audit(1763324425.408:14114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.859464][ T29] audit: type=1326 audit(1763324425.408:14115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.883322][ T29] audit: type=1326 audit(1763324425.408:14116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.902113][ T5292] tipc: Enabled bearer , priority 0 [ 81.906863][ T29] audit: type=1326 audit(1763324425.408:14117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.914723][ T5292] syzkaller0: entered promiscuous mode [ 81.937024][ T29] audit: type=1326 audit(1763324425.408:14118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.942500][ T5292] syzkaller0: entered allmulticast mode [ 81.967212][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.971606][ T29] audit: type=1326 audit(1763324425.408:14119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 81.981288][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.012308][ T5291] tipc: Resetting bearer [ 82.029794][ T5291] tipc: Disabling bearer [ 82.135622][ T5296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.815771][ T5311] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 82.849387][ T5311] loop4: detected capacity change from 0 to 1024 [ 82.856243][ T5311] EXT4-fs: Ignoring removed bh option [ 82.916474][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 83.369717][ T5320] loop3: detected capacity change from 0 to 512 [ 83.379467][ T5320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.478863][ T5320] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.511: bad orphan inode 131083 [ 83.490337][ T5320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.398373][ T5334] tipc: Enabled bearer , priority 0 [ 84.426951][ T5334] syzkaller0: entered promiscuous mode [ 84.432502][ T5334] syzkaller0: entered allmulticast mode [ 84.500591][ T5333] tipc: Resetting bearer [ 84.520099][ T5333] tipc: Disabling bearer [ 84.533448][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.543520][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 84.564544][ T5345] loop4: detected capacity change from 0 to 128 [ 84.573611][ T5345] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.586407][ T5345] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.630438][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.701033][ T5362] loop4: detected capacity change from 0 to 512 [ 84.709340][ T5362] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 84.717947][ T5362] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.525: iget: bad i_size value: 12154757448730 [ 84.731116][ T5362] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.525: couldn't read orphan inode 13 (err -117) [ 84.743557][ T5365] loop2: detected capacity change from 0 to 164 [ 84.744318][ T5362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.768950][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 84.769690][ T5362] ip6t_srh: unknown srh match flags 4000 [ 84.777810][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 84.793023][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 84.868033][ T5351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.877968][ T5351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.878017][ T5369] loop5: detected capacity change from 0 to 164 [ 84.983849][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.000655][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 85.197166][ T5380] loop4: detected capacity change from 0 to 164 [ 85.354756][ T5382] loop2: detected capacity change from 0 to 128 [ 85.431467][ T5384] loop0: detected capacity change from 0 to 512 [ 85.438668][ T5384] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.453909][ T5385] syz.2.528: attempt to access beyond end of device [ 85.453909][ T5385] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 85.456740][ T5384] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.529: bad orphan inode 131083 [ 85.479149][ T5384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.757393][ T5389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.768120][ T5389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.790978][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.532'. [ 85.799923][ T5393] netlink: 2 bytes leftover after parsing attributes in process `syz.5.532'. [ 85.852214][ T5396] tipc: Enabled bearer , priority 0 [ 85.859417][ T5396] syzkaller0: entered promiscuous mode [ 85.864950][ T5396] syzkaller0: entered allmulticast mode [ 85.874706][ T5395] tipc: Resetting bearer [ 85.883288][ T5395] tipc: Disabling bearer [ 85.990540][ T5404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.008917][ T5404] loop5: detected capacity change from 0 to 512 [ 86.028969][ T5404] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 86.037069][ T5404] EXT4-fs (loop5): orphan cleanup on readonly fs [ 86.045492][ T5404] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.537: corrupted inode contents [ 86.057554][ T5404] EXT4-fs (loop5): Remounting filesystem read-only [ 86.064294][ T5404] EXT4-fs (loop5): 1 truncate cleaned up [ 86.070235][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.080924][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.091878][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 86.102676][ T5404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.116997][ T5404] netlink: 112 bytes leftover after parsing attributes in process `syz.5.537'. [ 86.135098][ T5414] loop4: detected capacity change from 0 to 512 [ 86.142539][ T5414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.153406][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.155098][ T5414] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.541: bad orphan inode 131083 [ 86.174116][ T5414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.211663][ T5419] loop5: detected capacity change from 0 to 512 [ 86.219218][ T5419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.230558][ T5419] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.543: bad orphan inode 131083 [ 86.241669][ T5419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.314204][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.333797][ T5422] xt_connbytes: Forcing CT accounting to be enabled [ 86.374222][ T5425] tipc: Enabled bearer , priority 0 [ 86.387102][ T5422] Cannot find set identified by id 0 to match [ 86.394262][ T5428] xt_connbytes: Forcing CT accounting to be enabled [ 86.424528][ T5425] syzkaller0: entered promiscuous mode [ 86.430081][ T5425] syzkaller0: entered allmulticast mode [ 86.437277][ T5428] Cannot find set identified by id 0 to match [ 86.474561][ T5435] loop2: detected capacity change from 0 to 512 [ 86.495840][ T5435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.529595][ T5424] tipc: Resetting bearer [ 86.536289][ T5435] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.544: bad orphan inode 131083 [ 86.560171][ T5435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.603521][ T5424] tipc: Disabling bearer [ 86.611385][ T5437] loop0: detected capacity change from 0 to 164 [ 86.740457][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 86.740475][ T29] audit: type=1326 audit(1763324430.408:14910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc961386567 code=0x7ffc0000 [ 86.760664][ T5439] xt_connbytes: Forcing CT accounting to be enabled [ 86.770178][ T29] audit: type=1326 audit(1763324430.408:14911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc96132b789 code=0x7ffc0000 [ 86.777019][ T5439] Cannot find set identified by id 0 to match [ 86.800163][ T29] audit: type=1326 audit(1763324430.408:14912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 86.829932][ T29] audit: type=1326 audit(1763324430.498:14913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc961386567 code=0x7ffc0000 [ 86.853388][ T29] audit: type=1326 audit(1763324430.498:14914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc96132b789 code=0x7ffc0000 [ 86.876866][ T29] audit: type=1326 audit(1763324430.498:14915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 86.950521][ T5444] loop3: detected capacity change from 0 to 128 [ 86.969297][ T29] audit: type=1326 audit(1763324430.578:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc961386567 code=0x7ffc0000 [ 86.992812][ T29] audit: type=1326 audit(1763324430.578:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc96132b789 code=0x7ffc0000 [ 87.016576][ T29] audit: type=1326 audit(1763324430.578:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 87.040502][ T29] audit: type=1326 audit(1763324430.588:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc961386567 code=0x7ffc0000 [ 87.094655][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.184267][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.241313][ T5456] loop3: detected capacity change from 0 to 128 [ 87.284159][ T5458] loop0: detected capacity change from 0 to 1024 [ 87.318512][ T5458] rdma_rxe: rxe_newlink: failed to add lo [ 87.338325][ T5460] syz.3.552: attempt to access beyond end of device [ 87.338325][ T5460] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 87.360031][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.379027][ T5448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.381007][ T5466] loop2: detected capacity change from 0 to 128 [ 87.394498][ T5448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.418994][ T5464] loop5: detected capacity change from 0 to 164 [ 87.429331][ T5469] loop0: detected capacity change from 0 to 512 [ 87.441216][ T5469] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.448419][ T5469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.557: bg 0: block 248: padding at end of block bitmap is not set [ 87.463184][ T5469] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.557: Failed to acquire dquot type 1 [ 87.474922][ T5469] EXT4-fs (loop0): 1 truncate cleaned up [ 87.481559][ T5469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.486382][ T5472] syz.2.554: attempt to access beyond end of device [ 87.486382][ T5472] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 87.508267][ T5469] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 87.528551][ T5469] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.537222][ T5469] ext4 filesystem being remounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.975278][ T5475] serio: Serial port ptm0 [ 88.069240][ T5478] loop5: detected capacity change from 0 to 512 [ 88.077395][ T5478] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.084788][ T5469] syz.0.557 (5469) used greatest stack depth: 9200 bytes left [ 88.090902][ T5478] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.559: bad orphan inode 131083 [ 88.106378][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.106401][ T5478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.144461][ T5481] loop0: detected capacity change from 0 to 128 [ 88.238263][ T5490] Cannot find set identified by id 0 to match [ 88.545295][ T5507] loop0: detected capacity change from 0 to 128 [ 88.582504][ T5509] loop4: detected capacity change from 0 to 512 [ 88.591059][ T5509] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.598388][ T5509] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.572: bg 0: block 248: padding at end of block bitmap is not set [ 88.615005][ T5509] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.572: Failed to acquire dquot type 1 [ 88.627290][ T5509] EXT4-fs (loop4): 1 truncate cleaned up [ 88.636331][ T5511] syz.0.571: attempt to access beyond end of device [ 88.636331][ T5511] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 88.638701][ T5509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.664006][ T5507] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 88.672434][ T5507] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 88.692945][ T5509] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 88.708345][ T5509] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.716814][ T5509] ext4 filesystem being remounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.808240][ T5515] loop0: detected capacity change from 0 to 128 [ 88.856688][ T5519] loop0: detected capacity change from 0 to 512 [ 88.864209][ T5519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.875265][ T5519] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.575: bad orphan inode 131083 [ 88.886377][ T5519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.913723][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.951833][ T5524] loop5: detected capacity change from 0 to 1024 [ 88.974505][ T5524] rdma_rxe: rxe_newlink: failed to add lo [ 89.252661][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.336488][ T5538] loop2: detected capacity change from 0 to 512 [ 89.345102][ T5538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.357555][ T5538] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.582: bad orphan inode 131083 [ 89.369920][ T5538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.429828][ T5549] FAULT_INJECTION: forcing a failure. [ 89.429828][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 89.442549][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.5.587 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.442577][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.442592][ T5549] Call Trace: [ 89.442599][ T5549] [ 89.442609][ T5549] __dump_stack+0x1d/0x30 [ 89.442685][ T5549] dump_stack_lvl+0xe8/0x140 [ 89.442711][ T5549] dump_stack+0x15/0x1b [ 89.442733][ T5549] should_fail_ex+0x265/0x280 [ 89.442845][ T5549] ? get_mountpoint+0x17e/0x370 [ 89.442879][ T5549] should_failslab+0x8c/0xb0 [ 89.442911][ T5549] __kmalloc_cache_noprof+0x4c/0x4a0 [ 89.442977][ T5549] get_mountpoint+0x17e/0x370 [ 89.443014][ T5549] do_lock_mount+0x3a5/0x640 [ 89.443057][ T5549] do_loopback+0x182/0x2a0 [ 89.443089][ T5549] path_mount+0x3dc/0xb70 [ 89.443113][ T5549] ? user_path_at+0x109/0x130 [ 89.443134][ T5549] __se_sys_mount+0x28c/0x2e0 [ 89.443230][ T5549] ? fput+0x8f/0xc0 [ 89.443250][ T5549] __x64_sys_mount+0x67/0x80 [ 89.443276][ T5549] x64_sys_call+0x2b51/0x3000 [ 89.443299][ T5549] do_syscall_64+0xd2/0x200 [ 89.443320][ T5549] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.443363][ T5549] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.443401][ T5549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.443423][ T5549] RIP: 0033:0x7f5bc0d0f6c9 [ 89.443439][ T5549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.443457][ T5549] RSP: 002b:00007f5bbf76f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.443495][ T5549] RAX: ffffffffffffffda RBX: 00007f5bc0f65fa0 RCX: 00007f5bc0d0f6c9 [ 89.443507][ T5549] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 89.443520][ T5549] RBP: 00007f5bbf76f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.443532][ T5549] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 89.443602][ T5549] R13: 00007f5bc0f66038 R14: 00007f5bc0f65fa0 R15: 00007ffd929525f8 [ 89.443671][ T5549] [ 89.695038][ T5560] syzkaller0: entered promiscuous mode [ 89.700960][ T5560] syzkaller0: entered allmulticast mode [ 89.770458][ T5563] loop4: detected capacity change from 0 to 512 [ 89.778837][ T5563] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 89.787173][ T5563] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.590: iget: bad i_size value: 12154757448730 [ 89.801593][ T5563] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.590: couldn't read orphan inode 13 (err -117) [ 89.815297][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.815336][ T5563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.842210][ T5563] ip6t_srh: unknown srh match flags 4000 [ 89.868500][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.905558][ T5571] syzkaller0: entered promiscuous mode [ 89.911433][ T5571] syzkaller0: entered allmulticast mode [ 89.921389][ T5573] loop4: detected capacity change from 0 to 2048 [ 89.984383][ T5573] Alternate GPT is invalid, using primary GPT. [ 89.990862][ T5573] loop4: p2 p3 p7 [ 89.996932][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.593'. [ 90.067774][ T5579] FAULT_INJECTION: forcing a failure. [ 90.067774][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 90.080545][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz.5.595 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.080579][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.080614][ T5579] Call Trace: [ 90.080619][ T5579] [ 90.080674][ T5579] __dump_stack+0x1d/0x30 [ 90.080696][ T5579] dump_stack_lvl+0xe8/0x140 [ 90.080714][ T5579] dump_stack+0x15/0x1b [ 90.080729][ T5579] should_fail_ex+0x265/0x280 [ 90.080760][ T5579] should_failslab+0x8c/0xb0 [ 90.080832][ T5579] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 90.080887][ T5579] ? alloc_vmap_area+0x236/0xe80 [ 90.080914][ T5579] alloc_vmap_area+0x236/0xe80 [ 90.081022][ T5579] ? should_failslab+0x8c/0xb0 [ 90.081047][ T5579] ? __kmalloc_cache_node_noprof+0x2b2/0x4a0 [ 90.081077][ T5579] __get_vm_area_node+0x173/0x1d0 [ 90.081107][ T5579] __vmalloc_node_range_noprof+0x28c/0xed0 [ 90.081167][ T5579] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.081197][ T5579] ? kernel_text_address+0x94/0xb0 [ 90.081296][ T5579] ? unwind_get_return_address+0x16/0x40 [ 90.081330][ T5579] ? perf_callchain_kernel+0x2e9/0x350 [ 90.081377][ T5579] ? cred_has_capability+0x210/0x280 [ 90.081413][ T5579] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.081445][ T5579] __vmalloc_noprof+0x83/0xc0 [ 90.081553][ T5579] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.081590][ T5579] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.081629][ T5579] ? bpf_prog_alloc+0x2a/0x150 [ 90.081694][ T5579] bpf_prog_alloc+0x3c/0x150 [ 90.081731][ T5579] bpf_prog_load+0x506/0x1100 [ 90.081758][ T5579] ? security_bpf+0x2b/0x90 [ 90.081884][ T5579] __sys_bpf+0x469/0x7c0 [ 90.081908][ T5579] __x64_sys_bpf+0x41/0x50 [ 90.082080][ T5579] x64_sys_call+0x2aee/0x3000 [ 90.082120][ T5579] do_syscall_64+0xd2/0x200 [ 90.082138][ T5579] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.082162][ T5579] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.082210][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.082229][ T5579] RIP: 0033:0x7f5bc0d0f6c9 [ 90.082306][ T5579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.082392][ T5579] RSP: 002b:00007f5bbf76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.082409][ T5579] RAX: ffffffffffffffda RBX: 00007f5bc0f65fa0 RCX: 00007f5bc0d0f6c9 [ 90.082421][ T5579] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 90.082497][ T5579] RBP: 00007f5bbf76f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.082508][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.082518][ T5579] R13: 00007f5bc0f66038 R14: 00007f5bc0f65fa0 R15: 00007ffd929525f8 [ 90.082536][ T5579] [ 90.082545][ T5579] syz.5.595: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 90.363562][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz.5.595 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.363586][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.363654][ T5579] Call Trace: [ 90.363662][ T5579] [ 90.363669][ T5579] __dump_stack+0x1d/0x30 [ 90.363758][ T5579] dump_stack_lvl+0xe8/0x140 [ 90.363776][ T5579] dump_stack+0x15/0x1b [ 90.363792][ T5579] warn_alloc+0x12b/0x1a0 [ 90.363825][ T5579] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 90.363886][ T5579] ? kernel_text_address+0x94/0xb0 [ 90.363968][ T5579] ? unwind_get_return_address+0x16/0x40 [ 90.364061][ T5579] ? perf_callchain_kernel+0x2e9/0x350 [ 90.364094][ T5579] ? cred_has_capability+0x210/0x280 [ 90.364153][ T5579] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.364184][ T5579] __vmalloc_noprof+0x83/0xc0 [ 90.364211][ T5579] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.364318][ T5579] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 90.364347][ T5579] ? bpf_prog_alloc+0x2a/0x150 [ 90.364376][ T5579] bpf_prog_alloc+0x3c/0x150 [ 90.364447][ T5579] bpf_prog_load+0x506/0x1100 [ 90.364498][ T5579] ? security_bpf+0x2b/0x90 [ 90.364522][ T5579] __sys_bpf+0x469/0x7c0 [ 90.364546][ T5579] __x64_sys_bpf+0x41/0x50 [ 90.364596][ T5579] x64_sys_call+0x2aee/0x3000 [ 90.364615][ T5579] do_syscall_64+0xd2/0x200 [ 90.364633][ T5579] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.364659][ T5579] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.364695][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.364714][ T5579] RIP: 0033:0x7f5bc0d0f6c9 [ 90.364727][ T5579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.364743][ T5579] RSP: 002b:00007f5bbf76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.364759][ T5579] RAX: ffffffffffffffda RBX: 00007f5bc0f65fa0 RCX: 00007f5bc0d0f6c9 [ 90.364770][ T5579] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 90.364845][ T5579] RBP: 00007f5bbf76f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.364855][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.364866][ T5579] R13: 00007f5bc0f66038 R14: 00007f5bc0f65fa0 R15: 00007ffd929525f8 [ 90.364883][ T5579] [ 90.364888][ T5579] Mem-Info: [ 90.590842][ T5579] active_anon:4305 inactive_anon:24 isolated_anon:0 [ 90.590842][ T5579] active_file:21260 inactive_file:2268 isolated_file:0 [ 90.590842][ T5579] unevictable:0 dirty:330 writeback:0 [ 90.590842][ T5579] slab_reclaimable:3388 slab_unreclaimable:58044 [ 90.590842][ T5579] mapped:30214 shmem:309 pagetables:1190 [ 90.590842][ T5579] sec_pagetables:0 bounce:0 [ 90.590842][ T5579] kernel_misc_reclaimable:0 [ 90.590842][ T5579] free:1835089 free_pcp:17691 free_cma:0 [ 90.635867][ T5579] Node 0 active_anon:17220kB inactive_anon:96kB active_file:85040kB inactive_file:9072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120856kB dirty:1320kB writeback:0kB shmem:1236kB kernel_stack:3888kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 90.663806][ T5579] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.694285][ T5579] lowmem_reserve[]: 0 2881 7859 7859 [ 90.699872][ T5579] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 90.731336][ T5579] lowmem_reserve[]: 0 0 4978 4978 [ 90.736466][ T5579] Node 0 Normal free:4383592kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17436kB inactive_anon:96kB active_file:85040kB inactive_file:9040kB unevictable:0kB writepending:1328kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:61356kB local_pcp:20468kB free_cma:0kB [ 90.769817][ T5579] lowmem_reserve[]: 0 0 0 0 [ 90.774409][ T5579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.787302][ T5579] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 90.803435][ T5579] Node 0 Normal: 836*4kB (UME) 375*8kB (UME) 350*16kB (UME) 281*32kB (UME) 248*64kB (UME) 170*128kB (UME) 127*256kB (UME) 62*512kB (UME) 41*1024kB (UM) 22*2048kB (UM) 1019*4096kB (UM) = 4383688kB [ 90.822803][ T5579] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 90.832188][ T5579] 23862 total pagecache pages [ 90.836856][ T5579] 51 pages in swap cache [ 90.841110][ T5579] Free swap = 124792kB [ 90.845259][ T5579] Total swap = 124996kB [ 90.849684][ T5579] 2097051 pages RAM [ 90.853522][ T5579] 0 pages HighMem/MovableOnly [ 90.858389][ T5579] 81087 pages reserved [ 90.906152][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.170729][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.179239][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.201241][ T5608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.209847][ T5608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.529578][ T5616] loop0: detected capacity change from 0 to 512 [ 91.533203][ T5618] loop3: detected capacity change from 0 to 128 [ 91.543178][ T5616] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.550251][ T5616] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.608: bg 0: block 248: padding at end of block bitmap is not set [ 91.564836][ T5616] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.608: Failed to acquire dquot type 1 [ 91.577973][ T5616] EXT4-fs (loop0): 1 truncate cleaned up [ 91.584684][ T5616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.610574][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.634715][ T5618] gtp: attempt to access beyond end of device [ 91.634715][ T5618] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 91.785512][ T5639] loop4: detected capacity change from 0 to 128 [ 91.822382][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 91.822400][ T29] audit: type=1326 audit(1763324435.458:15697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 91.852086][ T29] audit: type=1326 audit(1763324435.458:15698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 91.875638][ T29] audit: type=1326 audit(1763324435.458:15699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 