last executing test programs: 3.427973401s ago: executing program 0 (id=3094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r2, &(0x7f0000000200)=""/43, 0x2b, 0x730) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\f\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\t\x00\x00\x00\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe48\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x41, 0x0, 0x0) mq_timedreceive(r8, 0x0, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x40011, r3, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 3.279619236s ago: executing program 0 (id=3096): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x18, 0x10, 0x3, 0x6, 0x4, 0x100, 0x5, 0x2, r6}, &(0x7f0000000100)=0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffee0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @mcast2}, 0x1c) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r7) 2.533861179s ago: executing program 0 (id=3113): bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="7ac1da0a377abd831d15db38fd383f08d708e3d8e15c0597f3de97ada73d4cac134080992d41c1048b8b44caadcd63a5a56488ce34418b8649bec0f68168db2f5d73693ce95dccdc926575ffeed4f6f911bc985597e4b4a4c56624d0c977377240", @ANYRES8, @ANYRES64], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000030000", @ANYRES32=r0, @ANYBLOB="b4150000000000000000", @ANYRES32, @ANYBLOB="000100"], 0x50) syz_clone(0x10001080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="c7ed1ba5e1ed4519e2a114317ec07b9fbed1684129fd766f2d8df2827c6ba9cfe8a32b42ffa5bdc8bbcf19a31ecb8b317daa6a9638056b4407f466686f3363bfded8e0b060568ad70f5cb07e7bf231949da26020a4c1d5c4c48ea58951e686f613c6e21ccc5799545f09c4493b07535a2394385d43538adcb4c236d27dd12c954ab96cefb8d2f832d57cf00c1bc05f4465f41a56ad120d40cde500a5cc2ac31f6068c8a18721892ffcaa6a63d39960986e9da6f6b7e741e08bee") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") 1.804205571s ago: executing program 4 (id=3118): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 1.552847246s ago: executing program 1 (id=3120): unshare(0x68040200) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000008000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x18218, 0x3, 0x9f, 0x2, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xbb7d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.326081099s ago: executing program 1 (id=3121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) 1.20904602s ago: executing program 1 (id=3123): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x18, 0x10, 0x3, 0x6, 0x4, 0x100, 0x5, 0x2, r6}, &(0x7f0000000100)=0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffee0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @mcast2}, 0x1c) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r7) 901.708951ms ago: executing program 4 (id=3125): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) 861.316425ms ago: executing program 4 (id=3126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r2, &(0x7f0000000200)=""/43, 0x2b, 0x730) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\f\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\t\x00\x00\x00\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe48\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x41, 0x0, 0x0) mq_timedreceive(r8, 0x0, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x40011, r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2b05, '\x00', 0x0, r10, 0x4, 0x5}, 0x50) 778.767603ms ago: executing program 2 (id=3128): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getgroups(0x4, &(0x7f0000000740)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file1\x00'}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000580)='objagg_obj_root_destroy\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 648.754056ms ago: executing program 0 (id=3129): unshare(0x68040200) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000008000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x18218, 0x3, 0x9f, 0x2, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xbb7d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x2f, 0x6, 0x2, 0x2, 0x0, [@local, @loopback, @private1]}, 0x38) 593.805361ms ago: executing program 4 (id=3130): unshare(0x68040200) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000008000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x18218, 0x3, 0x9f, 0x2, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xbb7d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x2f, 0x6, 0x2, 0x2, 0x0, [@local, @loopback, @private1]}, 0x38) 542.577186ms ago: executing program 2 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000050) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000e2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x4, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) 519.561548ms ago: executing program 3 (id=3132): unshare(0x68040200) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000008000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x18218, 0x3, 0x9f, 0x2, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xbb7d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 432.538227ms ago: executing program 0 (id=3133): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000001000100000000001d6da17f580819e4a4bd5684fe30447dc65dda39ad4130b828729746b43ba30575edd503fa970714a92283fa204537ba569116088a7a7b0a2cd87e609c2a2bd170ff00000000000000340e9776bf309d199828ba114d520e5ee32bd9dc0feaed6a928228"], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) epoll_create1(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x200000c2, 0x401, 0xfffffff7}, 0x10) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) 408.023969ms ago: executing program 4 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000050) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000e2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x4, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) 347.866615ms ago: executing program 2 (id=3135): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) setgroups(0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 338.513356ms ago: executing program 3 (id=3136): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000380)={0x8, 0x2, 0x1, 0x7}) 329.741647ms ago: executing program 2 (id=3137): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getgroups(0x4, &(0x7f0000000740)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file1\x00'}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 319.166068ms ago: executing program 3 (id=3138): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r6, 0x400, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2e) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r2, 0xfffffffc) 296.25568ms ago: executing program 3 (id=3139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000380)=@md0, 0x0, &(0x7f0000000740)) 272.455083ms ago: executing program 3 (id=3140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r2, &(0x7f0000000200)=""/43, 0x2b, 0x730) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\f\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\t\x00\x00\x00\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe48\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x41, 0x0, 0x0) mq_timedreceive(r8, 0x0, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x40011, r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 248.894485ms ago: executing program 0 (id=3141): unshare(0x68040200) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000008000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x18218, 0x3, 0x9f, 0x2, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xbb7d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 248.293075ms ago: executing program 4 (id=3142): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getgroups(0x4, &(0x7f0000000740)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file1\x00'}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000580)='objagg_obj_root_destroy\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 194.67355ms ago: executing program 1 (id=3143): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) setgroups(0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa10000000000000701"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 190.421061ms ago: executing program 2 (id=3144): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) setgroups(0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa1000000000000070100"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x25, 0x0) 132.923196ms ago: executing program 1 (id=3145): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6f, 