last executing test programs: 1m59.916511102s ago: executing program 2 (id=32): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20cb47a7, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m59.784465841s ago: executing program 2 (id=35): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@discard}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) fcntl$setstatus(r1, 0x4, 0x6000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x7fffe, 0x7000000) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x7f000}]) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 1m58.008404174s ago: executing program 2 (id=62): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 1m57.696534593s ago: executing program 2 (id=65): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x0, &(0x7f0000000200), 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x800000, 0x80, 0x21}, 0x18) fspick(r0, &(0x7f0000000380)='.\x00', 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7, 0x0, 0x6}, 0x18) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES64=r3], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x3, 0x2, 0x2, 0x1, 0x7, 0xfffffffffffffff4, 0x1}], &(0x7f0000000580)='GPL\x00', 0x0, 0x4f, &(0x7f00000005c0)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x0, 0xe}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r10, r11, r9, r9, r10], &(0x7f0000000740)=[{0x1, 0x4, 0x0, 0x1}, {0x2, 0x2, 0x9, 0x3}, {0x3, 0x5, 0x10, 0xe}, {0x3, 0x2, 0x3, 0x8}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000000), 0xff1a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.309305001s ago: executing program 2 (id=71): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick=0x37c2, {}, {}, @control={0x9, 0x8, 0x8}}, {0x0, 0x0, 0x0, 0x8, @tick=0x40, {}, {0x78}, @quote={{0x5, 0x3}, 0x57aa}}], 0x38) 1m56.484971338s ago: executing program 2 (id=85): setrlimit(0x8, &(0x7f0000000000)={0x0, 0xb6f5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/4096) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap$xdp(&(0x7f000007d000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r0, 0x100000000) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1m56.465296208s ago: executing program 32 (id=85): setrlimit(0x8, &(0x7f0000000000)={0x0, 0xb6f5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/4096) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap$xdp(&(0x7f000007d000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r0, 0x100000000) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 41.843315642s ago: executing program 5 (id=1077): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x14, 0x4, @void, @value}, 0x20) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) (async) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0']) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r5}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) (async) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000180)=0xa98) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 41.524605101s ago: executing program 5 (id=1081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2000000000000125, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 41.48379322s ago: executing program 5 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, r1) 41.4689546s ago: executing program 5 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000180)=0x54) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x30402) r2 = eventfd(0xffffffdd) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xb, &(0x7f0000000080)=@raw=[@generic={0x2, 0x3, 0xc, 0xe06, 0x455}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x2, 0x2, 0xa, 0x9, 0xc, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000180)=0x54) (async) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x30402) (async) eventfd(0xffffffdd) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0xf) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xb, &(0x7f0000000080)=@raw=[@generic={0x2, 0x3, 0xc, 0xe06, 0x455}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x2, 0x2, 0xa, 0x9, 0xc, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 41.37049379s ago: executing program 5 (id=1088): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x400, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 41.082318408s ago: executing program 5 (id=1092): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x400, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 1) 40.989164558s ago: executing program 33 (id=1092): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x400, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 1) 2.956376872s ago: executing program 4 (id=1754): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = open(0x0, 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) 2.710517591s ago: executing program 3 (id=1759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) 2.699452571s ago: executing program 3 (id=1760): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFT_BATCH(r2, 0x0, 0x4010) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") unshare(0x20400) openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 2.43839783s ago: executing program 3 (id=1764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.34120171s ago: executing program 3 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.26612165s ago: executing program 3 (id=1767): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFT_BATCH(r2, 0x0, 0x4010) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") unshare(0x20400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 2.045486269s ago: executing program 3 (id=1769): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00', 0x400, 0x40) mknod$loop(&(0x7f00000005c0)='./cgroup\x00', 0x40, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r5}], 0x1, 0xfff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) getdents64(r0, &(0x7f00000004c0)=""/177, 0xb1) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xf, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0xec, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6d, 0x7, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xe, 0xc}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0x4, 0x8}}}}}]}}]}}, 0x0) 2.043525628s ago: executing program 4 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) 1.960866038s ago: executing program 4 (id=1772): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00', 0x400, 0x40) mknod$loop(&(0x7f00000005c0)='./cgroup\x00', 0x40, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r5}], 0x1, 0xfff) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) getdents64(r0, &(0x7f00000004c0)=""/177, 0xb1) 1.709021967s ago: executing program 4 (id=1774): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFT_BATCH(r2, 0x0, 0x4010) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") unshare(0x20400) openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1.649969167s ago: executing program 0 (id=1775): openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00', 0x400, 0x40) mknod$loop(&(0x7f00000005c0)='./cgroup\x00', 0x40, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xfff) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 1.361440796s ago: executing program 4 (id=1776): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.308035076s ago: executing program 4 (id=1777): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@discard}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x7fffe, 0x7000000) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x7f000}]) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 893.003554ms ago: executing program 6 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFT_BATCH(r2, 0x0, 0x4010) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") unshare(0x20400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@bloom_filter={0x1e, 0x40, 0x3, 0x0, 0x4002, r3, 0x1, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xf, @void, @value, @void, @value}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/213, 0xd5, 0x0, &(0x7f00000014c0)=""/4096, 0x1000}, &(0x7f0000001340)=0x40) 744.177754ms ago: executing program 0 (id=1788): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 736.238903ms ago: executing program 6 (id=1789): mmap$xdp(&(0x7f000007d000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x100000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 707.596063ms ago: executing program 0 (id=1790): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000a00)={0x0, 0x1, 0x6, 0x1e, 0x5a, &(0x7f00000005c0)="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"}) 683.153713ms ago: executing program 0 (id=1792): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) 534.495763ms ago: executing program 1 (id=1794): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, r1) 447.406032ms ago: executing program 6 (id=1795): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000005c0)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "ef5df3e095acc5d7ed2073feaf24cae696585797bad9a831f97e23c53d20db118dbce66fa4d282ca70d479d9792b0286230342b2cd5373675ec17d4ed01cf84aa8adc703a416cd9a09f82d17ef67aee9add36f4ef76aebbc6126ed371b195ce5782381f649d8fb2361e834807adac7eb2ab5fd7cb1264108f805d9d7bdde825112774557cda3ab8c80e4e9dafc7d869b518377ac2a7db148fe592a9e186d3b573138db1c10fec08ac33ae232e2c43bf2cfd1a4c2faf5aeb6199ed3a50bcd373118379a7301ce4838ffcd59fb82d7a4097349f6ec1e14b8ef636de8d6667afaf98cac3db33c96deadb4006d081c90ae361fd5cae31797c88cb58cfecdf0dddf93", 0x0, 0x6, 0x3, 0x8, 0x8, 0x1, 0x8, 0x1}}}, 0x120) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) close(r0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x1200004, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xeb}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x5, 0x1}, 0x8) 388.915662ms ago: executing program 1 (id=1796): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x800}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000000540)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x188) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) 333.299142ms ago: executing program 6 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 312.552801ms ago: executing program 1 (id=1798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap$xdp(&(0x7f000007d000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r0, 0x100000000) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 300.019312ms ago: executing program 0 (id=1799): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x80000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file2/../file0\x00'}, 0x6e) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x2, 0x628f18d3, {{0x24, 0x4, 0x3, 0x5, 0x90, 0x65, 0x0, 0x64, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0x3, 0xe8}, @noop, @timestamp_prespec={0x44, 0x3c, 0x49, 0x3, 0xf, [{@rand_addr=0x64010101, 0x400000}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x10}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@local, 0x6}, {@rand_addr=0x64010101, 0xa05e}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@rand_addr=0x64010105, 0x1ff}]}, @rr={0x7, 0x1f, 0xde, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x34, 0x0, 0xf, [0xfffffffd]}, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "800efd6550938041a4db56e7"}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x3}}) 276.406271ms ago: executing program 6 (id=1800): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFT_BATCH(r2, 0x0, 0x4010) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") unshare(0x20400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@bloom_filter={0x1e, 0x40, 0x3, 0x0, 0x4002, r3, 0x1, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xf, @void, @value, @void, @value}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/213, 0xd5, 0x0, &(0x7f00000014c0)=""/4096, 0x1000}, &(0x7f0000001340)=0x40) 246.090812ms ago: executing program 1 (id=1801): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611148000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{0x0}], 0x1) 158.369421ms ago: executing program 1 (id=1802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFT_BATCH(r2, 0x0, 0x4010) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") unshare(0x20400) openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 53.172661ms ago: executing program 6 (id=1803): openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00', 0x400, 0x40) mknod$loop(&(0x7f00000005c0)='./cgroup\x00', 0x40, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 11.77138ms ago: executing program 0 (id=1804): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f00000006c0)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000dc0)={[{@shortname_mixed}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0xba5}}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@check_strict}, {@utf8no}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@shortname_winnt}, {}]}, 0x6, 0x2bd, &(0x7f0000000180)="$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") setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000f5e7534af6fd1726f44c5f7f0055d4adb603a7de2142050402c80a9967576ceccd9755f6758b9676bbdae2d95b480c6c2b762d34adbbb15b9f0f3b398f5d62e6c9e93ca4447afd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a"], 0x254}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r5, 0x1, 0x8, 0x0, &(0x7f0000000100)) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000500)={0x80000001, {{0xa, 0x4e24, 0x2, @mcast1}}, {{0xa, 0x4e20, 0xffff1a90, @mcast2, 0x7}}}, 0x108) 0s ago: executing program 1 (id=1805): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@nodioread_nolock}, {@inlinecrypt}, {@minixdf}, {@barrier}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) kernel console output (not intermixed with test programs): 7f3b465d1090 R08: 0000000000000000 R09: 0000000000000000 [ 119.122922][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.122989][ T7592] R13: 0000000000000000 R14: 00007f3b48185fa0 R15: 00007ffe4d755248 [ 119.123010][ T7592] [ 119.213817][ T7292] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, [ 119.226681][ T7587] Unable to read rock-ridge attributes [ 119.227756][ T7292] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 119.240426][ T29] audit: type=1400 audit(1737888074.050:4743): avc: denied { mount } for pid=7586 comm="syz.4.1192" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 119.244017][ T7587] Unable to read rock-ridge attributes [ 119.321481][ T7598] loop0: detected capacity change from 0 to 512 [ 119.372714][ T7292] EXT4-fs (loop6): Remounting filesystem read-only [ 119.410475][ T29] audit: type=1400 audit(1737888074.220:4744): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 119.433887][ T7595] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1196'. [ 119.450233][ T29] audit: type=1400 audit(1737888074.270:4745): avc: denied { write } for pid=7600 comm="syz.6.