91.899024][ T29] audit: type=1326 audit(1763324435.458:15700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 91.922468][ T29] audit: type=1326 audit(1763324435.458:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 91.946035][ T29] audit: type=1326 audit(1763324435.458:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 91.973853][ T5643] loop0: detected capacity change from 0 to 164 [ 91.983739][ T29] audit: type=1326 audit(1763324435.588:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc961386567 code=0x7ffc0000 [ 92.007899][ T29] audit: type=1326 audit(1763324435.588:15704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc96132b789 code=0x7ffc0000 [ 92.031396][ T29] audit: type=1326 audit(1763324435.588:15705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc96138f6c9 code=0x7ffc0000 [ 92.055647][ T29] audit: type=1326 audit(1763324435.588:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc961386567 code=0x7ffc0000 [ 92.588735][ T5659] loop0: detected capacity change from 0 to 128 [ 92.599019][ T5661] loop5: detected capacity change from 0 to 128 [ 92.669473][ T5673] loop2: detected capacity change from 0 to 128 [ 92.689397][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 92.698925][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 92.811967][ T5681] loop4: detected capacity change from 0 to 164 [ 92.831884][ T5684] syzkaller0: entered promiscuous mode [ 92.837426][ T5684] syzkaller0: entered allmulticast mode [ 92.921407][ T5691] loop3: detected capacity change from 0 to 512 [ 92.929060][ T5691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.941083][ T5691] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.634: bad orphan inode 131083 [ 92.952596][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.506310][ T5698] loop0: detected capacity change from 0 to 512 [ 93.514643][ T5698] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 93.524466][ T5698] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.635: iget: bad i_size value: 12154757448730 [ 93.630000][ T5698] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.635: couldn't read orphan inode 13 (err -117) [ 93.656865][ T5698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.683001][ T5709] loop5: detected capacity change from 0 to 128 [ 93.699838][ T5713] loop2: detected capacity change from 0 to 128 [ 93.712938][ T5698] ip6t_srh: unknown srh match flags 4000 [ 93.727395][ T5715] loop5: detected capacity change from 0 to 1024 [ 93.740918][ T5717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.753211][ T5715] EXT4-fs: Ignoring removed orlov option [ 93.848492][ T5387] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 93.894859][ T5715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.934209][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.945220][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 93.954059][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 93.970110][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.984605][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 94.143423][ T5724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.230700][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.643'. [ 94.310257][ T5727] loop0: detected capacity change from 0 to 512 [ 94.318882][ T5727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.330407][ T5727] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.646: bad orphan inode 131083 [ 94.342554][ T5727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.425491][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.468513][ T5739] loop5: detected capacity change from 0 to 512 [ 94.477372][ T5740] loop3: detected capacity change from 0 to 164 [ 94.528482][ T5739] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.536226][ T5739] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.649: bg 0: block 248: padding at end of block bitmap is not set [ 94.572833][ T5739] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.649: Failed to acquire dquot type 1 [ 94.587752][ T5739] EXT4-fs (loop5): 1 truncate cleaned up [ 94.789244][ T5766] mmap: syz.2.653 (5766) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.191921][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 95.318122][ T5843] loop3: detected capacity change from 0 to 512 [ 95.331262][ T5843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.331262][ T5837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.338384][ T5843] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.658: bg 0: block 248: padding at end of block bitmap is not set [ 95.368370][ T5843] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.658: Failed to acquire dquot type 1 [ 95.520349][ T5843] EXT4-fs (loop3): 1 truncate cleaned up [ 95.573594][ T5851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.606287][ T5837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.731957][ T5837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.857084][ T5837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.902642][ T5863] loop3: detected capacity change from 0 to 512 [ 95.909857][ T5863] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.924964][ T5864] loop2: detected capacity change from 0 to 128 [ 95.934374][ T5863] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.661: bad orphan inode 131083 [ 95.983670][ T4933] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.005214][ T4933] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.029332][ T4933] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.064722][ T4933] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.184764][ T5881] loop2: detected capacity change from 0 to 164 [ 96.471230][ T5919] loop4: detected capacity change from 0 to 512 [ 96.489096][ T5919] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.496406][ T5919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.667: bg 0: block 248: padding at end of block bitmap is not set [ 96.513153][ T5919] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.667: Failed to acquire dquot type 1 [ 96.526465][ T5919] EXT4-fs (loop4): 1 truncate cleaned up [ 96.767586][ T5929] loop3: detected capacity change from 0 to 128 [ 96.830972][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 96.831029][ T29] audit: type=1326 audit(1763324440.498:16568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febac516567 code=0x7ffc0000 [ 96.846213][ T5930] syz.3.669: attempt to access beyond end of device [ 96.846213][ T5930] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 96.862039][ T29] audit: type=1326 audit(1763324440.498:16569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febac4bb789 code=0x7ffc0000 [ 96.898137][ T29] audit: type=1326 audit(1763324440.498:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 96.922284][ T29] audit: type=1326 audit(1763324440.498:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febac516567 code=0x7ffc0000 [ 96.946528][ T29] audit: type=1326 audit(1763324440.498:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febac4bb789 code=0x7ffc0000 [ 96.970854][ T29] audit: type=1326 audit(1763324440.498:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 96.995073][ T29] audit: type=1326 audit(1763324440.548:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febac516567 code=0x7ffc0000 [ 97.019272][ T29] audit: type=1326 audit(1763324440.548:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febac4bb789 code=0x7ffc0000 [ 97.043351][ T29] audit: type=1326 audit(1763324440.548:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 97.067623][ T29] audit: type=1326 audit(1763324440.548:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febac516567 code=0x7ffc0000 [ 97.118721][ T5938] loop0: detected capacity change from 0 to 512 [ 97.130364][ T5938] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.163105][ T5938] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.673: bg 0: block 248: padding at end of block bitmap is not set [ 97.178324][ T5938] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.673: Failed to acquire dquot type 1 [ 97.190363][ T5938] EXT4-fs (loop0): 1 truncate cleaned up [ 97.211077][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 97.220744][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 97.229894][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 97.242494][ T5946] tipc: Enabled bearer , priority 0 [ 97.251486][ T5946] tipc: Resetting bearer [ 97.258990][ T5944] tipc: Disabling bearer [ 97.404787][ T5951] loop4: detected capacity change from 0 to 512 [ 97.433684][ T5951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.477979][ T5951] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.678: bad orphan inode 131083 [ 97.983913][ T5960] loop3: detected capacity change from 0 to 164 [ 97.995378][ T5968] loop0: detected capacity change from 0 to 128 [ 98.045678][ T5968] gtp: attempt to access beyond end of device [ 98.045678][ T5968] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 98.141789][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 98.820210][ T6084] loop0: detected capacity change from 0 to 128 [ 98.905427][ T6094] loop3: detected capacity change from 0 to 1024 [ 98.924850][ T6094] EXT4-fs: Ignoring removed orlov option [ 98.930848][ T6098] loop0: detected capacity change from 0 to 512 [ 98.944393][ T6098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.970083][ T6098] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.694: bad orphan inode 131083 [ 99.102192][ T6116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.138987][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 99.262534][ T6134] loop2: detected capacity change from 0 to 1024 [ 99.282254][ T6134] EXT4-fs: Ignoring removed oldalloc option [ 99.288333][ T6134] EXT4-fs: Ignoring removed bh option [ 99.477658][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 99.583340][ T6129] lo speed is unknown, defaulting to 1000 [ 99.607353][ T6129] lo speed is unknown, defaulting to 1000 [ 99.773940][ T6149] loop3: detected capacity change from 0 to 164 [ 100.025765][ T6167] loop2: detected capacity change from 0 to 512 [ 100.036248][ T6167] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 100.067013][ T6167] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.705: iget: bad i_size value: 12154757448730 [ 100.089583][ T6167] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.705: couldn't read orphan inode 13 (err -117) [ 100.127430][ T6176] loop5: detected capacity change from 0 to 128 [ 100.201984][ T6180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.207436][ T6184] loop5: detected capacity change from 0 to 2048 [ 100.218183][ T6180] loop4: detected capacity change from 0 to 512 [ 100.228901][ T6180] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 100.232164][ T6185] syzkaller0: entered promiscuous mode [ 100.237152][ T6180] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.243380][ T6185] syzkaller0: entered allmulticast mode [ 100.250617][ T6180] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.709: corrupted inode contents [ 100.266371][ T6180] EXT4-fs (loop4): Remounting filesystem read-only [ 100.272993][ T6180] EXT4-fs (loop4): 1 truncate cleaned up [ 100.279042][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.281369][ T6184] Alternate GPT is invalid, using primary GPT. [ 100.289632][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.289669][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 100.303988][ T6180] netlink: 112 bytes leftover after parsing attributes in process `syz.4.709'. [ 100.307550][ T6184] loop5: p2 p3 p7 [ 100.347480][ T6189] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.383231][ T6191] loop5: detected capacity change from 0 to 512 [ 100.392085][ T6191] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 100.401113][ T6191] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.715: iget: bad i_size value: 12154757448730 [ 100.414073][ T6191] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.715: couldn't read orphan inode 13 (err -117) [ 100.618867][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.627384][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.640516][ T6208] loop3: detected capacity change from 0 to 128 [ 101.477427][ T6216] loop3: detected capacity change from 0 to 512 [ 101.485473][ T6216] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.492562][ T6216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.725: bg 0: block 248: padding at end of block bitmap is not set [ 101.507364][ T6216] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.725: Failed to acquire dquot type 1 [ 101.520950][ T6216] EXT4-fs (loop3): 1 truncate cleaned up [ 101.567340][ T6220] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.619704][ T6224] loop0: detected capacity change from 0 to 512 [ 101.628270][ T6224] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 101.636632][ T6224] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.728: iget: bad i_size value: 12154757448730 [ 101.649511][ T6224] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.728: couldn't read orphan inode 13 (err -117) [ 101.671606][ T6233] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.711886][ T6236] loop0: detected capacity change from 0 to 128 [ 101.735479][ T6228] loop3: detected capacity change from 0 to 164 [ 101.773662][ T6233] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.820150][ T6233] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.852516][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 101.852534][ T29] audit: type=1326 audit(1763324445.518:17263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 101.882232][ T29] audit: type=1326 audit(1763324445.518:17264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 101.905609][ T29] audit: type=1326 audit(1763324445.518:17265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 101.935337][ T29] audit: type=1326 audit(1763324445.528:17266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 101.935663][ T6257] loop4: detected capacity change from 0 to 512 [ 101.959927][ T29] audit: type=1326 audit(1763324445.528:17267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 101.989449][ T29] audit: type=1326 audit(1763324445.528:17268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 102.002370][ T6257] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.013818][ T29] audit: type=1326 audit(1763324445.548:17269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 102.021043][ T6257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.734: bg 0: block 248: padding at end of block bitmap is not set [ 102.043631][ T29] audit: type=1326 audit(1763324445.548:17270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 102.081153][ T29] audit: type=1326 audit(1763324445.548:17271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 102.085313][ T6257] Quota error (device loop4): write_blk: dquota write failed [ 102.112097][ T6257] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.734: Failed to acquire dquot type 1 [ 102.117428][ T6233] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.124396][ T6257] EXT4-fs (loop4): 1 truncate cleaned up [ 102.177726][ T4933] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.189986][ T4933] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.202328][ T4933] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.219172][ T4933] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.497517][ T6315] loop3: detected capacity change from 0 to 1024 [ 102.564988][ T6327] sz1: rxe_newlink: already configured on lo [ 102.609247][ T6334] loop0: detected capacity change from 0 to 512 [ 102.617554][ T6334] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.625021][ T6334] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.737: bg 0: block 248: padding at end of block bitmap is not set [ 102.640005][ T6334] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.737: Failed to acquire dquot type 1 [ 102.652118][ T6334] EXT4-fs (loop0): 1 truncate cleaned up [ 102.731463][ T6350] loop0: detected capacity change from 0 to 128 [ 102.808319][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 102.817268][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 102.828914][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 102.850519][ T6368] loop4: detected capacity change from 0 to 512 [ 102.868613][ T6368] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 102.876797][ T6368] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.743: iget: bad i_size value: 12154757448730 [ 102.887280][ T6375] loop0: detected capacity change from 0 to 512 [ 102.889925][ T6368] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.743: couldn't read orphan inode 13 (err -117) [ 102.901245][ T6375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.929186][ T6375] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.745: bad orphan inode 131083 [ 102.956008][ T6386] tipc: Enabling of bearer rejected, failed to enable media [ 103.186022][ T6415] loop4: detected capacity change from 0 to 512 [ 103.209870][ T6415] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.217476][ T6415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.748: bg 0: block 248: padding at end of block bitmap is not set [ 103.233395][ T6415] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.748: Failed to acquire dquot type 1 [ 103.245524][ T6415] EXT4-fs (loop4): 1 truncate cleaned up [ 103.271608][ T6422] loop3: detected capacity change from 0 to 512 [ 103.279672][ T6422] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.286666][ T6422] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.750: bg 0: block 248: padding at end of block bitmap is not set [ 103.301270][ T6422] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.750: Failed to acquire dquot type 1 [ 103.313700][ T6422] EXT4-fs (loop3): 1 truncate cleaned up [ 103.684383][ T6432] loop2: detected capacity change from 0 to 128 [ 103.731635][ T6436] loop0: detected capacity change from 0 to 128 [ 103.735165][ T6438] loop2: detected capacity change from 0 to 128 [ 103.772937][ T6436] gtp: attempt to access beyond end of device [ 103.772937][ T6436] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 103.774708][ T6438] gtp: attempt to access beyond end of device [ 103.774708][ T6438] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 103.791469][ T6436] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 103.806960][ T6436] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 103.826256][ T6440] tipc: Enabling of bearer rejected, failed to enable media [ 103.853909][ T6438] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 103.862279][ T6438] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 103.964616][ T6461] loop0: detected capacity change from 0 to 512 [ 103.974568][ T6461] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.981750][ T6461] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.762: bg 0: block 248: padding at end of block bitmap is not set [ 103.997126][ T6461] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.762: Failed to acquire dquot type 1 [ 104.009261][ T6461] EXT4-fs (loop0): 1 truncate cleaned up [ 104.015718][ T6467] loop4: detected capacity change from 0 to 164 [ 104.041241][ T6469] loop0: detected capacity change from 0 to 128 [ 104.058696][ T6471] loop5: detected capacity change from 0 to 512 [ 104.066001][ T6471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.077478][ T6471] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.767: bad orphan inode 131083 [ 104.231873][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.243756][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.254921][ T6478] loop3: detected capacity change from 0 to 512 [ 104.263534][ T6478] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.270450][ T6478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.769: bg 0: block 248: padding at end of block bitmap is not set [ 104.286444][ T6478] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.769: Failed to acquire dquot type 1 [ 104.298340][ T6478] EXT4-fs (loop3): 1 truncate cleaned up [ 104.310574][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.319201][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.696121][ T6481] tipc: Enabling of bearer rejected, failed to enable media [ 104.776190][ T6489] loop4: detected capacity change from 0 to 128 [ 104.785635][ T6491] FAULT_INJECTION: forcing a failure. [ 104.785635][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 104.798354][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz.2.772 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.798384][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.798464][ T6491] Call Trace: [ 104.798472][ T6491] [ 104.798481][ T6491] __dump_stack+0x1d/0x30 [ 104.798508][ T6491] dump_stack_lvl+0xe8/0x140 [ 104.798612][ T6491] dump_stack+0x15/0x1b [ 104.798634][ T6491] should_fail_ex+0x265/0x280 [ 104.798683][ T6491] should_failslab+0x8c/0xb0 [ 104.798743][ T6491] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 104.798776][ T6491] ? __alloc_skb+0x101/0x320 [ 104.798955][ T6491] __alloc_skb+0x101/0x320 [ 104.798987][ T6491] alloc_skb_with_frags+0x7d/0x470 [ 104.799026][ T6491] ? __rcu_read_unlock+0x34/0x70 [ 104.799130][ T6491] ? ref_tracker_alloc+0x1f2/0x2f0 [ 104.799165][ T6491] sock_alloc_send_pskb+0x430/0x4e0 [ 104.799196][ T6491] ? packet_sendmsg+0x2125/0x31f0 [ 104.799238][ T6491] packet_sendmsg+0x222b/0x31f0 [ 104.799339][ T6491] ? avc_has_perm+0xf7/0x180 [ 104.799365][ T6491] ? selinux_socket_sendmsg+0x175/0x1b0 [ 104.799400][ T6491] ? __pfx_packet_sendmsg+0x10/0x10 [ 104.799435][ T6491] __sock_sendmsg+0x145/0x180 [ 104.799466][ T6491] __sys_sendto+0x268/0x330 [ 104.799543][ T6491] __x64_sys_sendto+0x76/0x90 [ 104.799579][ T6491] x64_sys_call+0x2d14/0x3000 [ 104.799602][ T6491] do_syscall_64+0xd2/0x200 [ 104.799622][ T6491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.799668][ T6491] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.799713][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.799734][ T6491] RIP: 0033:0x7febac51f6c9 [ 104.799749][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.799845][ T6491] RSP: 002b:00007febaaf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.799868][ T6491] RAX: ffffffffffffffda RBX: 00007febac775fa0 RCX: 00007febac51f6c9 [ 104.799882][ T6491] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000007 [ 104.799896][ T6491] RBP: 00007febaaf87090 R08: 0000200000000200 R09: 0000000000000014 [ 104.799911][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.799926][ T6491] R13: 00007febac776038 R14: 00007febac775fa0 R15: 00007fff4bf9dbd8 [ 104.799949][ T6491] [ 105.041817][ T6492] syz.4.771: attempt to access beyond end of device [ 105.041817][ T6492] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 105.108932][ T6504] tipc: Enabled bearer , priority 0 [ 105.157252][ T6511] loop4: detected capacity change from 0 to 128 [ 105.251403][ T6524] loop0: detected capacity change from 0 to 512 [ 105.265530][ T6525] syz.4.781: attempt to access beyond end of device [ 105.265530][ T6525] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 105.280257][ T6524] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.287285][ T6524] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.785: bg 0: block 248: padding at end of block bitmap is not set [ 105.305880][ T6524] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.785: Failed to acquire dquot type 1 [ 105.320748][ T6524] EXT4-fs (loop0): 1 truncate cleaned up [ 105.354084][ T6530] loop2: detected capacity change from 0 to 164 [ 106.217665][ T6552] loop2: detected capacity change from 0 to 128 [ 106.324317][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 106.333939][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 106.394319][ T4400] tipc: Node number set to 3570817216 [ 106.401970][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 106.405667][ T6557] gtp: attempt to access beyond end of device [ 106.405667][ T6557] loop2: rw=2049, sector=921, nr_sectors = 120 limit=128 [ 106.425861][ T6559] loop4: detected capacity change from 0 to 128 [ 106.456057][ T6561] loop3: detected capacity change from 0 to 1024 [ 106.483072][ T6561] sz1: rxe_newlink: already configured on lo [ 106.527407][ T6571] loop4: detected capacity change from 0 to 128 [ 106.575560][ T6573] loop4: detected capacity change from 0 to 128 [ 106.646225][ T6578] tipc: Enabled bearer , priority 0 [ 106.654771][ T6578] tipc: Resetting bearer [ 106.660444][ T6573] gtp: attempt to access beyond end of device [ 106.660444][ T6573] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 106.675178][ T6577] tipc: Disabling bearer [ 106.679233][ T6573] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 106.690224][ T6573] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 106.839941][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.850639][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.868400][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 106.868415][ T29] audit: type=1326 audit(1763324450.538:18171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 106.990114][ T6582] loop3: detected capacity change from 0 to 128 [ 107.007350][ T29] audit: type=1326 audit(1763324450.588:18172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.031522][ T29] audit: type=1326 audit(1763324450.598:18173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.055645][ T29] audit: type=1326 audit(1763324450.608:18174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.079747][ T29] audit: type=1326 audit(1763324450.608:18175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.080196][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 107.104028][ T29] audit: type=1326 audit(1763324450.608:18176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.112167][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 107.136405][ T29] audit: type=1326 audit(1763324450.608:18177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.144747][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 107.167948][ T29] audit: type=1326 audit(1763324450.608:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 107.293029][ T6592] loop0: detected capacity change from 0 to 128 [ 107.306762][ T29] audit: type=1326 audit(1763324450.968:18179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 107.330518][ T6595] loop4: detected capacity change from 0 to 1024 [ 107.337982][ T29] audit: type=1326 audit(1763324450.978:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89eccf6c9 code=0x7ffc0000 [ 107.365374][ T6596] loop3: detected capacity change from 0 to 1024 [ 107.381665][ T6595] rdma_rxe: rxe_newlink: failed to add lo [ 107.401132][ T6596] EXT4-fs: Ignoring removed orlov option [ 107.433154][ T6602] loop4: detected capacity change from 0 to 128 [ 107.461838][ T6602] gtp: attempt to access beyond end of device [ 107.461838][ T6602] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 107.485348][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.817'. [ 107.494487][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.817'. [ 107.579752][ T6608] tipc: Enabled bearer , priority 0 [ 107.590447][ T6608] tipc: Resetting bearer [ 107.598703][ T6607] tipc: Disabling bearer [ 107.853345][ T6615] loop2: detected capacity change from 0 to 128 [ 108.207975][ T6634] loop4: detected capacity change from 0 to 164 [ 108.533523][ T6642] bridge0: entered promiscuous mode [ 108.547717][ T6642] macvtap1: entered allmulticast mode [ 108.553242][ T6642] bridge0: entered allmulticast mode [ 108.925003][ T6654] loop4: detected capacity change from 0 to 1024 [ 108.932127][ T6654] EXT4-fs: Ignoring removed orlov option [ 108.943465][ T6654] EXT4-fs mount: 51 callbacks suppressed [ 108.943524][ T6654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.945428][ T6656] loop3: detected capacity change from 0 to 512 [ 108.978388][ T6656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.994082][ T6656] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.832: bad orphan inode 131083 [ 109.016951][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.019176][ T6668] loop2: detected capacity change from 0 to 128 [ 109.067011][ T6668] gtp: attempt to access beyond end of device [ 109.067011][ T6668] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 109.229053][ T6679] loop0: detected capacity change from 0 to 164 [ 109.317217][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.354257][ T6685] loop5: detected capacity change from 0 to 512 [ 109.363355][ T6685] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.370412][ T6685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.840: bg 0: block 248: padding at end of block bitmap is not set [ 109.386274][ T6685] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.840: Failed to acquire dquot type 1 [ 109.399181][ T6685] EXT4-fs (loop5): 1 truncate cleaned up [ 109.409840][ T6684] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.423610][ T6684] loop4: detected capacity change from 0 to 512 [ 109.431723][ T6685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.455503][ T6684] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.456049][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.463999][ T6684] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.483856][ T6684] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.839: corrupted inode contents [ 109.496630][ T6684] EXT4-fs (loop4): Remounting filesystem read-only [ 109.499590][ T6690] loop5: detected capacity change from 0 to 1024 [ 109.503566][ T6684] EXT4-fs (loop4): 1 truncate cleaned up [ 109.517901][ T4939] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 109.529290][ T4939] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 109.535429][ T6690] rdma_rxe: rxe_newlink: failed to add lo [ 109.540046][ T4939] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 109.557358][ T6684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.589391][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.743512][ T6707] loop5: detected capacity change from 0 to 164 [ 109.759785][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.779148][ T6709] loop3: detected capacity change from 0 to 512 [ 109.786773][ T6709] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.793854][ T6709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.844: bg 0: block 248: padding at end of block bitmap is not set [ 109.808755][ T6709] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.844: Failed to acquire dquot type 1 [ 109.820351][ T6709] EXT4-fs (loop3): 1 truncate cleaned up [ 109.826532][ T6709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.999981][ T6718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.013436][ T6718] loop0: detected capacity change from 0 to 512 [ 110.039264][ T6718] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 110.047280][ T6718] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.054992][ T6718] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.848: corrupted inode contents [ 110.067535][ T6718] EXT4-fs (loop0): Remounting filesystem read-only [ 110.074263][ T6718] EXT4-fs (loop0): 1 truncate cleaned up [ 110.138399][ T4939] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.149762][ T4939] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.162071][ T4939] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 110.174675][ T6718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.235678][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.890508][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.005267][ T6733] tipc: Enabling of bearer rejected, failed to enable media [ 111.169563][ T6746] loop3: detected capacity change from 0 to 512 [ 111.180499][ T6746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.191321][ T6746] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.851: bg 0: block 248: padding at end of block bitmap is not set [ 111.218440][ T6746] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.851: Failed to acquire dquot type 1 [ 111.231018][ T6746] EXT4-fs (loop3): 1 truncate cleaned up [ 111.240317][ T6746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.243897][ T6757] loop5: detected capacity change from 0 to 128 [ 111.257198][ T6758] tipc: Enabling of bearer rejected, failed to enable media [ 111.280678][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.415735][ T6780] loop5: detected capacity change from 0 to 128 [ 111.428162][ T6783] tipc: Enabling of bearer rejected, failed to enable media [ 111.535740][ T6792] loop5: detected capacity change from 0 to 512 [ 111.547569][ T6792] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.578926][ T6792] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.862: bg 0: block 248: padding at end of block bitmap is not set [ 111.608097][ T6792] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.862: Failed to acquire dquot type 1 [ 111.633864][ T6792] EXT4-fs (loop5): 1 truncate cleaned up [ 111.716741][ T6792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.066663][ T6831] loop3: detected capacity change from 0 to 128 [ 112.102651][ T6831] gtp: attempt to access beyond end of device [ 112.102651][ T6831] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 112.172748][ T6841] __nla_validate_parse: 6 callbacks suppressed [ 112.172775][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 112.188581][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 112.307731][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.401641][ T6867] loop5: detected capacity change from 0 to 128 [ 112.535041][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 112.544882][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 112.556296][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 112.569258][ T6878] tipc: Enabling of bearer rejected, failed to enable media [ 112.753658][ T6888] tipc: Enabling of bearer rejected, failed to enable media [ 113.098275][ T6900] loop5: detected capacity change from 0 to 512 [ 113.115908][ T6900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.150335][ T6900] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.874: bad orphan inode 131083 [ 113.163949][ T6900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.504839][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 113.504855][ T29] audit: type=1326 audit(1763324457.168:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.517819][ T6930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.556100][ T6930] loop3: detected capacity change from 0 to 512 [ 113.565035][ T29] audit: type=1326 audit(1763324457.168:18791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.589243][ T29] audit: type=1326 audit(1763324457.188:18792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.613393][ T29] audit: type=1326 audit(1763324457.188:18793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.637550][ T29] audit: type=1326 audit(1763324457.188:18794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.661787][ T29] audit: type=1326 audit(1763324457.188:18795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.685882][ T29] audit: type=1326 audit(1763324457.188:18796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.710133][ T29] audit: type=1326 audit(1763324457.188:18797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.734649][ T29] audit: type=1326 audit(1763324457.188:18798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.758392][ T29] audit: type=1326 audit(1763324457.188:18799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 113.796388][ T6930] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.807776][ T6930] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.815703][ T6930] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.876: corrupted inode contents [ 113.828539][ T6930] EXT4-fs (loop3): Remounting filesystem read-only [ 113.835177][ T6930] EXT4-fs (loop3): 1 truncate cleaned up [ 113.841059][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.852304][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.872038][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 113.883012][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.917034][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.940960][ T6930] netlink: 112 bytes leftover after parsing attributes in process `syz.3.876'. [ 113.981425][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.040558][ T6956] loop4: detected capacity change from 0 to 128 [ 114.053375][ T6957] loop5: detected capacity change from 0 to 1024 [ 114.079213][ T6957] EXT4-fs: Ignoring removed orlov option [ 114.090468][ T6957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.212253][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.236676][ T6973] loop4: detected capacity change from 0 to 128 [ 114.249533][ T6975] loop5: detected capacity change from 0 to 512 [ 114.256843][ T6975] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.269289][ T6975] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.884: bad orphan inode 131083 [ 114.385984][ T6975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.399593][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.808374][ T7010] loop0: detected capacity change from 0 to 1024 [ 115.846557][ T7010] EXT4-fs: Ignoring removed orlov option [ 115.895374][ T7010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.945630][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.964569][ T7026] loop5: detected capacity change from 0 to 128 [ 115.997785][ T7026] gtp: attempt to access beyond end of device [ 115.997785][ T7026] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 116.069181][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 116.078155][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 116.239456][ T7068] tipc: Enabling of bearer rejected, already enabled [ 116.252216][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 116.261916][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 116.362052][ T7091] loop5: detected capacity change from 0 to 128 [ 116.436989][ T7108] loop3: detected capacity change from 0 to 128 [ 116.579347][ T7108] gtp: attempt to access beyond end of device [ 116.579347][ T7108] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 116.595986][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.605350][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.895136][ T7147] tipc: Enabling of bearer rejected, failed to enable media [ 117.203105][ T7171] syzkaller0: entered promiscuous mode [ 117.208740][ T7171] syzkaller0: entered allmulticast mode [ 117.317140][ T7189] FAULT_INJECTION: forcing a failure. [ 117.317140][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.331401][ T7189] CPU: 1 UID: 0 PID: 7189 Comm: syz.0.919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.331440][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.331453][ T7189] Call Trace: [ 117.331461][ T7189] [ 117.331470][ T7189] __dump_stack+0x1d/0x30 [ 117.331500][ T7189] dump_stack_lvl+0xe8/0x140 [ 117.331599][ T7189] dump_stack+0x15/0x1b [ 117.331622][ T7189] should_fail_ex+0x265/0x280 [ 117.331666][ T7189] should_fail+0xb/0x20 [ 117.331707][ T7189] should_fail_usercopy+0x1a/0x20 [ 117.331738][ T7189] _copy_to_user+0x20/0xa0 [ 117.331771][ T7189] simple_read_from_buffer+0xb5/0x130 [ 117.331800][ T7189] proc_fail_nth_read+0x10e/0x150 [ 117.331860][ T7189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.331901][ T7189] vfs_read+0x1a8/0x770 [ 117.331948][ T7189] ? __rcu_read_unlock+0x4f/0x70 [ 117.331983][ T7189] ? __fget_files+0x184/0x1c0 [ 117.332016][ T7189] ? __sys_getsockname+0xb1/0x180 [ 117.332139][ T7189] ksys_read+0xda/0x1a0 [ 117.332276][ T7189] __x64_sys_read+0x40/0x50 [ 117.332310][ T7189] x64_sys_call+0x27c0/0x3000 [ 117.332352][ T7189] do_syscall_64+0xd2/0x200 [ 117.332381][ T7189] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.332469][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.332491][ T7189] RIP: 0033:0x7fc96138e0dc [ 117.332506][ T7189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.332530][ T7189] RSP: 002b:00007fc95fdef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.332555][ T7189] RAX: ffffffffffffffda RBX: 00007fc9615e5fa0 RCX: 00007fc96138e0dc [ 117.332570][ T7189] RDX: 000000000000000f RSI: 00007fc95fdef0a0 RDI: 0000000000000004 [ 117.332609][ T7189] RBP: 00007fc95fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 117.332625][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.332641][ T7189] R13: 00007fc9615e6038 R14: 00007fc9615e5fa0 R15: 00007ffeae447278 [ 117.332666][ T7189] [ 117.477598][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.557113][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.618752][ T7208] loop5: detected capacity change from 0 to 512 [ 117.626556][ T7208] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.638357][ T7208] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.924: bad orphan inode 131083 [ 117.650013][ T7208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.797286][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.807019][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.153303][ T7216] rdma_rxe: rxe_newlink: failed to add lo [ 118.353406][ T7224] syzkaller0: entered promiscuous mode [ 118.358948][ T7224] syzkaller0: entered allmulticast mode [ 118.461617][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.493177][ T7230] loop0: detected capacity change from 0 to 128 [ 118.505834][ T7228] loop5: detected capacity change from 0 to 128 [ 118.530391][ T7232] xt_hashlimit: max too large, truncated to 1048576 [ 118.536139][ T7230] gtp: attempt to access beyond end of device [ 118.536139][ T7230] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 118.550121][ T7232] loop2: detected capacity change from 0 to 512 [ 118.559295][ T7232] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 118.562337][ T7228] gtp: attempt to access beyond end of device [ 118.562337][ T7228] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 118.573330][ T7232] EXT4-fs (loop2): 1 truncate cleaned up [ 118.590893][ T7230] __nla_validate_parse: 5 callbacks suppressed [ 118.590910][ T7230] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 118.590923][ T7230] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 118.615480][ T7232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.642728][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.645885][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 118.660771][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 118.702312][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 118.702330][ T29] audit: type=1326 audit(1763324462.368:19171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.733014][ T29] audit: type=1326 audit(1763324462.368:19172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febac51df10 code=0x7ffc0000 [ 118.756564][ T29] audit: type=1326 audit(1763324462.368:19173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febac51df10 code=0x7ffc0000 [ 118.780000][ T29] audit: type=1326 audit(1763324462.368:19174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.803494][ T29] audit: type=1326 audit(1763324462.368:19175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.810648][ T7242] loop0: detected capacity change from 0 to 512 [ 118.826937][ T29] audit: type=1326 audit(1763324462.368:19176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.840150][ T7242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.856734][ T29] audit: type=1326 audit(1763324462.368:19177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.856848][ T29] audit: type=1326 audit(1763324462.368:19178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.856883][ T29] audit: type=1326 audit(1763324462.368:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.856994][ T29] audit: type=1326 audit(1763324462.368:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febac51f6c9 code=0x7ffc0000 [ 118.943199][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.974278][ T7242] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.988338][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.996536][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.937: corrupted inode contents [ 119.010062][ T7242] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.937: mark_inode_dirty error [ 119.025229][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.937: corrupted inode contents [ 119.049407][ T7246] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.937: corrupted inode contents [ 119.063921][ T7247] loop5: detected capacity change from 0 to 1024 [ 119.072493][ T7246] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.937: mark_inode_dirty error [ 119.085574][ T7249] loop4: detected capacity change from 0 to 128 [ 119.085620][ T7246] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.937: corrupted inode contents [ 119.107133][ T7246] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.937: mark_inode_dirty error [ 119.120510][ T7246] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.937: corrupted inode contents [ 119.123299][ T7247] rdma_rxe: rxe_newlink: failed to add lo [ 119.138637][ T7246] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.937: mark_inode_dirty error [ 119.184586][ T7253] loop5: detected capacity change from 0 to 512 [ 119.190751][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.191808][ T7253] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.211788][ T7253] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.942: bad orphan inode 131083 [ 119.224214][ T7253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.240468][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 119.249310][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 119.258784][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 119.295085][ T7266] loop4: detected capacity change from 0 to 164 [ 119.366591][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.375594][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.522541][ T7274] loop0: detected capacity change from 0 to 1024 [ 119.529549][ T7274] EXT4-fs: Ignoring removed bh option [ 119.540458][ T7274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.565993][ T7274] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 119.585208][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 119.613834][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.024523][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.046628][ T7288] loop3: detected capacity change from 0 to 128 [ 120.056572][ T7290] loop5: detected capacity change from 0 to 128 [ 120.061390][ T7292] syzkaller0: entered promiscuous mode [ 120.069125][ T7292] syzkaller0: entered allmulticast mode [ 120.096838][ T7288] gtp: attempt to access beyond end of device [ 120.096838][ T7288] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 120.150247][ T7297] loop5: detected capacity change from 0 to 128 [ 120.265632][ T7305] loop5: detected capacity change from 0 to 128 [ 120.407726][ T7318] loop5: detected capacity change from 0 to 164 [ 120.414484][ T7308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.416282][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.432349][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.460196][ T7309] loop4: detected capacity change from 0 to 164 [ 120.487132][ T7321] loop0: detected capacity change from 0 to 512 [ 120.494040][ T7321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.505040][ T7321] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.962: bad orphan inode 131083 [ 120.516951][ T7321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.599527][ T7333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.966'. [ 120.609511][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 120.960842][ T7336] loop3: detected capacity change from 0 to 128 [ 120.997442][ T7338] loop3: detected capacity change from 0 to 1024 [ 121.019518][ T7338] sz1: rxe_newlink: already configured on lo [ 121.063861][ T7342] syzkaller0: entered promiscuous mode [ 121.069725][ T7342] syzkaller0: entered allmulticast mode [ 121.182373][ T7348] loop3: detected capacity change from 0 to 512 [ 121.194003][ T7348] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.209068][ T7348] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.972: bg 0: block 248: padding at end of block bitmap is not set [ 121.228022][ T7348] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.972: Failed to acquire dquot type 1 [ 121.240986][ T7348] EXT4-fs (loop3): 1 truncate cleaned up [ 121.250070][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.279343][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.335696][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.357651][ T7372] loop0: detected capacity change from 0 to 128 [ 121.387368][ T7372] gtp: attempt to access beyond end of device [ 121.387368][ T7372] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 121.525118][ T7398] loop2: detected capacity change from 0 to 128 [ 121.559564][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.571374][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.580879][ T7398] gtp: attempt to access beyond end of device [ 121.580879][ T7398] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 122.268912][ T7441] syzkaller0: entered promiscuous mode [ 122.274446][ T7441] syzkaller0: entered allmulticast mode [ 122.298562][ T7444] loop3: detected