0x3}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="660a00000000000061118c000000000095000000000000005958c42c50d97e85923ddfd4fec50ca65701c6c1d0c9710603b13ea09ba0501365fe1452b9c7d8bc34fd0aa60549822bf96a1eeb7390c97d66c6119f79d2f397328643693d976794f9ffb47e20c84342c514a67a83a8ad3b7f6ca35dff39c75828be981544dd0ff4b814dda7b1373ad8e6011a3745bf195cbd9beb017bd1c1445d3a47a593a35b73d2afab866b715bf9c13c1483f9dd09687ea2e4cd0c8119f66d1b9b2a366064f6e2f41f2dcac3cd9e01cedaf4e5301b95f48c8f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r5}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000000000000000000020000000004"], 0x0, 0x42, 0xffffffffffffffa5, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x501}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x20000000002}, 0x18) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0xffd7, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) 74.140352ms ago: executing program 3 (id=3146): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 816.849µs ago: executing program 2 (id=3147): unshare(0x68040200) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000008000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x18218, 0x3, 0x9f, 0x2, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xbb7d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000380)={0x8, 0x2, 0x1, 0x7}) kernel console output (not intermixed with test programs): 339.358345][ T3629] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.400152][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.438848][ T9817] GUP no longer grows the stack in syz.1.2125 (9817): 200000004000-20000000a000 (200000002000) [ 339.453119][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: syz.1.2125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 339.453156][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.453202][ T9817] Call Trace: [ 339.453209][ T9817] [ 339.453218][ T9817] __dump_stack+0x1d/0x30 [ 339.453245][ T9817] dump_stack_lvl+0xe8/0x140 [ 339.453303][ T9817] dump_stack+0x15/0x1b [ 339.453354][ T9817] __get_user_pages+0x1968/0x1ed0 [ 339.453453][ T9817] get_user_pages_remote+0x1d5/0x6c0 [ 339.453482][ T9817] __access_remote_vm+0x15c/0x590 [ 339.453532][ T9817] access_remote_vm+0x32/0x40 [ 339.453555][ T9817] proc_pid_cmdline_read+0x32b/0x6c0 [ 339.453727][ T9819] FAULT_INJECTION: forcing a failure. [ 339.453727][ T9819] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.453663][ T9817] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 339.453777][ T9817] vfs_readv+0x3fb/0x690 [ 339.453882][ T9817] __x64_sys_preadv+0xfd/0x1c0 [ 339.453923][ T9817] x64_sys_call+0x282e/0x3000 [ 339.453957][ T9817] do_syscall_64+0xd2/0x200 [ 339.453993][ T9817] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 339.454084][ T9817] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 339.454150][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.454183][ T9817] RIP: 0033:0x7f0fca13efc9 [ 339.454207][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.454248][ T9817] RSP: 002b:00007f0fc8b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 339.454272][ T9817] RAX: ffffffffffffffda RBX: 00007f0fca395fa0 RCX: 00007f0fca13efc9 [ 339.454289][ T9817] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 339.454320][ T9817] RBP: 00007f0fca1c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.454339][ T9817] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 339.454357][ T9817] R13: 00007f0fca396038 R14: 00007f0fca395fa0 R15: 00007ffc4b8fd1f8 [ 339.454384][ T9817] [ 339.460042][ T9822] netlink: 'syz.3.2123': attribute type 3 has an invalid length. [ 339.467825][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.4.2126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 339.467909][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.467928][ T9819] Call Trace: [ 339.467940][ T9819] [ 339.467951][ T9819] __dump_stack+0x1d/0x30 [ 339.467983][ T9819] dump_stack_lvl+0xe8/0x140 [ 339.468010][ T9819] dump_stack+0x15/0x1b [ 339.468040][ T9819] should_fail_ex+0x265/0x280 [ 339.468116][ T9819] should_fail+0xb/0x20 [ 339.468233][ T9819] get_futex_key+0x594/0xbd0 [ 339.468273][ T9819] futex_wake_op+0x146/0xa20 [ 339.468329][ T9819] do_futex+0x348/0x380 [ 339.468423][ T9819] __se_sys_futex+0x2ed/0x360 [ 339.468499][ T9819] __x64_sys_futex+0x78/0x90 [ 339.468540][ T9819] x64_sys_call+0x2e48/0x3000 [ 339.468574][ T9819] do_syscall_64+0xd2/0x200 [ 339.468609][ T9819] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 339.468695][ T9819] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 339.468727][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.468761][ T9819] RIP: 0033:0x7f785c03efc9 [ 339.468783][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.468810][ T9819] RSP: 002b:00007f785aaa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.468837][ T9819] RAX: ffffffffffffffda RBX: 00007f785c295fa0 RCX: 00007f785c03efc9 [ 339.468854][ T9819] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000004000 [ 339.468937][ T9819] RBP: 00007f785aaa7090 R08: 0000200000004000 R09: 00000000b301fffd [ 339.468954][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.468972][ T9819] R13: 00007f785c296038 R14: 00007f785c295fa0 R15: 00007fff5c8f4fe8 [ 339.468999][ T9819] [ 339.761877][ T36] hid (null): invalid report_size 62379 [ 339.871230][ T36] hid (null): unknown global tag 0xd [ 339.876827][ T36] hid (null): unknown global tag 0xe [ 339.899512][ T36] hid-generic 0000:08D4:0001.0001: collection stack underflow [ 339.907071][ T36] hid-generic 0000:08D4:0001.0001: item 0 0 0 12 parsing failed [ 339.917889][ T9838] 9p: Unknown access argument ¿: -22 [ 339.924940][ T36] hid-generic 0000:08D4:0001.0001: probe with driver hid-generic failed with error -22 [ 339.963415][ T9852] loop4: detected capacity change from 0 to 512 [ 339.984312][ T9852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.997721][ T9852] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.109185][ T9852] netlink: 'syz.4.2138': attribute type 3 has an invalid length. [ 340.139315][ T9866] loop2: detected capacity change from 0 to 4096 [ 340.145979][ T9866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.196792][ T9866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.212379][ T9870] FAULT_INJECTION: forcing a failure. [ 340.212379][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 340.226197][ T9870] CPU: 0 UID: 0 PID: 9870 Comm: syz.0.2139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 340.226234][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.226249][ T9870] Call Trace: [ 340.226256][ T9870] [ 340.226264][ T9870] __dump_stack+0x1d/0x30 [ 340.226285][ T9870] dump_stack_lvl+0xe8/0x140 [ 340.226364][ T9870] dump_stack+0x15/0x1b [ 340.226381][ T9870] should_fail_ex+0x265/0x280 [ 340.226423][ T9870] should_failslab+0x8c/0xb0 [ 340.226520][ T9870] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 340.226549][ T9870] ? dup_task_struct+0x70/0x6b0 [ 340.226592][ T9870] dup_task_struct+0x70/0x6b0 [ 340.226720][ T9870] ? _parse_integer+0x27/0x40 [ 340.226765][ T9870] copy_process+0x399/0x2000 [ 340.226800][ T9870] ? kstrtouint+0x76/0xc0 [ 340.226889][ T9870] ? kstrtouint_from_user+0x9f/0xf0 [ 340.226932][ T9870] ? __rcu_read_unlock+0x4f/0x70 [ 340.226970][ T9870] kernel_clone+0x16c/0x5c0 [ 340.227100][ T9870] ? vfs_write+0x7e8/0x960 [ 340.227131][ T9870] __x64_sys_clone+0xe6/0x120 [ 340.227180][ T9870] x64_sys_call+0x119c/0x3000 [ 340.227210][ T9870] do_syscall_64+0xd2/0x200 [ 340.227264][ T9870] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 340.227297][ T9870] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 340.227325][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.227364][ T9870] RIP: 0033:0x7fe682acefc9 [ 340.227380][ T9870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.227451][ T9870] RSP: 002b:00007fe6814ecfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 340.227547][ T9870] RAX: ffffffffffffffda RBX: 00007fe682d26180 RCX: 00007fe682acefc9 [ 340.227560][ T9870] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000060100000 [ 340.227572][ T9870] RBP: 00007fe6814ed090 R08: 0000000000000000 R09: 0000000000000000 [ 340.227584][ T9870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 340.227596][ T9870] R13: 00007fe682d26218 R14: 00007fe682d26180 R15: 00007ffd717cf1b8 [ 340.227674][ T9870] [ 341.206899][ T9875] loop1: detected capacity change from 0 to 1024 [ 341.308150][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.375783][ T9875] EXT4-fs: Ignoring removed bh option [ 341.382372][ T9875] EXT4-fs: Ignoring removed orlov option [ 341.388403][ T9875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.409416][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 341.409435][ T29] audit: type=1400 audit(1760723609.216:35908): avc: denied { bind } for pid=9881 comm="syz.4.2145" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.452882][ T29] audit: type=1400 