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.451057][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1197'. [ 119.469910][ T29] audit: type=1400 audit(1737888074.270:4746): avc: denied { getopt } for pid=7600 comm="syz.6.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.498931][ T7598] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.522426][ T29] audit: type=1326 audit(1737888074.310:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 119.545944][ T29] audit: type=1326 audit(1737888074.310:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 119.545977][ T29] audit: type=1326 audit(1737888074.310:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 119.546054][ T29] audit: type=1326 audit(1737888074.310:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 119.704859][ T7612] loop3: detected capacity change from 0 to 8192 [ 119.787317][ T7618] loop6: detected capacity change from 0 to 512 [ 119.796637][ T7623] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.810626][ T7618] EXT4-fs: inline encryption not supported [ 119.816355][ T7622] loop0: detected capacity change from 0 to 512 [ 119.830627][ T7618] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.833796][ T7622] EXT4-fs: Ignoring removed orlov option [ 119.848284][ T7622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.859986][ T7622] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.868456][ T7622] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1204: bg 0: block 248: padding at end of block bitmap is not set [ 119.885490][ T7620] netlink: 'syz.4.1205': attribute type 4 has an invalid length. [ 119.893289][ T7620] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1205'. [ 119.908253][ T7627] loop1: detected capacity change from 0 to 8192 [ 119.915246][ T7622] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1204: Failed to acquire dquot type 1 [ 119.928077][ T7622] EXT4-fs (loop0): 1 truncate cleaned up [ 119.943837][ T7622] EXT4-fs: Ignoring removed orlov option [ 119.946385][ T7620] IPv6: Can't replace route, no match found [ 119.952117][ T7622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.965680][ T7622] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 119.983221][ T7632] loop6: detected capacity change from 0 to 512 [ 119.990265][ T7632] EXT4-fs: Ignoring removed orlov option [ 119.992621][ T7622] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.1204: Abort forced by user [ 120.017946][ T7622] EXT4-fs (loop0): Remounting filesystem read-only [ 120.022184][ T7632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.024490][ T7622] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.043464][ T7622] ext4 filesystem being remounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.054780][ T7632] EXT4-fs (loop6): orphan cleanup on readonly fs [ 120.061963][ T7632] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1206: bg 0: block 248: padding at end of block bitmap is not set [ 120.078206][ T7632] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1206: Failed to acquire dquot type 1 [ 120.090450][ T7632] EXT4-fs (loop6): 1 truncate cleaned up [ 120.117842][ T7637] loop4: detected capacity change from 0 to 512 [ 120.134224][ T7639] loop0: detected capacity change from 0 to 512 [ 120.150824][ T7639] EXT4-fs: Ignoring removed orlov option [ 120.158565][ T7637] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.174651][ T7643] loop6: detected capacity change from 0 to 1024 [ 120.188003][ T7643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.189376][ T7639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.197395][ T7643] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 120.216396][ T7643] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 120.226085][ T7643] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 120.227601][ T7639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.237136][ T7643] EXT4-fs (loop6): invalid journal inode [ 120.244809][ T7639] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1207: bg 0: block 248: padding at end of block bitmap is not set [ 120.248225][ T7643] EXT4-fs (loop6): can't get journal size [ 120.259396][ T7643] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.1209: blocks 2-2 from inode overlap system zone [ 120.264401][ T7639] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1207: Failed to acquire dquot type 1 [ 120.269047][ T7643] EXT4-fs (loop6): failed to initialize system zone (-117) [ 120.286496][ T7639] EXT4-fs (loop0): 1 truncate cleaned up [ 120.306368][ T7643] EXT4-fs (loop6): mount failed [ 120.319325][ T7647] loop4: detected capacity change from 0 to 512 [ 120.350494][ T7647] EXT4-fs (loop4): 1 orphan inode deleted [ 120.366363][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 120.366950][ T7647] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.398248][ T7643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=7643 comm=syz.6.1209 [ 120.474833][ T7654] loop3: detected capacity change from 0 to 512 [ 120.483575][ T7654] EXT4-fs: Ignoring removed orlov option [ 120.485077][ T7658] loop4: detected capacity change from 0 to 512 [ 120.495791][ T7654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.499143][ T7656] loop0: detected capacity change from 0 to 512 [ 120.530982][ T7654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.557074][ T7654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1213: bg 0: block 248: padding at end of block bitmap is not set [ 120.559417][ T7656] EXT4-fs (loop0): 1 orphan inode deleted [ 120.577663][ T40] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 120.579211][ T7656] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.597847][ T7654] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1213: Failed to acquire dquot type 1 [ 120.625163][ T7658] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.658925][ T7654] EXT4-fs (loop3): 1 truncate cleaned up [ 120.701148][ T7658] 9pnet_fd: Insufficient options for proto=fd [ 120.769788][ T7677] loop0: detected capacity change from 0 to 512 [ 120.778555][ T7679] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 120.805262][ T7674] loop6: detected capacity change from 0 to 8192 [ 120.825028][ T7684] loop4: detected capacity change from 0 to 1024 [ 120.834721][ T7684] EXT4-fs: Ignoring removed orlov option [ 120.840151][ T7686] loop1: detected capacity change from 0 to 512 [ 120.850550][ T7681] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1220'. [ 120.867990][ T7677] EXT4-fs (loop0): 1 orphan inode deleted [ 120.882362][ T7677] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.883292][ T7690] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 120.906588][ T3390] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 120.932891][ T3390] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 120.952900][ T7686] EXT4-fs (loop1): 1 orphan inode deleted [ 120.964455][ T7686] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.967875][ T3390] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 121.084025][ T7703] loop3: detected capacity change from 0 to 512 [ 121.090741][ T7705] loop1: detected capacity change from 0 to 512 [ 121.101370][ T7705] EXT4-fs: inline encryption not supported [ 121.139862][ T7703] EXT4-fs (loop3): 1 orphan inode deleted [ 121.143229][ T7705] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.146707][ T7703] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.167829][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 121.202920][ T7713] loop1: detected capacity change from 0 to 512 [ 121.257045][ T7713] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 121.261276][ T7722] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1234'. [ 121.280918][ T7724] loop3: detected capacity change from 0 to 512 [ 121.292372][ T7725] loop4: detected capacity change from 0 to 256 [ 121.305415][ T7713] loop1: detected capacity change from 0 to 512 [ 121.313763][ T7713] EXT4-fs: Ignoring removed nobh option [ 121.318660][ T7728] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 121.330078][ T7724] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.340715][ T7725] FAT-fs (loop4): IO charset cp949 not found [ 121.363867][ T7713] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.471686][ T7743] loop3: detected capacity change from 0 to 512 [ 121.480746][ T7743] EXT4-fs: Ignoring removed orlov option [ 121.488580][ T7743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.495432][ T7745] loop0: detected capacity change from 0 to 512 [ 121.503702][ T7745] EXT4-fs: inline encryption not supported [ 121.512975][ T7743] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.521705][ T7743] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1241: bg 0: block 248: padding at end of block bitmap is not set [ 121.533203][ T7745] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.537746][ T7743] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1241: Failed to acquire dquot type 1 [ 121.559055][ T7743] EXT4-fs (loop3): 1 truncate cleaned up [ 121.582121][ T7743] EXT4-fs: Ignoring removed orlov option [ 121.588061][ T7743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.598727][ T7743] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 121.618198][ T7743] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.1241: Abort forced by user [ 121.630048][ T7752] loop6: detected capacity change from 0 to 1024 [ 121.637179][ T7743] EXT4-fs (loop3): Remounting filesystem read-only [ 121.637589][ T7752] EXT4-fs: Ignoring removed orlov option [ 121.643694][ T7743] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 121.660294][ T7743] ext4 filesystem being remounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.721275][ T7762] netlink: 'syz.3.1247': attribute type 4 has an invalid length. [ 121.752926][ T7764] loop3: detected capacity change from 0 to 512 [ 121.765593][ T7764] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.775205][ T7764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.782206][ T7764] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1248: Failed to acquire dquot type 1 [ 121.795341][ T7764] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1248: bg 0: block 40: padding at end of block bitmap is not set [ 121.810146][ T7764] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 121.820136][ T7764] EXT4-fs (loop3): 1 truncate cleaned up [ 121.874655][ T7771] loop3: detected capacity change from 0 to 512 [ 121.890907][ T7771] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.000189][ T7777] netlink: 'syz.6.1253': attribute type 4 has an invalid length. [ 122.007982][ T7777] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1253'. [ 122.019555][ T7777] IPv6: Can't replace route, no match found [ 122.028024][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.038424][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.050277][ T7779] loop3: detected capacity change from 0 to 8192 [ 122.070627][ T7783] loop1: detected capacity change from 0 to 512 [ 122.080131][ T7783] EXT4-fs: inline encryption not supported [ 122.121580][ T7783] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.140574][ T7785] loop4: detected capacity change from 0 to 8192 [ 122.180187][ T7793] loop1: detected capacity change from 0 to 512 [ 122.203111][ T7793] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.512246][ T7802] loop0: detected capacity change from 0 to 512 [ 122.524862][ T7802] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 122.533550][ T7802] EXT4-fs (loop0): orphan cleanup on readonly fs [ 122.541097][ T7802] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1260: Failed to acquire dquot type 1 [ 122.552808][ T7802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1260: bg 0: block 40: padding at end of block bitmap is not set [ 122.572041][ T7802] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 122.583649][ T7802] EXT4-fs (loop0): 1 truncate cleaned up [ 122.752302][ T7813] loop0: detected capacity change from 0 to 512 [ 122.759740][ T7813] EXT4-fs: Ignoring removed orlov option [ 122.766919][ T7813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.775998][ T7813] EXT4-fs (loop0): orphan cleanup on readonly fs [ 122.787079][ T7813] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1265: bg 0: block 248: padding at end of block bitmap is not set [ 122.802006][ T7813] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1265: Failed to acquire dquot type 1 [ 122.813925][ T7813] EXT4-fs (loop0): 1 truncate cleaned up [ 122.859772][ T7821] loop6: detected capacity change from 0 to 256 [ 122.877865][ T7821] FAT-fs (loop6): IO charset cp949 not found [ 122.982401][ T7820] loop0: detected capacity change from 0 to 8192 [ 123.079498][ T7837] loop3: detected capacity change from 0 to 512 [ 123.097037][ T7838] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.128511][ T7837] EXT4-fs (loop3): 1 orphan inode deleted [ 123.140433][ T7837] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.157982][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 123.179962][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 123.306635][ T7845] loop1: detected capacity change from 0 to 1024 [ 123.317729][ T7845] EXT4-fs: Ignoring removed orlov option [ 123.450366][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 123.528157][ T7857] loop1: detected capacity change from 0 to 512 [ 123.536125][ T7857] EXT4-fs: Ignoring removed orlov option [ 123.552954][ T7857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.563395][ T7857] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.571095][ T7857] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1279: bg 0: block 248: padding at end of block bitmap is not set [ 123.586164][ T7857] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1279: Failed to acquire dquot type 1 [ 123.602180][ T7857] EXT4-fs (loop1): 1 truncate cleaned up [ 123.649206][ T7860] loop6: detected capacity change from 0 to 512 [ 123.679008][ T7862] loop1: detected capacity change from 0 to 512 [ 123.720170][ T7860] EXT4-fs (loop6): 1 orphan inode deleted [ 123.727287][ T7862] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 123.735305][ T7862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.745858][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 123.767873][ T7860] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.790456][ T7862] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1280: Failed to acquire dquot type 1 [ 123.836926][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 123.850542][ T7862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1280: bg 0: block 40: padding at end of block bitmap is not set [ 123.870080][ T7862] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 123.885688][ T7862] EXT4-fs (loop1): 1 truncate cleaned up [ 123.902271][ T7873] loop6: detected capacity change from 0 to 512 [ 123.947198][ T7873] EXT4-fs (loop6): 1 orphan inode deleted [ 123.964279][ T7873] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.967196][ T50] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 123.989563][ T7879] capability: warning: `syz.0.1286' uses deprecated v2 capabilities in a way that may be insecure [ 124.003028][ T7878] loop1: detected capacity change from 0 to 512 [ 124.010148][ T7879] program syz.0.