capacity change from 0 to 128 [ 122.417071][ T7457] loop3: detected capacity change from 0 to 512 [ 122.461325][ T7457] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.468309][ T7457] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.988: bg 0: block 248: padding at end of block bitmap is not set [ 122.482850][ T7457] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.988: Failed to acquire dquot type 1 [ 122.495782][ T7457] EXT4-fs (loop3): 1 truncate cleaned up [ 122.507576][ T7457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.520765][ T7467] loop0: detected capacity change from 0 to 512 [ 122.540081][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.548718][ T7467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.566678][ T7467] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.991: bad orphan inode 131083 [ 122.577735][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.603795][ T7475] loop2: detected capacity change from 0 to 128 [ 122.646283][ T7479] loop4: detected capacity change from 0 to 512 [ 122.660535][ T7479] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.990: inode #0: comm syz.4.990: iget: illegal inode # [ 122.704378][ T7475] syz.2.992: attempt to access beyond end of device [ 122.704378][ T7475] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 122.729518][ T7479] EXT4-fs (loop4): get orphan inode failed [ 122.746357][ T7479] EXT4-fs (loop4): mount failed [ 122.893175][ T7503] loop3: detected capacity change from 0 to 164 [ 123.349204][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.435087][ T7463] syz.4.990 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 123.446042][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.4.990 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.446074][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.446144][ T7463] Call Trace: [ 123.446152][ T7463] [ 123.446162][ T7463] __dump_stack+0x1d/0x30 [ 123.446201][ T7463] dump_stack_lvl+0xe8/0x140 [ 123.446230][ T7463] dump_stack+0x15/0x1b [ 123.446321][ T7463] dump_header+0x81/0x220 [ 123.446346][ T7463] oom_kill_process+0x342/0x400 [ 123.446389][ T7463] out_of_memory+0x979/0xb80 [ 123.446431][ T7463] try_charge_memcg+0x610/0xa10 [ 123.446560][ T7463] charge_memcg+0x51/0xc0 [ 123.446591][ T7463] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 123.446658][ T7463] __read_swap_cache_async+0x17b/0x2d0 [ 123.446687][ T7463] swap_cluster_readahead+0x262/0x3c0 [ 123.446715][ T7463] swapin_readahead+0xde/0x6f0 [ 123.446748][ T7463] ? __pfx_do_sync_core+0x10/0x10 [ 123.446803][ T7463] ? on_each_cpu_cond_mask+0x5f/0x80 [ 123.446828][ T7463] ? smp_text_poke_batch_finish+0x4fc/0x590 [ 123.447019][ T7463] ? __schedule+0xa13/0xb30 [ 123.447061][ T7463] ? __rcu_read_unlock+0x4f/0x70 [ 123.447094][ T7463] ? swap_cache_get_folio+0x277/0x280 [ 123.447123][ T7463] do_swap_page+0x2ae/0x2370 [ 123.447152][ T7463] ? __account_obj_stock+0x211/0x350 [ 123.447208][ T7463] ? sized_strscpy+0x193/0x1a0 [ 123.447243][ T7463] ? sized_strscpy+0x193/0x1a0 [ 123.447339][ T7463] ? __account_obj_stock+0x211/0x350 [ 123.447377][ T7463] ? __pfx_default_wake_function+0x10/0x10 [ 123.447494][ T7463] handle_mm_fault+0x9a5/0x2be0 [ 123.447526][ T7463] ? vma_start_read+0x141/0x1f0 [ 123.447595][ T7463] do_user_addr_fault+0x630/0x1080 [ 123.447624][ T7463] ? fpregs_restore_userregs+0xe2/0x1d0 [ 123.447664][ T7463] ? switch_fpu_return+0xe/0x20 [ 123.447733][ T7463] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.447770][ T7463] exc_page_fault+0x62/0xa0 [ 123.447843][ T7463] asm_exc_page_fault+0x26/0x30 [ 123.447868][ T7463] RIP: 0033:0x7fe89eccf6d1 [ 123.447895][ T7463] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 123.447919][ T7463] RSP: 002b:00007ffd492ab468 EFLAGS: 00010217 [ 123.447937][ T7463] RAX: 0000000000000000 RBX: 00007fe89ef27da0 RCX: 00007fe89eccf6c9 [ 123.447949][ T7463] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 123.447961][ T7463] RBP: 00007fe89ef27da0 R08: 00000000000181f8 R09: 0000001b492ab75f [ 123.448035][ T7463] R10: 00007fe89ef27cb0 R11: 0000000000000246 R12: 000000000001e186 [ 123.448051][ T7463] R13: 00007fe89ef26270 R14: ffffffffffffffff R15: 00007ffd492ab580 [ 123.448077][ T7463] [ 123.707349][ T7463] memory: usage 307200kB, limit 307200kB, failcnt 392 [ 123.714292][ T7463] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 123.716986][ T29] kauditd_printk_skb: 1378 callbacks suppressed [ 123.717005][ T29] audit: type=1326 audit(1763324467.378:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 123.722232][ T7463] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 123.722246][ T7463] Memory cgroup stats for /syz4: [ 123.724198][ T7463] cache 0 [ 123.737224][ T29] audit: type=1326 audit(1763324467.398:20556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 123.753180][ T7463] rss 0 [ 123.753195][ T7463] shmem 0 [ 123.753203][ T7463] mapped_file 0 [ 123.753227][ T7463] dirty 0 [ 123.753235][ T7463] writeback 0 [ 123.753244][ T7463] workingset_refault_anon 46 [ 123.753254][ T7463] workingset_refault_file 493 [ 123.753264][ T7463] swap 401408 [ 123.753272][ T7463] swapcached 0 [ 123.753281][ T7463] pgpgin 61675 [ 123.753354][ T7463] pgpgout 61675 [ 123.753362][ T7463] pgfault 71290 [ 123.753371][ T7463] pgmajfault 40 [ 123.753387][ T7463] inactive_anon 0 [ 123.753396][ T7463] active_anon 0 [ 123.753404][ T7463] inactive_file 0 [ 123.753414][ T7463] active_file 0 [ 123.753422][ T7463] unevictable 0 [ 123.753431][ T7463] hierarchical_memory_limit 314572800 [ 123.753442][ T7463] hierarchical_memsw_limit 9223372036854771712 [ 123.753484][ T7463] total_cache 0 [ 123.753492][ T7463] total_rss 0 [ 123.753498][ T7463] total_shmem 0 [ 123.753506][ T7463] total_mapped_file 0 [ 123.753515][ T7463] total_dirty 0 [ 123.753521][ T7463] total_writeback 0 [ 123.753531][ T7463] total_workingset_refault_anon 46 [ 123.753551][ T7463] total_workingset_refault_file 493 [ 123.753561][ T7463] total_swap 401408 [ 123.753570][ T7463] total_swapcached 0 [ 123.753604][ T7463] total_pgpgin 61675 [ 123.753611][ T7463] total_pgpgout 61675 [ 123.753619][ T7463] total_pgfault 71290 [ 123.753626][ T7463] total_pgmajfault 40 [ 123.753635][ T7463] total_inactive_anon 0 [ 123.753644][ T7463] total_active_anon 0 [ 123.753654][ T7463] total_inactive_file 0 [ 123.753663][ T7463] total_active_file 0 [ 123.753673][ T7463] total_unevictable 0 [ 123.753683][ T7463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.990,pid=7463,uid=0 [ 123.753816][ T7463] Memory cgroup out of memory: Killed process 7463 (syz.4.990) total-vm:100376kB, anon-rss:1136kB, file-rss:26588kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 123.982153][ T29] audit: type=1326 audit(1763324467.398:20557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 123.998617][ T7473] syz.4.990 (7473) used greatest stack depth: 7096 bytes left [ 124.006822][ T29] audit: type=1326 audit(1763324467.398:20558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 124.036421][ T29] audit: type=1326 audit(1763324467.398:20559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 124.060791][ T29] audit: type=1326 audit(1763324467.398:20560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 124.085431][ T29] audit: type=1326 audit(1763324467.398:20561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 124.109828][ T29] audit: type=1326 audit(1763324467.398:20562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ed5f6c9 code=0x7ffc0000 [ 124.112252][ T7585] loop4: detected capacity change from 0 to 1024 [ 124.134999][ T29] audit: type=1326 audit(1763324467.468:20563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f052ed56567 code=0x7ffc0000 [ 124.163355][ T29] audit: type=1326 audit(1763324467.468:20564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f052ecfb789 code=0x7ffc0000 [ 124.235790][ T7594] tipc: Enabled bearer , priority 0 [ 124.244540][ T7594] tipc: Resetting bearer [ 124.254853][ T7593] tipc: Disabling bearer [ 124.259480][ T7598] __nla_validate_parse: 13 callbacks suppressed [ 124.259521][ T7598] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1000'. [ 124.272134][ T7599] rdma_rxe: rxe_newlink: failed to add lo [ 124.276353][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1000'. [ 124.291364][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 124.376553][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 124.385599][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 124.395050][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 124.501904][ T7637] SELinux: Context : is not valid (left unmapped). [ 124.515421][ T7637] loop5: detected capacity change from 0 to 1024 [ 124.522369][ T7637] ext4: Unknown parameter 'uid>00000000000000000000' [ 125.083259][ T7702] syzkaller0: entered promiscuous mode [ 125.089127][ T7702] syzkaller0: entered allmulticast mode [ 125.153797][ T7704] 9p: Unknown access argument 18446744073709551615: -34 [ 125.409037][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 125.418160][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 125.427871][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 125.565891][ T7719] loop5: detected capacity change from 0 to 512 [ 125.703027][ T7719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.960509][ T7719] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.034954][ T7719] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1015: corrupted inode contents [ 126.218221][ T7719] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1015: mark_inode_dirty error [ 126.278233][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.294441][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.360672][ T7719] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1015: corrupted inode contents [ 126.485260][ T7731] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1015: corrupted inode contents [ 126.536946][ T7731] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1015: mark_inode_dirty error [ 126.549410][ T7731] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1015: corrupted inode contents [ 126.567340][ T7731] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1015: mark_inode_dirty error [ 126.587738][ T7733] loop2: detected capacity change from 0 to 512 [ 126.595003][ T7731] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1015: corrupted inode contents [ 126.609872][ T7731] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1015: mark_inode_dirty error [ 126.634538][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.644490][ T7733] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.650966][ T7737] syzkaller0: entered promiscuous mode [ 126.656968][ T7733] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 126.661609][ T7737] syzkaller0: entered allmulticast mode [ 126.677966][ T7733] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1018: Corrupt directory, running e2fsck is recommended [ 126.694167][ T7733] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 126.702719][ T7733] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1018: corrupted in-inode xattr: invalid ea_ino [ 126.718889][ T7733] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1018: couldn't read orphan inode 15 (err -117) [ 126.732206][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.746550][ T7733] EXT4-fs error (device loop2): ext4_xattr_set_entry:1665: inode #2: comm syz.2.1018: corrupted xattr entries [ 126.778176][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.794670][ T7743] loop5: detected capacity change from 0 to 128 [ 126.843873][ T7745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.858957][ T7750] loop3: detected capacity change from 0 to 128 [ 126.861125][ T7751] loop2: detected capacity change from 0 to 128 [ 126.883982][ T7745] loop4: detected capacity change from 0 to 512 [ 126.901409][ T7745] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 126.909632][ T7754] loop5: detected capacity change from 0 to 128 [ 126.916904][ T7745] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.924949][ T7745] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1024: corrupted inode contents [ 126.945423][ T7751] gtp: attempt to access beyond end of device [ 126.945423][ T7751] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 126.953676][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 126.967187][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.967925][ T7745] EXT4-fs (loop4): Remounting filesystem read-only [ 126.975525][ T7757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.981350][ T7745] EXT4-fs (loop4): 1 truncate cleaned up [ 126.994292][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.004929][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.008952][ T7754] syz.5.1027: attempt to access beyond end of device [ 127.008952][ T7754] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 127.029643][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 127.030126][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.040751][ T7745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.047284][ T7757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.075494][ T7760] loop3: detected capacity change from 0 to 1024 [ 127.082110][ T7757] batadv0 (unregistering): left promiscuous mode [ 127.082837][ T7760] EXT4-fs: Ignoring removed bh option [ 127.094881][ T7760] EXT4-fs: inline encryption not supported [ 127.101816][ T7760] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.114061][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.130060][ T7760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 127.144897][ T7760] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1028: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.199519][ T7760] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1028: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.240342][ T7760] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1028: Failed to acquire dquot type 0 [ 127.252062][ T7760] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 127.275477][ T7760] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1028: mark_inode_dirty error [ 127.291768][ T7783] loop2: detected capacity change from 0 to 128 [ 127.294256][ T7760] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.308616][ T7760] EXT4-fs (loop3): 1 orphan inode deleted [ 127.314960][ T7760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.328129][ T4933] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.343500][ T4933] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 127.356064][ T7760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.365754][ T7760] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1028: Invalid inode table block 1 in block_group 0 [ 127.379548][ T7760] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 127.389520][ T7760] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz.3.1028: mark_inode_dirty error [ 127.410282][ T7787] loop5: detected capacity change from 0 to 128 [ 127.490449][ T7794] loop3: detected capacity change from 0 to 128 [ 127.519430][ T7795] FAULT_INJECTION: forcing a failure. [ 127.519430][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.532848][ T7795] CPU: 1 UID: 0 PID: 7795 Comm: syz.2.1043 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.532876][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.532888][ T7795] Call Trace: [ 127.532975][ T7795] [ 127.532983][ T7795] __dump_stack+0x1d/0x30 [ 127.533011][ T7795] dump_stack_lvl+0xe8/0x140 [ 127.533038][ T7795] dump_stack+0x15/0x1b [ 127.533060][ T7795] should_fail_ex+0x265/0x280 [ 127.533175][ T7795] should_fail+0xb/0x20 [ 127.533235][ T7795] should_fail_usercopy+0x1a/0x20 [ 127.533328][ T7795] _copy_from_user+0x1c/0xb0 [ 127.533442][ T7795] ___sys_sendmsg+0xc1/0x1d0 [ 127.533480][ T7795] __x64_sys_sendmsg+0xd4/0x160 [ 127.533502][ T7795] x64_sys_call+0x191e/0x3000 [ 127.533633][ T7795] do_syscall_64+0xd2/0x200 [ 127.533667][ T7795] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.533703][ T7795] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.533747][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.533774][ T7795] RIP: 0033:0x7febac51f6c9 [ 127.533846][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.533864][ T7795] RSP: 002b:00007febaaf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.533883][ T7795] RAX: ffffffffffffffda RBX: 00007febac775fa0 RCX: 00007febac51f6c9 [ 127.533902][ T7795] RDX: 0000000004048800 RSI: 0000200000000200 RDI: 0000000000000003 [ 127.533940][ T7795] RBP: 00007febaaf87090 R08: 0000000000000000 R09: 0000000000000000 [ 127.533972][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.533989][ T7795] R13: 00007febac776038 R14: 00007febac775fa0 R15: 00007fff4bf9dbd8 [ 127.534013][ T7795] [ 128.221338][ T7818] loop2: detected capacity change from 0 to 128 [ 128.300759][ T7827] loop2: detected capacity change from 0 to 128 [ 128.321253][ T7829] loop4: detected capacity change from 0 to 512 [ 128.339056][ T7829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.357033][ T7829] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1057: bad orphan inode 131083 [ 128.368852][ T7829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.382623][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.392064][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.623381][ T7837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.638436][ T7837] loop5: detected capacity change from 0 to 512 [ 128.644479][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.658569][ T7837] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 128.666679][ T7837] EXT4-fs (loop5): orphan cleanup on readonly fs [ 128.674951][ T7837] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1059: corrupted inode contents [ 128.687162][ T7837] EXT4-fs (loop5): Remounting filesystem read-only [ 128.695188][ T7837] EXT4-fs (loop5): 1 truncate cleaned up [ 128.700980][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.712277][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.722947][ T31] __quota_error: 468 callbacks suppressed [ 128.722965][ T31] Quota error (device loop5): write_blk: dquota write failed [ 128.724518][ T29] audit: type=1400 audit(1763324472.398:21022): avc: denied { map } for pid=7846 comm="syz.0.1063" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.729516][ T31] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 128.736173][ T29] audit: type=1400 audit(1763324472.398:21023): avc: denied { read write } for pid=7846 comm="syz.0.1063" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.764020][ T31] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 128.797212][ T7845] loop4: detected capacity change from 0 to 512 [ 128.806383][ T31] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 128.821954][ T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.821967][ T7847] FAULT_INJECTION: forcing a failure. [ 128.821967][ T7847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.822008][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.0.1063 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.822032][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.822046][ T7847] Call Trace: [ 128.822053][ T7847] [ 128.822060][ T7847] __dump_stack+0x1d/0x30 [ 128.822100][ T31] ================================================================== [ 128.822099][ T7847] dump_stack_lvl+0xe8/0x140 [ 128.822125][ T7847] dump_stack+0x15/0x1b [ 128.822140][ T31] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 128.822172][ T31] [ 128.822181][ T31] write to 0xffffffff88e65430 of 43 bytes by task 7847 on cpu 0: [ 128.822184][ T7847] should_fail_ex+0x265/0x280 [ 128.822203][ T31] vsnprintf+0x2ce/0x890 [ 128.822234][ T31] vscnprintf+0x41/0x90 [ 128.822239][ T7847] should_fail+0xb/0x20 [ 128.822268][ T31] printk_sprint+0x30/0x2d0 [ 128.822280][ T7847] should_fail_usercopy+0x1a/0x20 [ 128.822296][ T31] vprintk_store+0x599/0x860 [ 128.822321][ T31] vprintk_emit+0x10d/0x580 [ 128.822342][ T31] vprintk_default+0x26/0x30 [ 128.822362][ T7847] _copy_to_user+0x20/0xa0 [ 128.822367][ T31] vprintk+0x1d/0x30 [ 128.822395][ T7847] io_query+0x226/0x4b0 [ 128.822403][ T31] _printk+0x79/0xa0 [ 128.822440][ T31] should_fail_ex+0x24d/0x280 [ 128.822429][ T7847] ? __rcu_read_unlock+0x4f/0x70 [ 128.822474][ T31] should_fail+0xb/0x20 [ 128.822513][ T31] should_fail_usercopy+0x1a/0x20 [ 128.822511][ T7847] ? io_is_uring_fops+0x16/0x30 [ 128.822541][ T31] _copy_to_user+0x20/0xa0 [ 128.822553][ T7847] __se_sys_io_uring_register+0x341/0xf00 [ 128.822581][ T31] io_query+0x226/0x4b0 [ 128.822585][ T7847] ? fput+0x8f/0xc0 [ 128.822609][ T7847] ? ksys_write+0x192/0x1a0 [ 128.822611][ T31] __se_sys_io_uring_register+0x341/0xf00 [ 128.822643][ T31] __x64_sys_io_uring_register+0x55/0x70 [ 128.822643][ T7847] __x64_sys_io_uring_register+0x55/0x70 [ 128.822674][ T31] x64_sys_call+0x18a3/0x3000 [ 128.822675][ T7847] x64_sys_call+0x18a3/0x3000 [ 128.822704][ T7847] do_syscall_64+0xd2/0x200 [ 128.822705][ T31] do_syscall_64+0xd2/0x200 [ 128.822734][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.822755][ T31] [ 128.822762][ T31] read to 0xffffffff88e65458 of 8 bytes by task 31 on cpu 1: [ 128.822777][ T31] data_push_tail+0xfd/0x420 [ 128.822731][ T7847] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.822799][ T31] data_alloc+0xfb/0x2e0 [ 128.822822][ T31] prb_reserve+0x807/0xaf0 [ 128.822844][ T31] vprintk_store+0x56d/0x860 [ 128.822824][ T7847] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.822864][ T31] vprintk_emit+0x10d/0x580 [ 128.822893][ T31] vprintk_default+0x26/0x30 [ 128.822898][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.822926][ T7847] RIP: 0033:0x7fc96138f6c9 [ 128.822923][ T31] vprintk+0x1d/0x30 [ 128.822944][ T7847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.822960][ T31] _printk+0x79/0xa0 [ 128.822971][ T7847] RSP: 002b:00007fc95fdef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 128.822994][ T7847] RAX: ffffffffffffffda RBX: 00007fc9615e5fa0 RCX: 00007fc96138f6c9 [ 128.822996][ T31] __quota_error+0xf8/0x110 [ 128.823010][ T7847] RDX: 0000200000000040 RSI: 0000000000000023 RDI: 0000000000000003 [ 128.823025][ T7847] RBP: 00007fc95fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 128.823040][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.823033][ T31] check_dquot_block_header+0x134/0x160 [ 128.823055][ T7847] R13: 00007fc9615e6038 R14: 00007fc9615e5fa0 R15: 00007ffeae447278 [ 128.823066][ T31] remove_tree+0x5d2/0x1120 [ 128.823078][ T7847] [ 128.823091][ T31] remove_tree+0x633/0x1120 [ 128.823116][ T31] remove_tree+0x633/0x1120 [ 128.823137][ T31] remove_tree+0x633/0x1120 [ 128.823157][ T31] qtree_release_dquot+0x16e/0x180 [ 128.823180][ T31] v2_release_dquot+0x98/0xd0 [ 128.823206][ T31] dquot_release+0x10e/0x210 [ 128.823240][ T31] ext4_release_dquot+0x1e4/0x460 [ 128.823271][ T31] quota_release_workfn+0x256/0x530 [ 128.823290][ T31] process_scheduled_works+0x4ce/0x9d0 [ 128.823331][ T31] worker_thread+0x582/0x770 [ 128.823350][ T31] kthread+0x489/0x510 [ 128.823372][ T31] ret_from_fork+0x122/0x1b0 [ 128.823396][ T31] ret_from_fork_asm+0x1a/0x30 [ 128.823425][ T31] [ 128.823430][ T31] value changed: 0x00000000ffffe591 -> 0x73755f6c69616620 [ 128.823442][ T31] [ 128.823447][ T31] Reported by Kernel Concurrency Sanitizer on: [ 128.823458][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.823486][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.823501][ T31] Workqueue: quota_events_unbound quota_release_workfn [ 128.823530][ T31] ================================================================== [ 128.833682][ T7845] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.858305][ T7837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.878863][ T7845] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1062: bg 0: block 248: padding at end of block bitmap is not set [ 128.916651][ T29] audit: type=1326 audit(1763324472.588:21024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bc0d0df10 code=0x7ffc0000 [ 128.997991][ T7845] Quota error (device loop4): write_blk: dquota write failed [ 129.003512][ T29] audit: type=1326 audit(1763324472.588:21025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5bc0d0e417 code=0x7ffc0000 [ 129.003547][ T29] audit: type=1326 audit(1763324472.588:21026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bc0d0df10 code=0x7ffc0000 [ 129.007726][ T7845] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1062: Failed to acquire dquot type 1 [ 129.461581][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.462039][ T7845] EXT4-fs (loop4): 1 truncate cleaned up [ 129.477723][ T7845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.507183][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.