audit(1760723609.216:35909): avc: denied { name_bind } for pid=9881 comm="syz.4.2145" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 341.474842][ T29] audit: type=1400 audit(1760723609.216:35910): avc: denied { node_bind } for pid=9881 comm="syz.4.2145" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 341.497475][ T29] audit: type=1400 audit(1760723609.216:35911): avc: denied { ioctl } for pid=9881 comm="syz.4.2145" path="socket:[36952]" dev="sockfs" ino=36952 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.524162][ T29] audit: type=1400 audit(1760723609.256:35912): avc: denied { wake_alarm } for pid=9884 comm="syz.3.2148" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.549655][ T9875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.550568][ T29] audit: type=1400 audit(1760723609.356:35913): avc: denied { write } for pid=9881 comm="syz.4.2145" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.584194][ T29] audit: type=1400 audit(1760723609.356:35914): avc: denied { block_suspend } for pid=9881 comm="syz.4.2145" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.635868][ T9885] 9p: Unknown access argument ¿: -22 [ 341.660619][ T29] audit: type=1326 audit(1760723609.456:35915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 341.685193][ T29] audit: type=1326 audit(1760723609.456:35916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 341.709749][ T29] audit: type=1326 audit(1760723609.456:35917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 341.734280][ T9875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.744556][ T9898] loop4: detected capacity change from 0 to 1024 [ 341.755528][ T9898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 341.764299][ T9898] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2145: Failed to acquire dquot type 0 [ 341.786511][ T9898] EXT4-fs (loop4): 1 truncate cleaned up [ 341.807258][ T9898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.836522][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.927146][ T9921] __nla_validate_parse: 4 callbacks suppressed [ 341.927162][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 341.928358][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2158'. [ 341.934360][ T9921] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2159'. [ 341.962866][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 341.972483][ T9921] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2159'. [ 341.982570][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 341.990814][ T9924] netlink: 'syz.0.2160': attribute type 4 has an invalid length. [ 342.008575][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 342.017774][ T9921] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2159'. [ 342.027685][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 342.036942][ T9921] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2159'. [ 342.125556][ T9934] 9p: Unknown access argument ¿: -22 [ 342.150886][ T9936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.257207][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.384723][ T9955] loop2: detected capacity change from 0 to 512 [ 342.402973][ T9955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 342.781941][ T9955] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.2171: Unimplemented hash flags: 0x0001 [ 342.794401][ T9955] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2171: Corrupt directory, running e2fsck is recommended [ 342.871489][ T9955] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.2171: path /421/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 342.945091][ T9960] 9p: Unknown access argument ¿: -22 [ 343.025453][ T9970] 9p: Unknown access argument ¿: -22 [ 343.054536][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.092946][ T9975] loop3: detected capacity change from 0 to 512 [ 343.125419][ T9975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.159038][ T9979] loop0: detected capacity change from 0 to 512 [ 343.166020][ T9979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.178466][ T9972] 9p: Unknown access argument ¿: -22 [ 343.186272][ T9975] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 343.205310][ T9975] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 343.222357][ T9975] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 343.235783][ T9979] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 343.247862][ T9979] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 343.260813][ T9975] EXT4-fs (loop3): 2 truncates cleaned up [ 343.265891][ T9979] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 343.271795][ T9975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.283212][ T9979] EXT4-fs (loop0): 2 truncates cleaned up [ 343.301094][ T9979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.316620][ T9975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.324302][ T9979] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.371959][ T9991] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 343.380072][ T9991] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 343.388663][ T9991] veth0_to_bridge: entered allmulticast mode [ 343.395306][ T9991] veth0_to_bridge: entered promiscuous mode [ 343.418837][ T9995] FAULT_INJECTION: forcing a failure. [ 343.418837][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 343.431724][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.3.2185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.431760][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.431777][ T9995] Call Trace: [ 343.431784][ T9995] [ 343.431805][ T9995] __dump_stack+0x1d/0x30 [ 343.431913][ T9995] dump_stack_lvl+0xe8/0x140 [ 343.431939][ T9995] dump_stack+0x15/0x1b [ 343.431961][ T9995] should_fail_ex+0x265/0x280 [ 343.432068][ T9995] ? audit_log_d_path+0x8d/0x150 [ 343.432093][ T9995] should_failslab+0x8c/0xb0 [ 343.432128][ T9995] __kmalloc_cache_noprof+0x4c/0x4a0 [ 343.432198][ T9995] audit_log_d_path+0x8d/0x150 [ 343.432266][ T9995] audit_log_d_path_exe+0x42/0x70 [ 343.432293][ T9995] audit_log_task+0x1e9/0x250 [ 343.432335][ T9995] ? kstrtouint+0x76/0xc0 [ 343.432458][ T9995] audit_seccomp+0x61/0x100 [ 343.432498][ T9995] ? __seccomp_filter+0x82d/0x1250 [ 343.432531][ T9995] __seccomp_filter+0x83e/0x1250 [ 343.432564][ T9995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 343.432600][ T9995] ? vfs_write+0x7e8/0x960 [ 343.432651][ T9995] ? __rcu_read_unlock+0x4f/0x70 [ 343.432684][ T9995] ? __fget_files+0x184/0x1c0 [ 343.432736][ T9995] __secure_computing+0x82/0x150 [ 343.432766][ T9995] syscall_trace_enter+0xcf/0x1e0 [ 343.432795][ T9995] do_syscall_64+0xac/0x200 [ 343.432864][ T9995] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.432899][ T9995] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 343.432953][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.432981][ T9995] RIP: 0033:0x7f66b145efc9 [ 343.433002][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.433026][ T9995] RSP: 002b:00007f66afec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.433108][ T9995] RAX: ffffffffffffffda RBX: 00007f66b16b5fa0 RCX: 00007f66b145efc9 [ 343.433126][ T9995] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 343.433157][ T9995] RBP: 00007f66afec7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.433171][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.433183][ T9995] R13: 00007f66b16b6038 R14: 00007f66b16b5fa0 R15: 00007ffd1c7bd638 [ 343.433202][ T9995] [ 343.433215][ T9996] Ÿë: port 2(veth0_to_team) entered blocking state [ 343.528353][T10004] FAULT_INJECTION: forcing a failure. [ 343.528353][T10004] name failslab, interval 1, probability 0, space 0, times 0 [ 343.529986][ T9996] Ÿë: port 2(veth0_to_team) entered disabled state [ 343.536280][T10004] CPU: 0 UID: 0 PID: 10004 Comm: syz.2.2188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.536320][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.536340][T10004] Call Trace: [ 343.536350][T10004] [ 343.536362][T10004] __dump_stack+0x1d/0x30 [ 343.536408][T10004] dump_stack_lvl+0xe8/0x140 [ 343.536455][T10004] dump_stack+0x15/0x1b [ 343.536478][T10004] should_fail_ex+0x265/0x280 [ 343.536554][T10004] ? ip6_mc_add_src+0x332/0x5d0 [ 343.536595][T10004] should_failslab+0x8c/0xb0 [ 343.536724][T10004] __kmalloc_cache_noprof+0x4c/0x4a0 [ 343.536769][T10004] ip6_mc_add_src+0x332/0x5d0 [ 343.536836][T10004] ip6_mc_msfilter+0x42a/0x7c0 [ 343.536882][T10004] ipv6_set_mcast_msfilter+0x1ff/0x250 [ 343.536919][T10004] do_ipv6_setsockopt+0xfe6/0x2160 [ 343.536963][T10004] ? kstrtoull+0x111/0x140 [ 343.537001][T10004] ? __rcu_read_unlock+0x4f/0x70 [ 343.537037][T10004] ? avc_has_perm_noaudit+0x1b1/0x200 [ 343.537121][T10004] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 343.537164][T10004] ipv6_setsockopt+0x59/0x130 [ 343.537209][T10004] tcp_setsockopt+0x98/0xb0 [ 343.537329][T10004] sock_common_setsockopt+0x69/0x80 [ 343.537360][T10004] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 343.537393][T10004] __sys_setsockopt+0x184/0x200 [ 343.537531][T10004] __x64_sys_setsockopt+0x64/0x80 [ 343.537612][T10004] x64_sys_call+0x20ec/0x3000 [ 343.537642][T10004] do_syscall_64+0xd2/0x200 [ 343.537677][T10004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.537731][T10004] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 343.537762][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.537794][T10004] RIP: 0033:0x7f3cb015efc9 [ 343.537816][T10004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.537882][T10004] RSP: 002b:00007f3caebbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.537910][T10004] RAX: ffffffffffffffda RBX: 00007f3cb03b5fa0 RCX: 00007f3cb015efc9 [ 343.537928][T10004] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 343.537947][T10004] RBP: 00007f3caebbf090 R08: 0000000000000310 R09: 0000000000000000 [ 343.538024][T10004] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 343.538059][T10004] R13: 00007f3cb03b6038 R14: 00007f3cb03b5fa0 R15: 00007ffdf6182178 [ 343.538086][T10004] [ 343.561646][T10008] Dead loop on virtual device ip6_vti0, fix it urgently! [ 343.563039][ T9996] veth0_to_team: entered allmulticast mode [ 343.951499][ T9996] veth0_to_team: entered promiscuous mode [ 344.023042][ T9991] SELinux: Context @ is not valid (left unmapped). [ 344.059931][T10016] loop0: detected capacity change from 0 to 8192 [ 344.084130][ T9991] loop1: detected capacity change from 0 to 8192 [ 344.223015][T10019] 9p: Unknown access argument ¿: -22 [ 344.332869][T10028] loop1: detected capacity change from 0 to 512 [ 344.344713][T10028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.356982][T10028] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 344.357240][T10028] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 344.357499][T10028] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 344.444398][T10028] EXT4-fs (loop1): 2 truncates cleaned up [ 344.452605][T10028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.473895][T10028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.712049][T10044] loop0: detected capacity change from 0 to 1024 [ 344.739561][T10044] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.761021][T10044] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 344.771582][T10044] EXT4-fs (loop0): orphan cleanup on readonly fs [ 344.797791][T10044] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2204: Failed to acquire dquot type 0 [ 344.822782][T10044] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2204: Failed to acquire dquot type 0 [ 344.844264][T10044] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2204: Freeing blocks not in datazone - block = 0, count = 4096 [ 344.864876][T10066] 9p: Unknown access argument ¿: -22 [ 344.899097][T10044] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2204: Failed to acquire dquot type 0 [ 344.911267][T10044] EXT4-fs (loop0): 1 orphan inode deleted [ 344.920552][T10044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.087020][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.133366][T10087] loop1: detected capacity change from 0 to 4096 [ 345.140685][T10087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.151716][T10087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.210779][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.222744][T10099] 9p: Unknown access argument ¿: -22 [ 345.286288][T10106] 9p: Unknown access argument ¿: -22 [ 345.298774][T10110] loop3: detected capacity change from 0 to 1024 [ 345.307513][T10110] EXT4-fs (loop3): orphan cleanup on readonly fs [ 345.314742][T10110] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2219: Failed to acquire dquot type 0 [ 345.319883][T10108] 9p: Unknown access argument ¿: -22 [ 345.329449][T10110] EXT4-fs (loop3): 1 truncate cleaned up [ 345.339213][T10110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.674518][T10154] FAULT_INJECTION: forcing a failure. [ 345.674518][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.687691][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.0.2244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.687785][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.687800][T10154] Call Trace: [ 345.687807][T10154] [ 345.687877][T10154] __dump_stack+0x1d/0x30 [ 345.687905][T10154] dump_stack_lvl+0xe8/0x140 [ 345.688041][T10154] dump_stack+0x15/0x1b [ 345.688064][T10154] should_fail_ex+0x265/0x280 [ 345.688111][T10154] should_fail+0xb/0x20 [ 345.688153][T10154] should_fail_usercopy+0x1a/0x20 [ 345.688245][T10154] _copy_from_user+0x1c/0xb0 [ 345.688348][T10154] kstrtouint_from_user+0x69/0xf0 [ 345.688425][T10154] ? 0xffffffff81000000 [ 345.688443][T10154] ? selinux_file_permission+0x1e4/0x320 [ 345.688540][T10154] proc_fail_nth_write+0x50/0x160 [ 345.688577][T10154] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.688679][T10154] vfs_write+0x269/0x960 [ 345.688707][T10154] ? vfs_read+0x4e6/0x770 [ 345.688736][T10154] ? security_capable+0x83/0x90 [ 345.688779][T10154] ? do_epoll_ctl+0x855/0x8a0 [ 345.688838][T10154] ksys_write+0xda/0x1a0 [ 345.688870][T10154] __x64_sys_write+0x40/0x50 [ 345.688901][T10154] x64_sys_call+0x2802/0x3000 [ 345.688931][T10154] do_syscall_64+0xd2/0x200 [ 345.688962][T10154] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.689009][T10154] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 345.689038][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.689066][T10154] RIP: 0033:0x7fe682acda7f [ 345.689150][T10154] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 345.689211][T10154] RSP: 002b:00007fe68152f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 345.689238][T10154] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe682acda7f [ 345.689315][T10154] RDX: 0000000000000001 RSI: 00007fe68152f0a0 RDI: 0000000000000005 [ 345.689332][T10154] RBP: 00007fe68152f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.689349][T10154] R10: 0000200000000140 R11: 0000000000000293 R12: 0000000000000001 [ 345.689366][T10154] R13: 00007fe682d26038 R14: 00007fe682d25fa0 R15: 00007ffd717cf1b8 [ 345.689391][T10154] [ 345.933915][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.093720][T10172] 9p: Unknown access argument ¿: -22 [ 346.420237][ T29] kauditd_printk_skb: 1066 callbacks suppressed [ 346.420254][ T29] audit: type=1326 audit(1760723614.226:36974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 346.474289][ T29] audit: type=1326 audit(1760723614.226:36975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 346.499532][ T29] audit: type=1326 audit(1760723614.226:36976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 346.523992][ T29] audit: type=1326 audit(1760723614.256:36977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 346.548330][ T29] audit: type=1326 audit(1760723614.256:36978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 346.572551][ T29] audit: type=1326 audit(1760723614.266:36979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe682acd810 code=0x7ffc0000 [ 346.597079][ T29] audit: type=1326 audit(1760723614.266:36980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe682ad07f7 code=0x7ffc0000 [ 346.621834][ T29] audit: type=1326 audit(1760723614.266:36981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 346.646264][ T29] audit: type=1326 audit(1760723614.266:36982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe682ad07f7 code=0x7ffc0000 [ 346.672434][ T29] audit: type=1326 audit(1760723614.266:36983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe682acdc2a code=0x7ffc0000 [ 346.686184][T10205] loop4: detected capacity change from 0 to 512 [ 346.706965][T10205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.717790][T10205] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 346.758820][T10205] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 346.797733][T10205] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 346.818497][T10205] EXT4-fs (loop4): 2 truncates cleaned up [ 346.825911][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.846950][T10218] 9p: Unknown access argument ¿: -22 [ 346.855240][T10205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.037045][T10236] __nla_validate_parse: 30 callbacks suppressed [ 347.037103][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2277'. [ 347.076841][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 347.204117][T10252] 9p: Unknown access argument ¿: -22 [ 347.239447][T10247] 9p: Unknown access argument ¿: -22 [ 347.272955][T10251] 9p: Unknown access argument ¿: -22 [ 347.417996][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2293'. [ 