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.024199][ T7878] EXT4-fs: Ignoring removed orlov option [ 124.040522][ T7878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.049272][ T50] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 124.079841][ T7878] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.093572][ T7878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1287: bg 0: block 248: padding at end of block bitmap is not set [ 124.115996][ T7884] netlink: 'syz.6.1288': attribute type 4 has an invalid length. [ 124.120173][ T7878] __quota_error: 228 callbacks suppressed [ 124.120189][ T7878] Quota error (device loop1): write_blk: dquota write failed [ 124.137096][ T7878] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 124.147056][ T7878] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1287: Failed to acquire dquot type 1 [ 124.167125][ T7878] EXT4-fs (loop1): 1 truncate cleaned up [ 124.198119][ T7878] syz.1.1287 (7878) used greatest stack depth: 9248 bytes left [ 124.220520][ T7892] loop1: detected capacity change from 0 to 512 [ 124.248795][ T7894] loop4: detected capacity change from 0 to 736 [ 124.251611][ T7892] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 124.268794][ T7896] loop6: detected capacity change from 0 to 256 [ 124.287791][ T7892] loop1: detected capacity change from 0 to 512 [ 124.297890][ T7892] EXT4-fs: Ignoring removed nobh option [ 124.303607][ T7896] FAT-fs (loop6): IO charset cp949 not found [ 124.313785][ T29] audit: type=1400 audit(1737888079.140:4947): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 124.326050][ T7899] loop3: detected capacity change from 0 to 512 [ 124.366855][ T7892] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.383805][ T7894] netlink: 'syz.4.1290': attribute type 4 has an invalid length. [ 124.391634][ T7894] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1290'. [ 124.418695][ T7899] EXT4-fs (loop3): 1 orphan inode deleted [ 124.425158][ T7899] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.436365][ T40] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.446204][ T40] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 124.474816][ T40] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.484726][ T40] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 124.525339][ T7906] loop3: detected capacity change from 0 to 512 [ 124.532044][ T7906] EXT4-fs: Ignoring removed orlov option [ 124.549370][ T7906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.560025][ T7906] EXT4-fs (loop3): orphan cleanup on readonly fs [ 124.567149][ T7906] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1294: bg 0: block 248: padding at end of block bitmap is not set [ 124.585367][ T7906] Quota error (device loop3): write_blk: dquota write failed [ 124.592873][ T7906] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 124.602850][ T7906] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1294: Failed to acquire dquot type 1 [ 124.616455][ T7906] EXT4-fs (loop3): 1 truncate cleaned up [ 124.623882][ T7906] EXT4-fs: Ignoring removed orlov option [ 124.631257][ T7906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.640164][ T7906] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 124.656587][ T7906] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.1294: Abort forced by user [ 124.666946][ T7906] EXT4-fs (loop3): Remounting filesystem read-only [ 124.673528][ T7906] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 124.684201][ T7906] ext4 filesystem being remounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.778837][ T7915] loop3: detected capacity change from 0 to 512 [ 124.799740][ T7915] EXT4-fs (loop3): 1 orphan inode deleted [ 124.812541][ T7915] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.823216][ T40] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.833141][ T40] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 124.849870][ T7919] loop4: detected capacity change from 0 to 512 [ 124.851349][ T7912] loop0: detected capacity change from 0 to 8192 [ 124.876730][ T330] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.878954][ T7919] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.886609][ T330] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 124.939434][ T7923] loop3: detected capacity change from 0 to 512 [ 124.957222][ T7919] 9pnet_fd: Insufficient options for proto=fd [ 124.965789][ T7926] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.979092][ T7923] EXT4-fs (loop3): 1 orphan inode deleted [ 124.985496][ T7923] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.996449][ T50] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.006366][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 125.049300][ T7930] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 125.080116][ T7932] pim6reg1: entered promiscuous mode [ 125.107144][ T7934] loop4: detected capacity change from 0 to 256 [ 125.109259][ T7936] loop3: detected capacity change from 0 to 764 [ 125.125153][ T7936] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 125.158467][ T7934] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1305'. [ 125.168125][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 125.215012][ T7943] loop1: detected capacity change from 0 to 512 [ 125.231771][ T7942] loop4: detected capacity change from 0 to 512 [ 125.240670][ T7943] EXT4-fs: Ignoring removed orlov option [ 125.246361][ T7946] loop6: detected capacity change from 0 to 512 [ 125.253722][ T7942] EXT4-fs: Ignoring removed orlov option [ 125.268104][ T7943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.279537][ T7946] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.290247][ T7943] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.307809][ T7942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.318354][ T7943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1306: bg 0: block 248: padding at end of block bitmap is not set [ 125.334572][ T7942] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.340820][ T7943] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1306: Failed to acquire dquot type 1 [ 125.342022][ T7942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1307: bg 0: block 248: padding at end of block bitmap is not set [ 125.355140][ T7943] EXT4-fs (loop1): 1 truncate cleaned up [ 125.370124][ T7942] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1307: Failed to acquire dquot type 1 [ 125.384255][ T7942] EXT4-fs (loop4): 1 truncate cleaned up [ 125.395007][ T7942] EXT4-fs: Ignoring removed orlov option [ 125.400977][ T7942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.414981][ T7942] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 125.426736][ T7942] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.1307: Abort forced by user [ 125.439318][ T7942] EXT4-fs (loop4): Remounting filesystem read-only [ 125.445871][ T7942] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 125.457107][ T7942] ext4 filesystem being remounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.503807][ T7961] loop6: detected capacity change from 0 to 512 [ 125.532721][ T7965] netlink: 'syz.1.1314': attribute type 4 has an invalid length. [ 125.548963][ T7961] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 125.564924][ T7961] loop6: detected capacity change from 0 to 512 [ 125.573025][ T7961] EXT4-fs: Ignoring removed nobh option [ 125.596943][ T7961] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.663352][ T7972] loop0: detected capacity change from 0 to 512 [ 125.713911][ T7972] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.747759][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 125.808207][ T7981] loop1: detected capacity change from 0 to 764 [ 125.820497][ T7981] Symlink component flag not implemented [ 125.847466][ T7985] loop1: detected capacity change from 0 to 512 [ 125.847749][ T7985] EXT4-fs: Ignoring removed orlov option [ 125.902376][ T7985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.923176][ T7985] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.936952][ T7985] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1320: bg 0: block 248: padding at end of block bitmap is not set [ 125.937187][ T7985] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1320: Failed to acquire dquot type 1 [ 125.952239][ T7985] EXT4-fs (loop1): 1 truncate cleaned up [ 126.174098][ T7991] loop3: detected capacity change from 0 to 512 [ 126.200662][ T7991] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.482305][ T7998] loop6: detected capacity change from 0 to 512 [ 126.488182][ T7998] EXT4-fs: Ignoring removed orlov option [ 126.489840][ T7998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.590666][ T8001] loop4: detected capacity change from 0 to 512 [ 126.685707][ T8006] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 126.725987][ T8008] loop0: detected capacity change from 0 to 512 [ 126.734179][ T8008] EXT4-fs: inline encryption not supported [ 126.742874][ T7998] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.749694][ T8001] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.765249][ T7998] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1323: bg 0: block 248: padding at end of block bitmap is not set [ 126.783910][ T7998] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1323: Failed to acquire dquot type 1 [ 126.795896][ T7998] EXT4-fs (loop6): 1 truncate cleaned up [ 126.800112][ T8008] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.814628][ T7997] EXT4-fs: Ignoring removed orlov option [ 126.821687][ T7997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.830361][ T7997] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 126.847950][ T7997] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.1323: Abort forced by user [ 126.859208][ T7997] EXT4-fs (loop6): Remounting filesystem read-only [ 126.862547][ T8015] loop0: detected capacity change from 0 to 512 [ 126.865742][ T7997] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 126.876118][ T8015] EXT4-fs: Ignoring removed orlov option [ 126.884353][ T7997] ext4 filesystem being remounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.908705][ T8015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.928043][ T8015] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.957869][ T8015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1327: bg 0: block 248: padding at end of block bitmap is not set [ 126.982477][ T8018] loop4: detected capacity change from 0 to 512 [ 126.999656][ T8020] loop6: detected capacity change from 0 to 512 [ 127.007058][ T8015] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1327: Failed to acquire dquot type 1 [ 127.043385][ T8022] loop1: detected capacity change from 0 to 512 [ 127.061757][ T8015] EXT4-fs (loop0): 1 truncate cleaned up [ 127.070004][ T8018] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.072407][ T8020] EXT4-fs (loop6): 1 orphan inode deleted [ 127.086549][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 127.098438][ T8020] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.134915][ T8022] EXT4-fs mount: 247 callbacks suppressed [ 127.134931][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.155749][ T8015] EXT4-fs: Ignoring removed orlov option [ 127.161978][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 127.181538][ T8015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.192172][ T8022] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.204136][ T8015] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 127.215719][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.225181][ T7254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.248272][ T8015] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.1327: Abort forced by user [ 127.290356][ T8015] EXT4-fs (loop0): Remounting filesystem read-only [ 127.296981][ T8015] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.301226][ T8035] loop6: detected capacity change from 0 to 512 [ 127.315709][ T8015] ext4 filesystem being remounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.322175][ T8039] 9pnet_fd: Insufficient options for proto=fd [ 127.350941][ T8035] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 127.354295][ T8035] loop6: detected capacity change from 0 to 512 [ 127.378797][ T8035] EXT4-fs: Ignoring removed nobh option [ 127.411318][ T8035] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.411385][ T8035] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.442652][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.534564][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.550609][ T8050] loop0: detected capacity change from 0 to 256 [ 127.584459][ T8050] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1336'. [ 127.584771][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 127.598084][ T8052] loop1: detected capacity change from 0 to 512 [ 127.599622][ T8052] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 127.599763][ T8052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.600247][ T8052] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1337: Failed to acquire dquot type 1 [ 127.600732][ T8052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1337: bg 0: block 40: padding at end of block bitmap is not set [ 127.600879][ T8052] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 127.601133][ T8052] EXT4-fs (loop1): 1 truncate cleaned up [ 127.601830][ T8052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.624051][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.657964][ T8057] loop1: detected capacity change from 0 to 512 [ 127.658188][ T8057] EXT4-fs: Ignoring removed orlov option [ 127.658649][ T8057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.659070][ T8057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.659566][ T8057] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1339: bg 0: block 248: padding at end of block bitmap is not set [ 127.659830][ T8057] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1339: Failed to acquire dquot type 1 [ 127.828557][ T8064] loop0: detected capacity change from 0 to 512 [ 127.835054][ T8057] EXT4-fs (loop1): 1 truncate cleaned up [ 127.843341][ T8057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.845938][ T8057] EXT4-fs: Ignoring removed orlov option [ 127.845996][ T8057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.846086][ T8057] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 127.848004][ T8064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.848115][ T8064] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.863321][ T8057] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.1339: Abort forced by user [ 127.863451][ T8057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.863467][ T8057] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.863541][ T8057] ext4 filesystem being remounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.876735][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.885559][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 128.050581][ T8074] loop1: detected capacity change from 0 to 512 [ 128.084780][ T8074] EXT4-fs (loop1): 1 orphan inode deleted [ 128.155511][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 128.171679][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.172246][ T8074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.177989][ T8074] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.224507][ T8078] loop0: detected capacity change from 0 to 512 [ 128.242205][ T8078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.256509][ T8078] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.279372][ T7254] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 128.288755][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.311694][ T8082] loop3: detected capacity change from 0 to 512 [ 128.327428][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.377793][ T8082] EXT4-fs: Ignoring removed orlov option [ 128.406412][ T8082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.433520][ T8082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.460945][ T8094] loop4: detected capacity change from 0 to 512 [ 128.483250][ T8082] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1346: bg 0: block 248: padding at end of block bitmap is not set [ 128.508818][ T8082] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1346: Failed to acquire dquot type 1 [ 128.510871][ T8098] loop6: detected capacity change from 0 to 512 [ 128.526575][ T8082] EXT4-fs (loop3): 1 truncate cleaned up [ 128.533216][ T8082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.540266][ T8101] loop1: detected capacity change from 0 to 512 [ 128.567893][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.570963][ T8094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.590704][ T8094] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.600441][ T8108] loop0: detected capacity change from 0 to 512 [ 128.622180][ T8098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.635347][ T8098] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.644563][ T8108] EXT4-fs (loop0): 1 orphan inode deleted [ 128.645852][ T8112] loop3: detected capacity change from 0 to 512 [ 128.656744][ T8101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.659307][ T8108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.672215][ T8101] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.682928][ T3390] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 128.693986][ T8112] EXT4-fs: inline encryption not supported [ 128.706905][ T8118] 9pnet_fd: Insufficient options for proto=fd [ 128.720199][ T8108] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.720560][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.741279][ T8101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.747845][ T8112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.763445][ T8112] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.769885][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.834096][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.862335][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.874033][ T8101] 9pnet_fd: Insufficient options for proto=fd [ 128.947949][ T8127] loop1: detected capacity change from 0 to 512 [ 128.959010][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.991792][ T8127] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.006853][ T8137] loop4: detected capacity change from 0 to 1024 [ 129.014575][ T8137] EXT4-fs: Ignoring removed orlov option [ 129.056556][ T8137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.098518][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.145271][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.193783][ T8147] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1364'. [ 129.262424][ T8151] loop1: detected capacity change from 0 to 512 [ 129.301131][ T8144] loop0: detected capacity change from 0 to 8192 [ 129.326990][ T8151] EXT4-fs: Ignoring removed orlov option [ 129.343098][ T8151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.370766][ T8151] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.384209][ T8155] loop4: detected capacity change from 0 to 512 [ 129.412095][ T8151] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1366: bg 0: block 248: padding at end of block bitmap is not set [ 129.430920][ T8144] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.456516][ T8151] __quota_error: 77 callbacks suppressed [ 129.456534][ T8151] Quota error (device loop1): write_blk: dquota write failed [ 129.469718][ T8151] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 129.479737][ T8151] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1366: Failed to acquire dquot type 1 [ 129.519193][ T8155] EXT4-fs (loop4): 1 orphan inode deleted [ 129.525379][ T8155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.536860][ T8151] EXT4-fs (loop1): 1 truncate cleaned up [ 129.543831][ T3390] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 129.553699][ T3390] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 129.566925][ T8155] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.627430][ T8161] loop0: detected capacity change from 0 to 512 [ 129.637100][ T8151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.658256][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.677411][ T8161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.721118][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.743093][ T8165] loop4: detected capacity change from 0 to 512 [ 129.750022][ T8161] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.814813][ T8165] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 129.836693][ T8165] EXT4-fs (loop4): orphan cleanup on readonly fs [ 129.855964][ T8165] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 129.866117][ T8165] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 129.875735][ T8165] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1369: Failed to acquire dquot type 1 [ 129.888938][ T8174] 9pnet_fd: Insufficient options for proto=fd [ 129.923328][ T8165] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1369: bg 0: block 40: padding at end of block bitmap is not set [ 129.938286][ T8165] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 129.949125][ T8165] EXT4-fs (loop4): 1 truncate cleaned up [ 129.955475][ T8165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.997535][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.034382][ T29] audit: type=1400 audit(1737888084.850:5005): avc: denied { name_bind } for pid=8175 comm="syz.6.1373" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 130.056079][ T29] audit: type=1400 audit(1737888084.850:5006): avc: denied { node_bind } for pid=8175 comm="syz.6.1373" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 130.077798][ T8178] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.100317][ T8181] loop1: detected capacity change from 0 to 1024 [ 130.128836][ T8181] EXT4-fs: Ignoring removed orlov option [ 130.130886][ T8184] loop6: detected capacity change from 0 to 512 [ 130.161319][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.180390][ T8184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.200361][ T8181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.235915][ T8184] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.251478][ T8193] loop4: detected capacity change from 0 to 512 [ 130.273360][ T8195] loop0: detected capacity change from 0 to 512 [ 130.281303][ T8184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.320746][ T8193] EXT4-fs (loop4): 1 orphan inode deleted [ 130.332007][ T8195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.345483][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 130.355310][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 130.382137][ T8193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.410705][ T8195] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.423900][ T8193] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.447174][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.480621][ T8195] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.513505][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.576606][ T8209] loop3: detected capacity change from 0 to 256 [ 130.589854][ T8211] loop1: detected capacity change from 0 to 1024 [ 130.605472][ T8209] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1384'. [ 130.606073][ T8213] loop4: detected capacity change from 0 to 512 [ 130.618055][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 130.649086][ T8211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.671209][ T8211] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.685345][ T29] audit: type=1400 audit(1737888085.500:5007): avc: denied { name_bind } for pid=8210 comm="syz.1.1385" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.707178][ T8213] EXT4-fs: Ignoring removed orlov option [ 130.715249][ T8213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.730779][ T8220] loop3: detected capacity change from 0 to 512 [ 130.764829][ T8213] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.780418][ T8220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.796780][ T8220] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.959312][ T8213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1383: bg 0: block 248: padding at end of block bitmap is not set [ 130.982736][ T8213] Quota error (device loop4): write_blk: dquota write failed [ 130.990190][ T8213] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1383: Failed to acquire dquot type 1 [ 131.025236][ T8220] 9pnet_fd: Insufficient options for proto=fd [ 131.034364][ T8213] EXT4-fs (loop4): 1 truncate cleaned up [ 131.049549][ T8213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.075057][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.082332][ T8213] EXT4-fs: Ignoring removed orlov option [ 131.099860][ T8213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.129127][ T8213] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 131.154594][ T8228] loop3: detected capacity change from 0 to 512 [ 131.169690][ T8213] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.1383: Abort forced by user [ 131.188761][ T8213] EXT4-fs (loop4): Remounting filesystem read-only [ 131.195334][ T8213] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 131.228011][ T8213] ext4 filesystem being remounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.249414][ T8228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.276714][ T8228] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.301670][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.377603][ T8228] 9pnet_fd: Insufficient options for proto=fd [ 131.489692][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.577337][ T8249] loop4: detected capacity change from 0 to 512 [ 131.628052][ T8251] loop6: detected capacity change from 0 to 512 [ 131.639332][ T8249] EXT4-fs (loop4): 1 orphan inode deleted [ 131.645474][ T8249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.663275][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 131.681112][ T8249] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.696243][ T8251] EXT4-fs (loop6): 1 orphan inode deleted [ 131.702385][ T8251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.716335][ T3390] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 131.748573][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.760150][ T8251] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.818340][ T8258] loop0: detected capacity change from 0 to 8192 [ 131.825635][ T7254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.828040][ T8263] loop4: detected capacity change from 0 to 512 [ 131.841238][ T8263] EXT4-fs: Ignoring removed orlov option [ 131.849314][ T8263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.849748][ T8261] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 131.865758][ T8261] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1398'. [ 131.875751][ T8263] EXT4-fs (loop4): orphan cleanup on readonly fs [ 131.883968][ T8263] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1396: bg 0: block 248: padding at end of block bitmap is not set [ 131.922306][ T8269] loop6: detected capacity change from 0 to 1024 [ 131.929171][ T8263] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1396: Failed to acquire dquot type 1 [ 131.938779][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.941353][ T8269] EXT4-fs: Ignoring removed orlov option [ 131.960142][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.971976][ T8269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.972064][ T8263] EXT4-fs (loop4): 1 truncate cleaned up [ 131.992379][ T8263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.011667][ T7254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.021134][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.047973][ T8273] loop6: detected capacity change from 0 to 512 [ 132.052252][ T8275] loop4: detected capacity change from 0 to 256 [ 132.074178][ T8275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1402'. [ 132.084017][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 132.085208][ T8273] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.128706][ T8273] 9pnet_fd: Insufficient options for proto=fd [ 132.152655][ T8284] netlink: 'syz.4.1404': attribute type 4 has an invalid length. [ 132.160500][ T8284] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1404'. [ 132.241746][ T8288] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.263315][ T8290] loop6: detected capacity change from 0 to 512 [ 132.283276][ T8290] EXT4-fs (loop6): 1 orphan inode deleted [ 132.290870][ T8290] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.303066][ T8296] loop4: detected capacity change from 0 to 1024 [ 132.305947][ T3390] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 132.311796][ T8296] EXT4-fs: Ignoring removed orlov option [ 132.353124][ T8299] loop6: detected capacity change from 0 to 1024 [ 132.359787][ T8299] EXT4-fs: Ignoring removed orlov option [ 132.513763][ T8306] loop6: detected capacity change from 0 to 512 [ 132.521665][ T8306] EXT4-fs: Ignoring removed orlov option [ 132.530662][ T8306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.544278][ T8306] EXT4-fs (loop6): orphan cleanup on readonly fs [ 132.549186][ T8308] loop4: detected capacity change from 0 to 512 [ 132.552921][ T8306] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1412: bg 0: block 248: padding at end of block bitmap is not set [ 132.576016][ T8311] loop3: detected capacity change from 0 to 512 [ 132.576578][ T8306] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1412: Failed to acquire dquot type 1 [ 132.594293][ T8306] EXT4-fs (loop6): 1 truncate cleaned up [ 132.600768][ T8308] EXT4-fs: Ignoring removed orlov option [ 132.625859][ T8308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.641377][ T8308] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.652338][ T8308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1413: bg 0: block 248: padding at end of block bitmap is not set [ 132.666726][ T8311] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 132.672460][ T8308] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1413: Failed to acquire dquot type 1 [ 132.692686][ T8311] loop3: detected capacity change from 0 to 512 [ 132.699440][ T8311] EXT4-fs: Ignoring removed nobh option [ 132.716897][ T8308] EXT4-fs (loop4): 1 truncate cleaned up [ 132.719878][ T8311] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.767363][ T8324] loop4: detected capacity change from 0 to 512 [ 132.790308][ T8324] EXT4-fs (loop4): 1 orphan inode deleted [ 132.804617][ T8324] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.816565][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 132.849606][ T8329] loop6: detected capacity change from 0 to 512 [ 132.860665][ T8329] EXT4-fs: inline encryption not supported [ 132.887545][ T8334] loop4: detected capacity change from 0 to 1024 [ 132.894094][ T8334] EXT4-fs: Ignoring removed orlov option [ 132.902032][ T8329] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.032179][ T8345] loop4: detected capacity change from 0 to 512 [ 133.044943][ T8343] netlink: 'syz.6.1424': attribute type 4 has an invalid length. [ 133.052854][ T8343] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1424'. [ 133.063073][ T8345] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.064350][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.071101][ T8345] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 133.080869][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.091613][ T8345] System zones: 0-1, 15-15, 18-18, 34-34 [ 133.101148][ T8345] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.107774][ T8345] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 133.122358][ T8345] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 133.129285][ T8345] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1425: bad orphan inode 16 [ 133.139564][ T8345] ext4_test_bit(bit=15, block=18) = 1 [ 133.144953][ T8345] is_bad_inode(inode)=0 [ 133.149166][ T8345] NEXT_ORPHAN(inode)=0 [ 133.153258][ T8345] max_ino=32 [ 133.156497][ T8345] i_nlink=2 [ 133.205214][ T8353] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1427'. [ 133.452975][ T8357] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.496752][ T8361] loop4: detected capacity change from 0 to 512 [ 133.503526][ T8361] EXT4-fs: inline encryption not supported [ 133.516331][ T8159] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 498: padding at end of block bitmap is not set [ 133.537882][ T8361] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.554989][ T8363] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1432'. [ 133.590752][ T8370] loop0: detected capacity change from 0 to 512 [ 133.611024][ T8370] EXT4-fs: inline encryption not supported [ 133.648296][ T8370] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.653735][ T8378] loop4: detected capacity change from 0 to 512 [ 133.672067][ T8372] loop3: detected capacity change from 0 to 1024 [ 133.688802][ T8378] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.696825][ T8378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 133.696940][ T8380] loop1: detected capacity change from 0 to 512 [ 133.706350][ T8372] ext4: Unknown parameter 'silent' [ 133.715352][ T8378] System zones: 0-1, 15-15, 18-18, 34-34 [ 133.722213][ T8378] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.728751][ T8378] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 133.743370][ T8378] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 133.754608][ T8378] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1437: bad orphan inode 16 [ 133.772807][ T8378] ext4_test_bit(bit=15, block=18) = 1 [ 133.778266][ T8378] is_bad_inode(inode)=0 [ 133.782472][ T8378] NEXT_ORPHAN(inode)=0 [ 133.786595][ T8378] max_ino=32 [ 133.789814][ T8378] i_nlink=2 [ 133.793042][ T8380] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 133.832932][ T8380] loop1: detected capacity change from 0 to 512 [ 133.838936][ T8388] loop0: detected capacity change from 0 to 512 [ 133.848689][ T8380] EXT4-fs: Ignoring removed nobh option [ 133.869273][ T8388] EXT4-fs (loop0): 1 orphan inode deleted [ 133.885373][ T8388] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.889457][ T40] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 133.916170][ T8394] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.941091][ T8380] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.959470][ T8396] pim6reg1: entered promiscuous mode [ 133.964923][ T40] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 134.027405][ T8407] loop3: detected capacity change from 0 to 1024 [ 134.054286][ T8407] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.062914][ T8404] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.084848][ T8414] loop6: detected capacity change from 0 to 512 [ 134.099850][ T8414] EXT4-fs: inline encryption not supported [ 134.139327][ T8414] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.196602][ T8428] SELinux: policydb version 0 does not match my version range 15-34 [ 134.204906][ T8428] SELinux: failed to load policy [ 134.215561][ T8428] loop6: detected capacity change from 0 to 1024 [ 134.223119][ T8428] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.234056][ T8428] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.261004][ T8428] JBD2: no valid journal superblock found [ 134.266847][ T8428] EXT4-fs (loop6): Could not load journal inode [ 134.309733][ T8431] loop0: detected capacity change from 0 to 512 [ 134.343407][ T8431] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 134.359949][ T8431] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.374332][ T8431] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1455: Failed to acquire dquot type 1 [ 134.392790][ T8434] loop6: detected capacity change from 0 to 1024 [ 134.400541][ T8434] EXT4-fs: Ignoring removed orlov option [ 134.418604][ T8431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1455: bg 0: block 40: padding at end of block bitmap is not set [ 134.455148][ T8431] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 134.489873][ T8431] EXT4-fs (loop0): 1 truncate cleaned up [ 134.615745][ T8447] loop0: detected capacity change from 0 to 512 [ 134.672323][ T8447] EXT4-fs (loop0): 1 orphan inode deleted [ 134.683629][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 134.683644][ T29] audit: type=1326 audit(1737888089.510:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.713604][ T29] audit: type=1326 audit(1737888089.510:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb30884b690 code=0x7ffc0000 [ 134.737326][ T29] audit: type=1326 audit(1737888089.510:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.766803][ T8449] netlink: 'syz.1.1462': attribute type 4 has an invalid length. [ 134.774590][ T8449] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1462'. [ 134.786921][ T56] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 134.796748][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 134.826037][ T8447] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.842962][ T29] audit: type=1326 audit(1737888089.590:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.866485][ T29] audit: type=1326 audit(1737888089.590:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.866516][ T29] audit: type=1326 audit(1737888089.590:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.866594][ T29] audit: type=1326 audit(1737888089.590:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.866620][ T29] audit: type=1326 audit(1737888089.590:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.866720][ T29] audit: type=1326 audit(1737888089.590:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.1.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 134.891637][ T1759] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 135.010739][ T8457] loop0: detected capacity change from 0 to 512 [ 135.011051][ T8457] EXT4-fs: inline encryption not supported [ 135.040357][ T8457] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.084001][ T8467] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 135.091975][ T8467] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1468'. [ 135.118169][ T8465] pim6reg1: entered promiscuous mode [ 135.124480][ T8469] loop0: detected capacity change from 0 to 512 [ 135.135855][ T8469] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 135.144343][ T8469] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.164139][ T8473] loop6: detected capacity change from 0 to 1024 [ 135.174433][ T8469] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1469: Failed to acquire dquot type 1 [ 135.178321][ T8473] EXT4-fs: Ignoring removed orlov option [ 135.191037][ T8469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1469: bg 0: block 40: padding at end of block bitmap is not set [ 135.209236][ T8469] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 135.227889][ T8469] EXT4-fs (loop0): 1 truncate cleaned up [ 135.231308][ T8478] loop1: detected capacity change from 0 to 256 [ 135.260539][ T8478] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1472'. [ 135.282492][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1472'. [ 135.293396][ T8483] netlink: 'syz.0.1474': attribute type 4 has an invalid length. [ 135.332165][ T8485] loop1: detected capacity change from 0 to 512 [ 135.332843][ T8487] loop0: detected capacity change from 0 to 512 [ 135.365623][ T8487] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.370534][ T8485] EXT4-fs (loop1): 1 orphan inode deleted [ 135.382207][ T40] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 135.395638][ T8485] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.423651][ T40] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 135.488813][ T8503] loop4: detected capacity change from 0 to 1024 [ 135.495946][ T8503] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.507001][ T8503] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.520905][ T8503] JBD2: no valid journal superblock found [ 135.526725][ T8503] EXT4-fs (loop4): Could not load journal inode [ 135.600841][ T8511] loop4: detected capacity change from 0 to 512 [ 135.615717][ T8513] loop0: detected capacity change from 0 to 512 [ 135.629093][ T8511] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 135.637036][ T8511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 135.651079][ T8511] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.657414][ T8511] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.664110][ T8511] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.678809][ T8511] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 135.687583][ T8513] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.698249][ T8511] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1484: bad orphan inode 16 [ 135.709643][ T8511] ext4_test_bit(bit=15, block=18) = 1 [ 135.715114][ T8511] is_bad_inode(inode)=0 [ 135.719328][ T8511] NEXT_ORPHAN(inode)=0 [ 135.723557][ T8511] max_ino=32 [ 135.726802][ T8511] i_nlink=2 [ 135.779143][ T8519] loop4: detected capacity change from 0 to 256 [ 135.803808][ T8522] netlink: 'syz.1.1486': attribute type 4 has an invalid length. [ 135.814181][ T8519] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1487'. [ 135.836229][ T8524] loop1: detected capacity change from 0 to 1024 [ 135.841004][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 135.844825][ T8524] EXT4-fs: Ignoring removed orlov option [ 135.992760][ T8529] netlink: 'syz.4.1489': attribute type 4 has an invalid length. [ 136.000613][ T8529] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1489'. [ 136.061156][ T8536] loop1: detected capacity change from 0 to 512 [ 136.069820][ T8536] EXT4-fs: inline encryption not supported [ 136.087993][ T8536] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.203692][ T8542] loop1: detected capacity change from 0 to 8192 [ 136.226867][ T8545] loop4: detected capacity change from 0 to 8192 [ 136.279128][ T8545] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.337628][ T8551] loop4: detected capacity change from 0 to 512 [ 136.351725][ T8548] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.378607][ T8551] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.386606][ T8551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 136.400701][ T8551] System zones: 0-1, 15-15, 18-18, 34-34 [ 136.406864][ T8551] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.419187][ T8551] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 136.427825][ T8555] netlink: 'syz.6.1498': attribute type 4 has an invalid length. [ 136.433820][ T8551] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 136.449595][ T8551] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1497: bad orphan inode 16 [ 136.469232][ T8551] ext4_test_bit(bit=15, block=18) = 1 [ 136.474759][ T8551] is_bad_inode(inode)=0 [ 136.479122][ T8551] NEXT_ORPHAN(inode)=0 [ 136.483277][ T8551] max_ino=32 [ 136.486556][ T8551] i_nlink=2 [ 136.494698][ T8557] loop6: detected capacity change from 0 to 1024 [ 136.504935][ T8557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.513823][ T8557] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 136.524803][ T8557] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 136.535439][ T8557] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.547057][ T8557] EXT4-fs (loop6): invalid journal inode [ 136.554648][ T8557] EXT4-fs (loop6): can't get journal size [ 136.562877][ T8557] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.1499: blocks 2-2 from inode overlap system zone [ 136.578254][ T8557] EXT4-fs (loop6): failed to initialize system zone (-117) [ 136.585622][ T8557] EXT4-fs (loop6): mount failed [ 136.610906][ T8562] loop4: detected capacity change from 0 to 512 [ 136.661936][ T8562] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 136.675765][ T8562] loop4: detected capacity change from 0 to 512 [ 136.682953][ T8562] EXT4-fs: Ignoring removed nobh option [ 136.710642][ T8562] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.722896][ T8568] netlink: 'syz.6.1504': attribute type 4 has an invalid length. [ 136.730739][ T8568] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1504'. [ 