347.452992][T10275] 9p: Unknown access argument ¿: -22 [ 347.540639][T10282] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2295'. [ 347.761645][T10293] loop2: detected capacity change from 0 to 512 [ 347.769030][T10293] EXT4-fs: Ignoring removed bh option [ 347.774876][T10293] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.783161][T10293] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 347.794819][T10293] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 347.803080][T10293] EXT4-fs (loop2): orphan cleanup on readonly fs [ 347.810299][T10293] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2297: Failed to acquire dquot type 1 [ 347.822586][T10293] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2297: Invalid block bitmap block 0 in block_group 0 [ 347.852270][T10293] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2297: Invalid block bitmap block 0 in block_group 0 [ 347.867440][T10293] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2297: Invalid block bitmap block 0 in block_group 0 [ 347.881706][T10293] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2297: Failed to acquire dquot type 1 [ 347.895932][T10293] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2297: Failed to acquire dquot type 1 [ 347.908262][T10293] EXT4-fs (loop2): 1 orphan inode deleted [ 347.915739][T10293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.941040][T10296] SELinux: failed to load policy [ 348.156715][T10302] erspan1: entered allmulticast mode [ 348.511750][T10317] loop1: detected capacity change from 0 to 512 [ 348.528695][T10317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.549987][T10317] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 348.579461][T10317] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 348.603987][T10317] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 348.637307][T10317] EXT4-fs (loop1): 2 truncates cleaned up [ 348.645979][T10317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.689434][T10317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.828205][T10322] 9p: Unknown access argument ¿: -22 [ 348.908170][T10328] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2313'. [ 349.203623][T10352] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2321'. [ 349.291112][T10357] 9p: Unknown access argument ¿: -22 [ 349.454896][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.455417][T10367] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2329'. [ 349.506772][T10372] loop2: detected capacity change from 0 to 512 [ 349.546196][T10372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.576461][T10367] loop0: detected capacity change from 0 to 4096 [ 349.607551][T10367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.617390][T10372] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.634636][T10383] x_tables: ip_tables: ah match: only valid for protocol 51 [ 349.650057][T10367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.675183][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.793081][T10399] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2341'. [ 349.793644][T10381] 9p: Unknown access argument ¿: -22 [ 349.932654][T10391] 9p: Unknown access argument ¿: -22 [ 350.092369][T10408] loop1: detected capacity change from 0 to 512 [ 350.099283][T10408] EXT4-fs: Ignoring removed bh option [ 350.104795][T10408] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.113287][T10408] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 350.124917][T10408] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 350.133459][T10408] EXT4-fs (loop1): orphan cleanup on readonly fs [ 350.141578][T10408] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2342: Failed to acquire dquot type 1 [ 350.153776][T10408] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2342: Invalid block bitmap block 0 in block_group 0 [ 350.167943][T10408] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2342: Invalid block bitmap block 0 in block_group 0 [ 350.182599][T10408] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2342: Invalid block bitmap block 0 in block_group 0 [ 350.196754][T10408] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2342: Failed to acquire dquot type 1 [ 350.208708][T10408] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2342: Failed to acquire dquot type 1 [ 350.221017][T10408] EXT4-fs (loop1): 1 orphan inode deleted [ 350.263630][T10406] 9p: Unknown access argument ¿: -22 [ 350.931240][T10408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.959963][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.177984][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2349'. [ 351.197998][T10421] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 351.672665][T10423] loop4: detected capacity change from 0 to 512 [ 351.679398][T10423] EXT4-fs: Ignoring removed bh option [ 351.685671][T10423] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.705797][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.717227][T10423] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 351.733651][T10423] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 351.742152][T10423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 351.749952][T10423] __quota_error: 725 callbacks suppressed [ 351.749966][T10423] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 351.766195][T10423] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 351.776734][T10423] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2347: Failed to acquire dquot type 1 [ 351.789361][T10423] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2347: Invalid block bitmap block 0 in block_group 0 [ 351.803973][T10423] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2347: Invalid block bitmap block 0 in block_group 0 [ 351.827041][T10423] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2347: Invalid block bitmap block 0 in block_group 0 [ 351.841842][T10423] Quota error (device loop4): write_blk: dquota write failed [ 351.849781][T10423] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 351.860173][T10423] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2347: Failed to acquire dquot type 1 [ 351.873285][T10423] Quota error (device loop4): write_blk: dquota write failed [ 351.881014][T10423] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 351.891023][T10423] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2347: Failed to acquire dquot type 1 [ 351.903518][T10423] EXT4-fs (loop4): 1 orphan inode deleted [ 351.911410][T10423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.992093][ T29] audit: type=1326 audit(1760723619.796:37697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 352.048877][ T29] audit: type=1326 audit(1760723619.826:37698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 352.073497][ T29] audit: type=1326 audit(1760723619.826:37699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 352.097838][ T29] audit: type=1326 audit(1760723619.826:37700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3cb015f003 code=0x7ffc0000 [ 352.132037][T10437] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2354'. [ 352.199320][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 352.212008][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 352.237143][T10441] loop3: detected capacity change from 0 to 4096 [ 352.278428][T10441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.301057][T10441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.328856][T10448] devtmpfs: Unknown parameter 'nr_inodds' [ 352.738671][T10451] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2360'. [ 352.835433][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.915989][T10462] 9p: Unknown access argument ¿: -22 [ 352.964646][T10464] loop2: detected capacity change from 0 to 512 [ 352.983923][T10464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.009584][T10464] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 353.031872][T10464] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 353.058484][T10464] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 353.100952][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.108378][T10464] EXT4-fs (loop2): 2 truncates cleaned up [ 353.134478][T10464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.150506][T10464] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.160545][T10473] loop3: detected capacity change from 0 to 512 [ 353.168474][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2367'. [ 353.187953][T10473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.220827][T10473] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 353.248663][T10473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 353.268584][T10473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 353.290119][T10473] EXT4-fs (loop3): 2 truncates cleaned up [ 353.298438][T10473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.320952][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.458618][T10491] 9p: Unknown access argument ¿: -22 [ 353.611447][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 353.762799][T10528] x_tables: ip_tables: ah match: only valid for protocol 51 [ 353.896092][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'. [ 353.916199][T10533] 9p: Unknown access argument ¿: -22 [ 354.208638][T10566] loop4: detected capacity change from 0 to 512 [ 354.225220][T10566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.250139][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'. [ 354.293542][T10566] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 354.324321][T10566] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 354.342429][T10566] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 354.367554][T10566] EXT4-fs (loop4): 2 truncates cleaned up [ 354.374407][T10566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.406582][T10566] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.634348][T10614] loop2: detected capacity change from 0 to 512 [ 354.641869][T10614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.652586][T10614] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 354.664858][T10614] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 354.679951][T10614] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 354.695617][T10614] EXT4-fs (loop2): 2 truncates cleaned up [ 354.702151][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.722654][T10619] 9p: Unknown access argument ¿: -22 [ 354.741585][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 354.751597][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.771009][T10628] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2425'. [ 354.841951][T10632] loop0: detected capacity change from 0 to 4096 [ 354.850196][T10632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.860372][T10632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.052225][T10659] loop2: detected capacity change from 0 to 512 [ 355.060202][T10659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.075223][T10659] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 355.119129][T10659] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 355.135906][T10659] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 355.165868][T10659] EXT4-fs (loop2): 2 truncates cleaned up [ 355.172840][T10659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.223375][T10673] 9p: Unknown access argument ¿: -22 [ 355.240399][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.279486][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.327954][T10684] loop1: detected capacity change from 0 to 512 [ 355.357918][T10684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.375626][T10684] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 355.408653][T10684] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 355.448106][T10684] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 355.465540][T10697] 9p: Unknown access argument ¿: -22 [ 355.498728][T10684] EXT4-fs (loop1): 2 truncates cleaned up [ 355.505580][T10684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.521696][T10684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.716839][T10726] 9p: Unknown access argument ¿: -22 [ 355.754707][T10732] loop2: detected capacity change from 0 to 4096 [ 355.776115][T10732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.798349][T10732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.817597][T10736] 9p: Unknown access argument ¿: -22 [ 355.992486][T10752] 9p: Unknown access argument ¿: -22 [ 356.125231][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.275845][T10786] 9p: Unknown access argument ¿: -22 [ 356.309706][T10792] loop0: detected capacity change from 0 to 4096 [ 356.316839][T10792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.326718][T10792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.521656][T10809] 9p: Unknown access argument ¿: -22 [ 356.616003][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.903831][T10836] loop2: detected capacity change from 0 to 512 [ 356.911167][T10836] EXT4-fs: Ignoring removed bh option [ 356.916721][T10836] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.930626][T10836] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 356.972532][T10835] 9p: Unknown access argument ¿: -22 [ 356.978806][T10836] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 356.987436][T10836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 356.994991][T10836] __quota_error: 1593 callbacks suppressed [ 356.995014][T10836] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 357.010835][T10836] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 357.020817][T10836] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2507: Failed to acquire dquot type 1 [ 357.033510][T10836] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2507: Invalid block bitmap block 0 in block_group 0 [ 357.047956][T10836] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2507: Invalid block bitmap block 0 in block_group 0 [ 357.062845][T10836] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2507: Invalid block bitmap block 0 in block_group 0 [ 357.077060][T10836] Quota error (device loop2): write_blk: dquota write failed [ 357.084696][T10836] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 357.094866][T10836] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2507: Failed to acquire dquot type 1 [ 357.109428][T10836] Quota error (device loop2): write_blk: dquota write failed [ 357.117664][T10836] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 357.127640][T10836] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2507: Failed to acquire dquot type 1 [ 357.140002][T10836] EXT4-fs (loop2): 1 orphan inode deleted [ 357.693788][T10836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.779203][ T29] audit: type=1326 audit(1760723625.586:39294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.3.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 357.804831][ T29] audit: type=1326 audit(1760723625.586:39295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.3.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 358.007014][T10850] __nla_validate_parse: 12 callbacks suppressed [ 358.007031][T10850] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2519'. [ 358.048876][ T29] audit: type=1326 audit(1760723625.826:39296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.3.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 358.073885][ T29] audit: type=1326 audit(1760723625.826:39297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.3.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66b145f003 code=0x7ffc0000 [ 358.108811][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 358.439525][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.451004][T10883] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2532'. [ 358.544370][T10885] 9p: Unknown access argument ¿: -22 [ 358.587134][T10900] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2540'. [ 358.622531][T10900] loop3: detected capacity change from 0 to 4096 [ 358.633022][T10900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.713356][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 358.771281][T10917] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2544'. [ 359.038653][T10933] 9p: Unknown access argument ¿: -22 [ 359.305820][T10944] loop3: detected capacity change from 0 to 512 [ 359.312900][T10944] EXT4-fs: Ignoring removed bh option [ 359.318839][T10944] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.401559][T10946] loop1: detected capacity change from 0 to 512 [ 359.410088][T10944] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 359.422393][T10944] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 359.431811][T10944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 359.440570][T10944] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2555: Failed to acquire dquot type 1 [ 359.454766][T10944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2555: Invalid block bitmap block 0 in block_group 0 [ 359.470696][T10944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2555: Invalid block bitmap block 0 in block_group 0 [ 359.486307][T10944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2555: Invalid block bitmap block 0 in block_group 0 [ 359.501050][T10944] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2555: Failed to acquire dquot type 1 [ 359.513374][T10944] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2555: Failed to acquire dquot type 1 [ 359.526127][T10944] EXT4-fs (loop3): 1 orphan inode