136.984552][ T8580] loop6: detected capacity change from 0 to 512 [ 136.993161][ T8580] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 137.006808][ T8580] EXT4-fs (loop6): orphan cleanup on readonly fs [ 137.013789][ T8580] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1507: Failed to acquire dquot type 1 [ 137.044123][ T8585] netlink: 'syz.1.1509': attribute type 4 has an invalid length. [ 137.071306][ T8587] loop0: detected capacity change from 0 to 512 [ 137.083123][ T8580] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1507: bg 0: block 40: padding at end of block bitmap is not set [ 137.086771][ T8589] loop1: detected capacity change from 0 to 1024 [ 137.103927][ T8587] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 137.112844][ T8589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.123616][ T8580] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 137.141313][ T8589] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 137.142037][ T8587] EXT4-fs (loop0): orphan cleanup on readonly fs [ 137.152275][ T8589] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 137.170318][ T8580] EXT4-fs (loop6): 1 truncate cleaned up [ 137.170976][ T8589] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 137.182118][ T8594] loop3: detected capacity change from 0 to 512 [ 137.192631][ T8587] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1510: Failed to acquire dquot type 1 [ 137.205011][ T8589] EXT4-fs (loop1): invalid journal inode [ 137.215409][ T8589] EXT4-fs (loop1): can't get journal size [ 137.215510][ T8587] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1510: bg 0: block 40: padding at end of block bitmap is not set [ 137.221737][ T8589] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1512: blocks 2-2 from inode overlap system zone [ 137.238447][ T8587] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 137.256207][ T8589] EXT4-fs (loop1): failed to initialize system zone (-117) [ 137.258605][ T8587] EXT4-fs (loop0): 1 truncate cleaned up [ 137.266214][ T8589] EXT4-fs (loop1): mount failed [ 137.273588][ T8594] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.313011][ T8599] loop6: detected capacity change from 0 to 256 [ 137.351297][ T8599] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1514'. [ 137.375207][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1514'. [ 137.507644][ T8613] SELinux: policydb version 0 does not match my version range 15-34 [ 137.508100][ T8610] loop4: detected capacity change from 0 to 512 [ 137.549971][ T8613] SELinux: failed to load policy [ 137.551087][ T8616] loop0: detected capacity change from 0 to 1024 [ 137.580071][ T8613] loop1: detected capacity change from 0 to 1024 [ 137.594562][ T8613] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.605616][ T8613] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 137.620333][ T8618] netlink: 'syz.6.1522': attribute type 4 has an invalid length. [ 137.636572][ T8613] JBD2: no valid journal superblock found [ 137.642399][ T8613] EXT4-fs (loop1): Could not load journal inode [ 137.657015][ T8616] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.688044][ T8610] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.740618][ T8627] loop6: detected capacity change from 0 to 512 [ 137.749432][ T8627] EXT4-fs: inline encryption not supported [ 137.818819][ T8627] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.903611][ T8634] loop1: detected capacity change from 0 to 512 [ 137.948748][ T8634] EXT4-fs: inline encryption not supported [ 137.963831][ T8641] loop6: detected capacity change from 0 to 512 [ 137.966326][ T8622] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 498: padding at end of block bitmap is not set [ 138.044097][ T8641] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 138.053024][ T8634] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.085879][ T8641] loop6: detected capacity change from 0 to 512 [ 138.110087][ T8641] EXT4-fs: Ignoring removed nobh option [ 138.131992][ T8648] loop1: detected capacity change from 0 to 512 [ 138.151638][ T8641] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.178714][ T8648] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.347945][ T8659] loop0: detected capacity change from 0 to 256 [ 138.385262][ T8659] FAT-fs (loop0): IO charset cp949 not found [ 138.398927][ T8657] loop1: detected capacity change from 0 to 8192 [ 138.649475][ T8666] netlink: 'syz.3.1533': attribute type 4 has an invalid length. [ 138.722655][ T8670] loop3: detected capacity change from 0 to 256 [ 138.825665][ T8678] loop6: detected capacity change from 0 to 256 [ 138.860882][ T8680] loop3: detected capacity change from 0 to 512 [ 138.889602][ T8682] loop6: detected capacity change from 0 to 1024 [ 138.899877][ T8680] EXT4-fs: Ignoring removed orlov option [ 138.911880][ T8680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.925089][ T8680] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.925658][ T8682] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.943372][ T8680] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1540: bg 0: block 248: padding at end of block bitmap is not set [ 138.960655][ T8680] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1540: Failed to acquire dquot type 1 [ 138.974229][ T8680] EXT4-fs (loop3): 1 truncate cleaned up [ 139.040078][ T8694] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 139.144920][ T8699] loop0: detected capacity change from 0 to 1024 [ 139.151844][ T8699] EXT4-fs: Ignoring removed orlov option [ 139.330225][ T8706] pim6reg1: entered promiscuous mode [ 139.349082][ T8707] loop3: detected capacity change from 0 to 512 [ 139.534172][ T8719] loop0: detected capacity change from 0 to 512 [ 139.559056][ T8719] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.571262][ T8707] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.583621][ T8723] netlink: 'syz.1.1555': attribute type 4 has an invalid length. [ 139.689784][ T8728] loop1: detected capacity change from 0 to 8192 [ 139.785027][ T8733] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.814183][ T8741] loop0: detected capacity change from 0 to 1024 [ 139.821124][ T8741] EXT4-fs: Ignoring removed orlov option [ 139.869141][ T8744] loop4: detected capacity change from 0 to 512 [ 139.878817][ T8744] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.887378][ T8744] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.894278][ T8744] __quota_error: 100 callbacks suppressed [ 139.894293][ T8744] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 139.910235][ T8744] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 139.919694][ T8744] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1561: Failed to acquire dquot type 1 [ 139.966070][ T8744] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1561: bg 0: block 40: padding at end of block bitmap is not set [ 140.039152][ T8744] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 140.051108][ T8744] EXT4-fs (loop4): 1 truncate cleaned up [ 140.062205][ T8750] loop0: detected capacity change from 0 to 512 [ 140.076938][ T8750] EXT4-fs: Ignoring removed orlov option [ 140.090173][ T8750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.106636][ T8750] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.114178][ T8750] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1563: bg 0: block 248: padding at end of block bitmap is not set [ 140.151851][ T8755] loop4: detected capacity change from 0 to 512 [ 140.163911][ T8750] Quota error (device loop0): write_blk: dquota write failed [ 140.171570][ T8750] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 140.181530][ T8750] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1563: Failed to acquire dquot type 1 [ 140.213611][ T8750] EXT4-fs (loop0): 1 truncate cleaned up [ 140.222958][ T8755] EXT4-fs (loop4): 1 orphan inode deleted [ 140.229872][ T8755] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.241880][ T40] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 140.251685][ T40] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 140.412419][ T8767] loop0: detected capacity change from 0 to 1024 [ 140.429904][ T8767] EXT4-fs: Ignoring removed orlov option [ 140.547698][ T8771] loop0: detected capacity change from 0 to 512 [ 140.555483][ T8771] EXT4-fs: Ignoring removed orlov option [ 140.572083][ T8771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.583905][ T8771] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.590976][ T8771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1572: bg 0: block 248: padding at end of block bitmap is not set [ 140.610486][ T8771] Quota error (device loop0): write_blk: dquota write failed [ 140.617959][ T8771] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 140.628013][ T8771] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1572: Failed to acquire dquot type 1 [ 140.642464][ T8771] EXT4-fs (loop0): 1 truncate cleaned up [ 140.818927][ T29] audit: type=1326 audit(1737888095.640:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 140.864999][ T29] audit: type=1326 audit(1737888095.670:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 140.888653][ T29] audit: type=1326 audit(1737888095.670:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30884cd29 code=0x7ffc0000 [ 140.960166][ T8646] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 498: padding at end of block bitmap is not set [ 140.998706][ T8789] loop3: detected capacity change from 0 to 256 [ 141.039141][ T8789] __nla_validate_parse: 2 callbacks suppressed [ 141.039161][ T8789] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1577'. [ 141.057694][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 141.120412][ T8791] loop0: detected capacity change from 0 to 1024 [ 141.144209][ T8791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.168355][ T8796] loop1: detected capacity change from 0 to 512 [ 141.176963][ T8791] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.188001][ T8791] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 141.192390][ T8796] EXT4-fs: inline encryption not supported [ 141.226685][ T8791] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.255487][ T8791] EXT4-fs (loop0): invalid journal inode [ 141.261208][ T8791] EXT4-fs (loop0): can't get journal size [ 141.271560][ T8796] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.276523][ T8791] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.1578: blocks 2-2 from inode overlap system zone [ 141.336382][ T8791] EXT4-fs (loop0): failed to initialize system zone (-117) [ 141.339165][ T8805] loop3: detected capacity change from 0 to 8192 [ 141.351822][ T8791] EXT4-fs (loop0): mount failed [ 141.397319][ T8805] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 141.453242][ T8817] loop1: detected capacity change from 0 to 256 [ 141.519825][ T8815] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.573275][ T8829] loop4: detected capacity change from 0 to 1024 [ 141.585828][ T8829] EXT4-fs: Ignoring removed orlov option [ 141.602835][ T8833] loop1: detected capacity change from 0 to 1024 [ 141.632643][ T8833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.695775][ T8833] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.706900][ T8833] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 141.726833][ T8833] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.737157][ T8833] EXT4-fs (loop1): invalid journal inode [ 141.742855][ T8833] EXT4-fs (loop1): can't get journal size [ 141.749874][ T8833] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1596: blocks 2-2 from inode overlap system zone [ 141.786376][ T8833] EXT4-fs (loop1): failed to initialize system zone (-117) [ 141.817413][ T8833] EXT4-fs (loop1): mount failed [ 141.918032][ T8845] loop3: detected capacity change from 0 to 512 [ 141.924604][ T8845] EXT4-fs: inline encryption not supported [ 141.952260][ T8850] loop6: detected capacity change from 0 to 256 [ 141.961828][ T8845] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.067995][ T8861] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.069594][ T8858] loop6: detected capacity change from 0 to 512 [ 142.106617][ T8858] EXT4-fs: Ignoring removed orlov option [ 142.128580][ T8858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.160727][ T8868] loop4: detected capacity change from 0 to 512 [ 142.170677][ T8867] loop1: detected capacity change from 0 to 512 [ 142.190640][ T8868] EXT4-fs: Ignoring removed orlov option [ 142.205358][ T8868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.240094][ T8858] EXT4-fs (loop6): orphan cleanup on readonly fs [ 142.247735][ T8868] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.256288][ T8868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1609: bg 0: block 248: padding at end of block bitmap is not set [ 142.273868][ T8867] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.304500][ T8868] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1609: Failed to acquire dquot type 1 [ 142.334642][ T8868] EXT4-fs (loop4): 1 truncate cleaned up [ 142.340961][ T8858] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1605: bg 0: block 248: padding at end of block bitmap is not set [ 142.358950][ T8858] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1605: Failed to acquire dquot type 1 [ 142.376195][ T8858] EXT4-fs (loop6): 1 truncate cleaned up [ 142.390478][ T8879] loop3: detected capacity change from 0 to 1024 [ 142.396450][ T8858] EXT4-fs: Ignoring removed orlov option [ 142.408433][ T8879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.422700][ T8879] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 142.433739][ T8879] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 142.461314][ T8858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.467106][ T8879] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.485882][ T8879] EXT4-fs (loop3): invalid journal inode [ 142.491748][ T8858] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 142.492357][ T8879] EXT4-fs (loop3): can't get journal size [ 142.522710][ T8879] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.1612: blocks 2-2 from inode overlap system zone [ 142.560190][ T8858] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.1605: Abort forced by user [ 142.571322][ T8879] EXT4-fs (loop3): failed to initialize system zone (-117) [ 142.585726][ T8888] loop4: detected capacity change from 0 to 512 [ 142.600794][ T8892] loop0: detected capacity change from 0 to 256 [ 142.610422][ T8858] EXT4-fs (loop6): Remounting filesystem read-only [ 142.617085][ T8858] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 142.637006][ T8879] EXT4-fs (loop3): mount failed [ 142.642952][ T8858] ext4 filesystem being remounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.656504][ T8888] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 142.664549][ T8888] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.708755][ T8888] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1615: Failed to acquire dquot type 1 [ 142.720596][ T8888] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1615: bg 0: block 40: padding at end of block bitmap is not set [ 142.767185][ T8888] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 142.796681][ T8888] EXT4-fs (loop4): 1 truncate cleaned up [ 142.801427][ T8905] loop3: detected capacity change from 0 to 512 [ 142.837803][ T8908] loop1: detected capacity change from 0 to 1024 [ 142.846069][ T8910] loop0: detected capacity change from 0 to 512 [ 142.847710][ T8908] EXT4-fs: Ignoring removed orlov option [ 142.852788][ T8905] EXT4-fs: inline encryption not supported [ 142.871330][ T8901] loop6: detected capacity change from 0 to 8192 [ 142.892271][ T8905] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.903845][ T8910] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.943810][ T8919] loop4: detected capacity change from 0 to 512 [ 142.980814][ T8919] EXT4-fs: inline encryption not supported [ 143.009001][ T8919] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.031798][ T8925] loop3: detected capacity change from 0 to 256 [ 143.099294][ T8927] netlink: 'syz.3.1629': attribute type 4 has an invalid length. [ 143.107204][ T8927] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1629'. [ 143.126609][ T8929] pim6reg1: entered promiscuous mode [ 143.144815][ T8931] loop1: detected capacity change from 0 to 256 [ 143.162656][ T8933] loop4: detected capacity change from 0 to 512 [ 143.170199][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 143.187923][ T8933] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.237465][ T8940] loop0: detected capacity change from 0 to 256 [ 143.263493][ T8940] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1634'. [ 143.273688][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 143.288324][ T8943] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.350100][ T8948] loop3: detected capacity change from 0 to 512 [ 143.367107][ T8950] loop4: detected capacity change from 0 to 512 [ 143.373856][ T8954] loop0: detected capacity change from 0 to 1024 [ 143.380986][ T8954] EXT4-fs: Ignoring removed orlov option [ 143.396571][ T8948] EXT4-fs (loop3): 1 orphan inode deleted [ 143.416748][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 143.452689][ T8948] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.484936][ T8963] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1642'. [ 143.505268][ T8950] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 143.534592][ T8967] loop0: detected capacity change from 0 to 256 [ 143.546799][ T8950] loop4: detected capacity change from 0 to 512 [ 143.555070][ T8950] EXT4-fs: Ignoring removed nobh option [ 143.575710][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 143.620145][ T8950] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.658156][ T8972] pim6reg1: entered promiscuous mode [ 143.726220][ T8977] loop6: detected capacity change from 0 to 8192 [ 143.779799][ T8977] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 143.864773][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.873831][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.909996][ T8995] loop6: detected capacity change from 0 to 512 [ 143.924540][ T8995] EXT4-fs: Ignoring removed orlov option [ 143.952397][ T8995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.963569][ T8995] EXT4-fs (loop6): orphan cleanup on readonly fs [ 143.972285][ T8995] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1653: bg 0: block 248: padding at end of block bitmap is not set [ 143.993833][ T8995] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1653: Failed to acquire dquot type 1 [ 144.027263][ T8995] EXT4-fs (loop6): 1 truncate cleaned up [ 144.090659][ T9001] loop6: detected capacity change from 0 to 512 [ 144.138622][ T9001] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.309781][ T9008] 9pnet_fd: Insufficient options for proto=fd [ 144.436227][ T9013] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.520855][ T9016] loop0: detected capacity change from 0 to 512 [ 144.543018][ T9019] loop1: detected capacity change from 0 to 256 [ 144.582317][ T9016] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.632318][ T9023] loop1: detected capacity change from 0 to 512 [ 144.845229][ T9023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 144.853275][ T9023] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 144.862965][ T9023] System zones: 0-1, 15-15, 18-18, 34-34 [ 144.869155][ T9023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.875646][ T9023] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.890210][ T9023] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 144.897337][ T9023] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1661: bad orphan inode 16 [ 144.909225][ T9023] ext4_test_bit(bit=15, block=18) = 1 [ 144.914690][ T9023] is_bad_inode(inode)=0 [ 144.918886][ T9023] NEXT_ORPHAN(inode)=0 [ 144.923052][ T9023] max_ino=32 [ 144.926307][ T9023] i_nlink=2 [ 144.943023][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 144.943039][ T29] audit: type=1400 audit(1737888099.760:5681): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 145.045763][ T29] audit: type=1400 audit(1737888099.860:5682): avc: denied { read } for pid=9022 comm="syz.1.1661" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 145.112614][ T9031] loop1: detected capacity change from 0 to 256 [ 145.121395][ T9034] loop0: detected capacity change from 0 to 1024 [ 145.128374][ T9034] EXT4-fs: Ignoring removed orlov option [ 145.193655][ T29] audit: type=1400 audit(1737888099.900:5683): avc: denied { create } for pid=9022 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.213271][ T29] audit: type=1400 audit(1737888099.950:5684): avc: denied { create } for pid=9032 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.233850][ T29] audit: type=1400 audit(1737888099.950:5685): avc: denied { write } for pid=9032 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.236456][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.254457][ T29] audit: type=1400 audit(1737888099.950:5686): avc: denied { read } for pid=9032 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.276293][ T9039] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.283085][ T29] audit: type=1400 audit(1737888100.000:5687): avc: denied { write } for pid=9033 comm="syz.0.1667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.313682][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.314264][ T29] audit: type=1400 audit(1737888100.000:5688): avc: denied { add_name } for pid=9033 comm="syz.0.1667" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.342459][ T29] audit: type=1400 audit(1737888100.000:5689): avc: denied { create } for pid=9033 comm="syz.0.1667" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.362640][ T29] audit: type=1400 audit(1737888100.000:5690): avc: denied { write } for pid=9041 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.455399][ T9046] loop1: detected capacity change from 0 to 256 [ 145.577996][ T9052] loop0: detected capacity change from 0 to 512 [ 145.584679][ T9052] EXT4-fs: Ignoring removed orlov option [ 145.587278][ T9053] loop1: detected capacity change from 0 to 256 [ 145.602459][ T9052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.621715][ T9052] EXT4-fs (loop0): orphan cleanup on readonly fs [ 145.638866][ T9053] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1672'. [ 145.648518][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 145.659129][ T9052] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1674: bg 0: block 248: padding at end of block bitmap is not set [ 145.687174][ T9052] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1674: Failed to acquire dquot type 1 [ 145.718095][ T9052] EXT4-fs (loop0): 1 truncate cleaned up [ 145.777435][ T9063] loop1: detected capacity change from 0 to 512 [ 145.798860][ T9067] loop0: detected capacity change from 0 to 1024 [ 145.823940][ T9067] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.834931][ T9067] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 145.855469][ T9063] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.858218][ T9074] loop6: detected capacity change from 0 to 512 [ 145.863476][ T9063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 145.874801][ T9067] JBD2: no valid journal superblock found [ 145.877766][ T9063] System zones: 0-1, 15-15, 18-18 [ 145.883497][ T9067] EXT4-fs (loop0): Could not load journal inode [ 145.894910][ T9063] , 34-34 [ 145.898367][ T9063] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.904741][ T9063] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.919378][ T9063] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 145.934364][ T9063] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1677: bad orphan inode 16 [ 145.959265][ T9063] ext4_test_bit(bit=15, block=18) = 1 [ 145.964698][ T9063] is_bad_inode(inode)=0 [ 145.968806][ T9074] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 145.968973][ T9063] NEXT_ORPHAN(inode)=0 [ 145.981117][ T9063] max_ino=32 [ 145.981789][ T9074] EXT4-fs (loop6): orphan cleanup on readonly fs [ 145.984316][ T9063] i_nlink=2 [ 145.996100][ T9074] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1683: Failed to acquire dquot type 1 [ 146.010253][ T9074] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1683: bg 0: block 40: padding at end of block bitmap is not set [ 146.024905][ T9074] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 146.077169][ T9085] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.111541][ T9074] EXT4-fs (loop6): 1 truncate cleaned up [ 146.241350][ T9098] loop1: detected capacity change from 0 to 256 [ 146.312193][ T9104] loop4: detected capacity change from 0 to 1024 [ 146.322617][ T9098] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1689'. [ 146.329433][ T9104] EXT4-fs: Ignoring removed orlov option [ 146.340154][ T9108] loop6: detected capacity change from 0 to 256 [ 146.352506][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 146.382285][ T9108] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1694'. [ 146.391893][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1694'. [ 146.462552][ T9113] loop0: detected capacity change from 0 to 512 [ 146.543537][ T9113] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 146.551604][ T9113] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 146.576346][ T9113] System zones: 0-1, 15-15, 18-18, 34-34 [ 146.582670][ T9113] EXT4-fs (loop0): orphan cleanup on readonly fs [ 146.589352][ T9113] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 146.604006][ T9113] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 146.631577][ T9122] SELinux: policydb version 0 does not match my version range 15-34 [ 146.653041][ T9122] SELinux: failed to load policy [ 146.661396][ T9113] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1696: bad orphan inode 16 [ 146.673672][ T9122] loop1: detected capacity change from 0 to 1024 [ 146.674736][ T9113] ext4_test_bit(bit=15, block=18) = 1 [ 146.685543][ T9113] is_bad_inode(inode)=0 [ 146.689734][ T9113] NEXT_ORPHAN(inode)=0 [ 146.693813][ T9113] max_ino=32 [ 146.697081][ T9113] i_nlink=2 [ 146.712664][ T9126] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.722329][ T9122] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.733406][ T9122] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 146.786861][ T9122] JBD2: no valid journal superblock found [ 146.792626][ T9122] EXT4-fs (loop1): Could not load journal inode [ 146.801891][ T9134] loop6: detected capacity change from 0 to 512 [ 146.835850][ T9138] loop3: detected capacity change from 0 to 512 [ 146.847956][ T9135] loop4: detected capacity change from 0 to 512 [ 146.850093][ T9138] EXT4-fs: inline encryption not supported [ 146.867064][ T9134] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 146.885456][ T9134] EXT4-fs (loop6): orphan cleanup on readonly fs [ 146.894189][ T9135] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.914037][ T9134] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1705: Failed to acquire dquot type 1 [ 146.926188][ T9134] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1705: bg 0: block 40: padding at end of block bitmap is not set [ 146.942382][ T9134] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 146.948390][ T9149] loop0: detected capacity change from 0 to 8192 [ 146.951751][ T9134] EXT4-fs (loop6): 1 truncate cleaned up [ 146.958288][ T9138] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.976155][ T9151] netlink: 'syz.1.1708': attribute type 4 has an invalid length. [ 146.983995][ T9151] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1708'. [ 147.018659][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.034289][ T9153] loop6: detected capacity change from 0 to 512 [ 147.036942][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.046649][ T9153] EXT4-fs: Ignoring removed orlov option [ 147.049308][ T9149] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.076804][ T9153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.104183][ T9154] 9pnet_fd: Insufficient options for proto=fd [ 147.123220][ T9153] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.169389][ T9153] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1710: bg 0: block 248: padding at end of block bitmap is not set [ 147.187908][ T9161] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1712'. [ 147.224449][ T9153] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1710: Failed to acquire dquot type 1 [ 147.239839][ T9153] EXT4-fs (loop6): 1 truncate cleaned up [ 147.240010][ T9164] loop0: detected capacity change from 0 to 512 [ 147.252266][ T9164] EXT4-fs: inline encryption not supported [ 147.465879][ T9164] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.625248][ T9178] loop0: detected capacity change from 0 to 512 [ 147.644206][ T9175] loop6: detected capacity change from 0 to 8192 [ 147.679546][ T9178] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 147.687523][ T9178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 147.704342][ T9178] System zones: 0-1, 15-15, 18-18, 34-34 [ 147.721844][ T9178] EXT4-fs (loop0): orphan cleanup on readonly fs [ 147.748267][ T9178] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.762900][ T9178] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 147.803545][ T9182] loop1: detected capacity change from 0 to 512 [ 147.845843][ T9178] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1718: bad orphan inode 16 [ 147.860860][ T9182] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.876493][ T9178] ext4_test_bit(bit=15, block=18) = 1 [ 147.881898][ T9178] is_bad_inode(inode)=0 [ 147.886059][ T9178] NEXT_ORPHAN(inode)=0 [ 147.890261][ T9178] max_ino=32 [ 147.893464][ T9178] i_nlink=2 [ 147.898497][ T9182] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.920615][ T9184] netlink: 'syz.6.1719': attribute type 4 has an invalid length. [ 147.928405][ T9184] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1719'. [ 147.936770][ T9182] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1720: Failed to acquire dquot type 1 [ 147.952818][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.979797][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.980812][ T9182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1720: bg 0: block 40: padding at end of block bitmap is not set [ 147.992555][ T9188] loop0: detected capacity change from 0 to 512 [ 148.027831][ T9182] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 148.032145][ T9188] EXT4-fs: inline encryption not supported [ 148.058088][ T9182] EXT4-fs (loop1): 1 truncate cleaned up [ 148.080871][ T9188] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.115621][ T9192] loop1: detected capacity change from 0 to 512 [ 148.125384][ T9192] EXT4-fs: Ignoring removed orlov option [ 148.155084][ T9192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.197751][ T9192] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.204768][ T9192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1722: bg 0: block 248: padding at end of block bitmap is not set [ 148.241817][ T9192] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1722: Failed to acquire dquot type 1 [ 148.258075][ T9200] loop3: detected capacity change from 0 to 1024 [ 148.270392][ T9192] EXT4-fs (loop1): 1 truncate cleaned up [ 148.274977][ T9200] EXT4-fs: Ignoring removed orlov option [ 148.296500][ T9203] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 148.299531][ T9192] EXT4-fs: Ignoring removed orlov option [ 148.304248][ T9203] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1726'. [ 148.327337][ T9192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.340230][ T9192] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 148.378456][ T9209] loop0: detected capacity change from 0 to 512 [ 148.394870][ T9192] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.1722: Abort forced by user [ 148.419912][ T9192] EXT4-fs (loop1): Remounting filesystem read-only [ 148.426531][ T9192] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 148.437479][ T9192] ext4 filesystem being remounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.521862][ T9216] loop4: detected capacity change from 0 to 256 [ 148.521974][ T9209] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.675625][ T9229] loop4: detected capacity change from 0 to 512 [ 148.682969][ T9229] EXT4-fs: inline encryption not supported [ 148.699377][ T9229] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.858924][ T9244] loop0: detected capacity change from 0 to 512 [ 148.867684][ T9243] netlink: 'syz.6.1740': attribute type 4 has an invalid length. [ 148.875599][ T9243] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1740'. [ 149.217944][ T9256] loop6: detected capacity change from 0 to 512 [ 149.223014][ T9244] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.233972][ T9258] loop4: detected capacity change from 0 to 512 [ 149.241496][ T9258] EXT4-fs: inline encryption not supported [ 149.249724][ T9256] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 149.261233][ T9256] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.271354][ T9256] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1744: Failed to acquire dquot type 1 [ 149.283255][ T9256] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1744: bg 0: block 40: padding at end of block bitmap is not set [ 149.302968][ T9256] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 149.329088][ T9258] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.367992][ T9256] EXT4-fs (loop6): 1 truncate cleaned up [ 149.402069][ T9266] loop3: detected capacity change from 0 to 1024 [ 149.418817][ T9266] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.429852][ T9266] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.468368][ T9266] JBD2: no valid journal superblock found [ 149.474146][ T9266] EXT4-fs (loop3): Could not load journal inode [ 149.484227][ T9270] 9pnet_fd: Insufficient options for proto=fd [ 149.541105][ T9273] loop4: detected capacity change from 0 to 512 [ 149.596801][ T9281] loop6: detected capacity change from 0 to 512 [ 149.615761][ T9273] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.638290][ T9281] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 149.647978][ T9281] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.663601][ T9281] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1751: Failed to acquire dquot type 1 [ 149.695904][ T9284] netlink: 'syz.3.1752': attribute type 4 has an invalid length. [ 149.703950][ T9284] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1752'. [ 149.722821][ T9286] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.752289][ T9288] loop4: detected capacity change from 0 to 1024 [ 149.762812][ T9281] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1751: bg 0: block 40: padding at end of block bitmap is not set [ 149.785840][ T9281] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 149.797215][ T9288] EXT4-fs: Ignoring removed orlov option [ 149.803164][ T9281] EXT4-fs (loop6): 1 truncate cleaned up [ 149.833152][ T9293] loop1: detected capacity change from 0 to 512 [ 149.872616][ T9293] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.873446][ T9296] loop3: detected capacity change from 0 to 256 [ 150.103699][ T9305] loop3: detected capacity change from 0 to 8192 [ 150.113017][ T9313] 9pnet_fd: Insufficient options for proto=fd [ 150.170766][ T9305] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 150.353882][ T9321] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.512856][ T9325] loop3: detected capacity change from 0 to 8192 [ 150.558678][ T9325] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 150.725682][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 150.725709][ T29] audit: type=1326 audit(1737888105.540:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 150.755494][ T29] audit: type=1326 audit(1737888105.540:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc27ea3b690 code=0x7ffc0000 [ 150.779005][ T29] audit: type=1326 audit(1737888105.540:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 150.802503][ T29] audit: type=1326 audit(1737888105.540:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc27ea3cd29 code=0x7ffc0000 [ 150.837676][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.856309][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.864688][ T9340] netlink: 'syz.4.1772': attribute type 4 has an invalid length. [ 151.092350][ T9346] loop4: detected capacity change from 0 to 8192 [ 151.100685][ T29] audit: type=1326 audit(1737888105.630:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9339 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcaa55cd29 code=0x7ffc0000 [ 151.124245][ T29] audit: type=1326 audit(1737888105.630:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9339 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcaa55cd29 code=0x7ffc0000 [ 151.147675][ T29] audit: type=1326 audit(1737888105.630:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9339 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcaa55b690 code=0x7ffc0000 [ 151.171182][ T29] audit: type=1326 audit(1737888105.630:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9339 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcaa55cd29 code=0x7ffc0000 [ 151.194704][ T29] audit: type=1326 audit(1737888105.630:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9339 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbcaa55cd29 code=0x7ffc0000 [ 151.218055][ T29] audit: type=1326 audit(1737888105.680:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9339 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcaa55cd29 code=0x7ffc0000 [ 151.242621][ T9350] netlink: 'syz.0.1775': attribute type 4 has an invalid length. [ 151.279205][ T9346] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.343437][ T9352] __nla_validate_parse: 2 callbacks suppressed [ 151.343453][ T9352] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1776'. [ 151.385394][ T9354] loop4: detected capacity change from 0 to 512 [ 151.401659][ T9354] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.426020][ T9360] loop6: detected capacity change from 0 to 512 [ 151.467696][ T9360] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 151.480593][ T9360] EXT4-fs (loop6): orphan cleanup on readonly fs [ 151.502498][ T9360] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1779: Failed to acquire dquot type 1 [ 151.509965][ T9362] loop1: detected capacity change from 0 to 8192 [ 151.521928][ T9365] 9pnet_fd: Insufficient options for proto=fd [ 151.530122][ T9360] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1779: bg 0: block 40: padding at end of block bitmap is not set [ 151.544681][ T9360] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 151.555456][ T9360] EXT4-fs (loop6): 1 truncate cleaned up [ 151.589501][ T9362] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.619979][ T9369] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 151.713187][ T9377] netlink: 'syz.6.1784': attribute type 4 has an invalid length. [ 151.721004][ T9377] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1784'. [ 151.848689][ T9385] loop6: detected capacity change from 0 to 8192 [ 151.863818][ T9382] loop1: detected capacity change from 0 to 8192 [ 151.920581][ T9382] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.948626][ T9388] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1788'. [ 152.016675][ T9394] loop0: detected capacity change from 0 to 1024 [ 152.018862][ T9392] loop6: detected capacity change from 0 to 512 [ 152.043469][ T9394] EXT4-fs: Ignoring removed orlov option [ 152.061365][ T9392] EXT4-fs: Ignoring removed orlov option [ 152.066218][ T9398] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.079117][ T9392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.094883][ T9392] EXT4-fs (loop6): orphan cleanup on readonly fs [ 152.127747][ T9392] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1789: bg 0: block 248: padding at end of block bitmap is not set [ 152.154605][ T9392] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1789: Failed to acquire dquot type 1 [ 152.167924][ T9404] loop1: detected capacity change from 0 to 512 [ 152.175525][ T9392] EXT4-fs (loop6): 1 truncate cleaned up [ 152.193106][ T9404] EXT4-fs (loop1): 1 orphan inode deleted [ 152.201385][ T9404] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.214404][ T3390] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 152.256970][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 152.400975][ T9416] loop0: detected capacity change from 0 to 512 [ 152.451605][ T9416] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 152.459621][ T9416] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 152.476820][ T9416] System zones: 0-1, 15-15, 18-18, 34-34 [ 152.488382][ T9416] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.499844][ T9416] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 152.514571][ T9416] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 152.543258][ T9418] loop6: detected capacity change from 0 to 8192 [ 152.568635][ T9416] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1799: bad orphan inode 16 [ 152.582439][ T9425] loop1: detected capacity change from 0 to 8192 [ 152.590177][ T9416] ext4_test_bit(bit=15, block=18) = 1 [ 152.595664][ T9416] is_bad_inode(inode)=0 [ 152.599903][ T9416] NEXT_ORPHAN(inode)=0 [ 152.603981][ T9416] max_ino=32 [ 152.607249][ T9416] i_nlink=2 [ 152.628947][ T9425] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.700153][ T9428] netlink: 'syz.6.1803': attribute type 4 has an invalid length. [ 152.708050][ T9428] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1803'. [ 152.709921][ T9430] loop0: detected capacity change from 0 to 256 [ 152.729495][ T9432] loop1: detected capacity change from 0 to 512 [ 152.736073][ T9432] EXT4-fs: inline encryption not supported [ 152.743843][ T3283] ================================================================== [ 152.751934][ T3283] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 152.760362][ T3283] [ 152.762673][ T3283] write to 0xffffea0004919158 of 8 bytes by task 9430 on cpu 0: [ 152.770292][ T3283] delete_from_page_cache_batch+0x308/0x700 [ 152.776184][ T3283] truncate_inode_pages_range+0x1c5/0x6b0 [ 152.781896][ T3283] truncate_inode_pages+0x24/0x30 [ 152.786933][ T3283] set_blocksize+0x25b/0x270 [ 152.791524][ T3283] sb_min_blocksize+0x63/0xe0 [ 152.796203][ T3283] fat_fill_super+0x33a/0x1bf0 [ 152.800979][ T3283] vfat_fill_super+0x24/0x30 [ 152.805586][ T3283] get_tree_bdev_flags+0x29f/0x310 [ 152.810699][ T3283] get_tree_bdev+0x1f/0x30 [ 152.815183][ T3283] vfat_get_tree+0x1c/0x30 [ 152.819634][ T3283] vfs_get_tree+0x56/0x1e0 [ 152.824052][ T3283] do_new_mount+0x227/0x690 [ 152.828555][ T3283] path_mount+0x49b/0xb30 [ 152.832901][ T3283] __se_sys_mount+0x27f/0x2d0 [ 152.837578][ T3283] __x64_sys_mount+0x67/0x80 [ 152.842183][ T3283] x64_sys_call+0x2c84/0x2dc0 [ 152.846861][ T3283] do_syscall_64+0xc9/0x1c0 [ 152.851370][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.857268][ T3283] [ 152.859584][ T3283] read to 0xffffea0004919158 of 8 bytes by task 3283 on cpu 1: [ 152.867121][ T3283] folio_mapping+0xa0/0x120 [ 152.871621][ T3283] lru_add+0x89/0x440 [ 152.875604][ T3283] folio_batch_move_lru+0x15f/0x230 [ 152.880806][ T3283] lru_add_drain_cpu+0x7c/0x260 [ 152.885661][ T3283] __folio_batch_release+0x51/0xc0 [ 152.890775][ T3283] shmem_undo_range+0x35b/0xa70 [ 152.895622][ T3283] shmem_evict_inode+0x14d/0x530 [ 152.900567][ T3283] evict+0x2f0/0x570 [ 152.904450][ T3283] iput+0x42a/0x5b0 [ 152.908259][ T3283] dentry_unlink_inode+0x24f/0x260 [ 152.913373][ T3283] __dentry_kill+0x18b/0x4c0 [ 152.917966][ T3283] dput+0x5c/0xd0 [ 152.921610][ T3283] do_renameat2+0x749/0xa70 [ 152.926155][ T3283] __x64_sys_rename+0x58/0x70 [ 152.930835][ T3283] x64_sys_call+0x2b1c/0x2dc0 [ 152.935509][ T3283] do_syscall_64+0xc9/0x1c0 [ 152.940014][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.945915][ T3283] [ 152.948226][ T3283] value changed: 0xffff8881004c0b58 -> 0x0000000000000000 [ 152.955325][ T3283] [ 152.957636][ T3283] Reported by Kernel Concurrency Sanitizer on: [ 152.963772][ T3283] CPU: 1 UID: 0 PID: 3283 Comm: udevd Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 152.973755][ T3283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.983888][ T3283] ================================================================== [ 153.014372][ T9432] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.021837][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'.