deleted [ 359.540089][T10946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.552547][T10946] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 359.565754][T10946] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 359.580591][T10946] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 359.613072][T10946] EXT4-fs (loop1): 2 truncates cleaned up [ 359.821104][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 359.845392][T10959] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2560'. [ 360.763543][T10965] loop4: detected capacity change from 0 to 512 [ 360.771302][T10965] EXT4-fs: Ignoring removed bh option [ 360.777175][T10965] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.789935][T10965] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 360.801100][T10965] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 360.809757][T10965] EXT4-fs (loop4): orphan cleanup on readonly fs [ 360.819058][T10965] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2561: Failed to acquire dquot type 1 [ 360.834624][T10965] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2561: Invalid block bitmap block 0 in block_group 0 [ 360.853419][T10965] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2561: Invalid block bitmap block 0 in block_group 0 [ 360.868660][T10965] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2561: Invalid block bitmap block 0 in block_group 0 [ 360.885182][T10965] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2561: Failed to acquire dquot type 1 [ 360.898249][T10965] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2561: Failed to acquire dquot type 1 [ 360.910428][T10965] EXT4-fs (loop4): 1 orphan inode deleted [ 360.985935][T10968] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2562'. [ 361.283386][T10968] loop1: detected capacity change from 0 to 4096 [ 361.284823][T10968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.655739][T10991] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2571'. [ 361.723186][T10992] loop3: detected capacity change from 0 to 4096 [ 361.732708][T10992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.020974][ T29] kauditd_printk_skb: 597 callbacks suppressed [ 362.021051][ T29] audit: type=1326 audit(1760723629.826:39883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.160056][ T29] audit: type=1326 audit(1760723629.856:39884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.184651][ T29] audit: type=1326 audit(1760723629.856:39885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.0.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.209111][ T29] audit: type=1326 audit(1760723629.856:39886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.0.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.234349][ T29] audit: type=1326 audit(1760723629.866:39887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.259236][ T29] audit: type=1326 audit(1760723629.866:39888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.284027][ T29] audit: type=1326 audit(1760723629.866:39889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.311438][ T29] audit: type=1326 audit(1760723629.866:39890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.0.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.338004][ T29] audit: type=1326 audit(1760723629.866:39891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.0.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.365186][ T29] audit: type=1326 audit(1760723629.866:39892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 362.644868][T11013] 9p: Unknown access argument ¿: -22 [ 362.679844][T11030] loop0: detected capacity change from 0 to 4096 [ 362.686964][T11030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.036445][T11057] __nla_validate_parse: 4 callbacks suppressed [ 363.036466][T11057] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2595'. [ 363.075388][T11057] loop4: detected capacity change from 0 to 4096 [ 363.082661][T11057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.190561][T11061] 9p: Unknown access argument ¿: -22 [ 363.470787][T11073] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2598'. [ 363.529551][T11075] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2601'. [ 363.632838][T11085] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2604'. [ 363.938392][T11100] loop0: detected capacity change from 0 to 512 [ 363.945450][T11100] EXT4-fs: Ignoring removed bh option [ 363.951071][T11100] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.999439][T11100] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 364.010848][T11100] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 364.019391][T11100] EXT4-fs (loop0): orphan cleanup on readonly fs [ 364.026614][T11100] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2605: Failed to acquire dquot type 1 [ 364.038778][T11100] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2605: Invalid block bitmap block 0 in block_group 0 [ 364.053660][T11100] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2605: Invalid block bitmap block 0 in block_group 0 [ 364.068556][T11100] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2605: Invalid block bitmap block 0 in block_group 0 [ 364.083129][T11100] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2605: Failed to acquire dquot type 1 [ 364.095510][T11100] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2605: Failed to acquire dquot type 1 [ 364.107611][T11100] EXT4-fs (loop0): 1 orphan inode deleted [ 364.161378][T11098] 9p: Unknown access argument ¿: -22 [ 365.428687][T11095] 9p: Unknown access argument ¿: -22 [ 365.864986][T11121] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 365.872368][T11121] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 366.371173][T11110] loop4: detected capacity change from 0 to 512 [ 366.377941][T11110] EXT4-fs: Ignoring removed bh option [ 366.383586][T11110] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.692307][T11121] veth0_to_bridge: entered allmulticast mode [ 366.699265][T11121] veth0_to_bridge: entered promiscuous mode [ 366.707400][T11121] Ÿë: port 2(veth0_to_team) entered blocking state [ 366.714797][T11121] Ÿë: port 2(veth0_to_team) entered disabled state [ 366.722325][T11121] veth0_to_team: entered allmulticast mode [ 366.729052][T11121] veth0_to_team: entered promiscuous mode [ 366.763244][T11110] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 366.909121][T11121] loop3: detected capacity change from 0 to 8192 [ 366.949787][T11110] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 366.958493][T11110] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.965868][T11110] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2611: Failed to acquire dquot type 1 [ 366.978420][T11110] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2611: Invalid block bitmap block 0 in block_group 0 [ 366.993129][T11110] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2611: Invalid block bitmap block 0 in block_group 0 [ 367.007103][T11110] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2611: Invalid block bitmap block 0 in block_group 0 [ 367.021730][T11110] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2611: Failed to acquire dquot type 1 [ 367.034292][T11110] __quota_error: 600 callbacks suppressed [ 367.034314][T11110] Quota error (device loop4): write_blk: dquota write failed [ 367.047590][T11110] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 367.057652][T11110] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2611: Failed to acquire dquot type 1 [ 367.070010][T11110] EXT4-fs (loop4): 1 orphan inode deleted [ 367.163902][T11125] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2619'. [ 367.290783][ T29] audit: type=1326 audit(1760723635.086:40483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.316880][ T29] audit: type=1326 audit(1760723635.086:40484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.347645][T11133] loop3: detected capacity change from 0 to 512 [ 367.369023][T11133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.381919][T11133] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 367.394822][T11133] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 367.408208][ T29] audit: type=1326 audit(1760723635.146:40485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.433004][ T29] audit: type=1326 audit(1760723635.146:40486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.435098][T11133] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 367.457177][ T29] audit: type=1326 audit(1760723635.146:40487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.495096][ T29] audit: type=1326 audit(1760723635.146:40488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.509441][T11133] EXT4-fs (loop3): 2 truncates cleaned up [ 367.519640][ T29] audit: type=1326 audit(1760723635.146:40489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.551126][ T29] audit: type=1326 audit(1760723635.146:40490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb015efc9 code=0x7ffc0000 [ 367.599218][T11137] 9p: Unknown access argument ¿: -22 [ 367.677135][T11150] loop4: detected capacity change from 0 to 512 [ 367.688823][T11150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.701764][T11150] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 367.714067][T11150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 367.714358][T11150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 367.714803][T11150] EXT4-fs (loop4): 2 truncates cleaned up [ 367.715467][T11147] 9p: Unknown access argument ¿: -22 [ 367.813200][T11161] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2632'. [ 367.859634][T11161] loop4: detected capacity change from 0 to 4096 [ 367.868008][T11161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.881209][T11159] loop3: detected capacity change from 0 to 8192 [ 368.010749][T11169] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2635'. [ 368.063102][T11175] loop1: detected capacity change from 0 to 512 [ 368.070498][T11175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.083164][T11175] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 368.098336][T11175] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 368.128318][T11175] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 368.171610][T11175] EXT4-fs (loop1): 2 truncates cleaned up [ 368.178056][T11175] EXT4-fs mount: 25 callbacks suppressed [ 368.178075][T11175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.198577][T11175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.225835][T11187] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2640'. [ 368.262088][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.358674][T11191] 9p: Unknown access argument ¿: -22 [ 368.389139][T11198] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2644'. [ 368.517744][T11211] FAULT_INJECTION: forcing a failure. [ 368.517744][T11211] name failslab, interval 1, probability 0, space 0, times 0 [ 368.530810][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.3.2651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 368.530843][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.530859][T11211] Call Trace: [ 368.530866][T11211] [ 368.530874][T11211] __dump_stack+0x1d/0x30 [ 368.530898][T11211] dump_stack_lvl+0xe8/0x140 [ 368.530916][T11211] dump_stack+0x15/0x1b [ 368.531001][T11211] should_fail_ex+0x265/0x280 [ 368.531046][T11211] ? __pfx_proc_self_get_link+0x10/0x10 [ 368.531076][T11211] ? proc_self_get_link+0x97/0x110 [ 368.531104][T11211] should_failslab+0x8c/0xb0 [ 368.531275][T11211] __kmalloc_cache_noprof+0x4c/0x4a0 [ 368.531324][T11211] ? __pfx_proc_self_get_link+0x10/0x10 [ 368.531364][T11211] proc_self_get_link+0x97/0x110 [ 368.531412][T11211] pick_link+0x47d/0x830 [ 368.531451][T11211] step_into+0x790/0x7f0 [ 368.531489][T11211] ? inode_permission+0x106/0x310 [ 368.531600][T11211] link_path_walk+0x571/0x900 [ 368.531642][T11211] path_openat+0x1de/0x2170 [ 368.531736][T11211] ? _parse_integer_limit+0x170/0x190 [ 368.531793][T11211] do_filp_open+0x109/0x230 [ 368.531832][T11211] do_sys_openat2+0xa6/0x110 [ 368.531943][T11211] __x64_sys_openat+0xf2/0x120 [ 368.532070][T11211] x64_sys_call+0x2eab/0x3000 [ 368.532101][T11211] do_syscall_64+0xd2/0x200 [ 368.532133][T11211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 368.532181][T11211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 368.532213][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.532241][T11211] RIP: 0033:0x7f66b145d810 [ 368.532262][T11211] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 368.532330][T11211] RSP: 002b:00007f66afec6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 368.532349][T11211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66b145d810 [ 368.532362][T11211] RDX: 0000000000000000 RSI: 00007f66b14e207e RDI: 00000000ffffff9c [ 368.532374][T11211] RBP: 00007f66b14e207e R08: 0000000000000000 R09: 0000000000000000 [ 368.532447][T11211] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 368.532464][T11211] R13: 00007f66b16b6038 R14: 00007f66b16b5fa0 R15: 00007ffd1c7bd638 [ 368.532491][T11211] [ 368.825070][T11219] loop4: detected capacity change from 0 to 512 [ 368.850780][T11219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.866302][T11219] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 368.878863][T11219] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 368.902930][T11219] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 368.910362][T11221] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2656'. [ 368.944072][T11219] EXT4-fs (loop4): 2 truncates cleaned up [ 368.951307][T11222] loop0: detected capacity change from 0 to 4096 [ 368.957221][T11219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.966231][T11222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.978858][T11222] EXT4-fs: Ignoring removed i_version option [ 368.987025][T11222] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.2653: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 256(256) [ 369.006175][T11222] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.2653: Bad quota inode: 4, type: 1 [ 369.017708][T11222] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 369.018724][T11219] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.033630][T11222] EXT4-fs (loop0): mount failed [ 369.154942][T11236] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2660'. [ 369.218681][T11237] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2659'. [ 369.317514][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 369.350782][T11261] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2669'. [ 369.396296][T11261] loop1: detected capacity change from 0 to 4096 [ 369.404074][T11261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.414110][T11261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.552383][T11269] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2671'. [ 369.587424][T11269] loop4: detected capacity change from 0 to 4096 [ 369.595174][T11269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.604323][T11269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.698009][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.730829][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.749070][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 369.762190][T11287] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2681'. [ 369.791096][T11287] loop0: detected capacity change from 0 to 4096 [ 369.810444][T11287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.820124][T11287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.842543][T11291] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 369.849787][T11291] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 369.858696][T11291] veth0_to_bridge: entered allmulticast mode [ 369.865758][T11291] veth0_to_bridge: entered promiscuous mode [ 369.892879][T11291] Ÿë: port 2(veth0_to_team) entered blocking state [ 369.899765][T11291] Ÿë: port 2(veth0_to_team) entered disabled state [ 369.907702][T11291] veth0_to_team: entered allmulticast mode [ 369.931453][T11291] veth0_to_team: entered promiscuous mode [ 370.260886][T11315] loop1: detected capacity change from 0 to 4096 [ 370.275919][T11315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.294399][T11315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.405786][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.532127][T11345] 9p: Unknown access argument ¿: -22 [ 370.819809][T11358] 9p: Unknown access argument ¿: -22 [ 370.887207][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.930842][T11370] loop4: detected capacity change from 0 to 4096 [ 370.944514][T11370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.964258][T11370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.145064][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.554969][T11407] 9p: Unknown access argument ¿: -22 [ 371.786607][T11415] loop0: detected capacity change from 0 to 4096 [ 371.787355][T11415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.795924][T11417] loop4: detected capacity change from 0 to 4096 [ 371.805104][T11415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.809862][T11417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.840639][T11417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.945927][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.054030][ T29] kauditd_printk_skb: 1766 callbacks suppressed [ 372.054045][ T29] audit: type=1326 audit(1760723639.856:42257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 372.117651][ T29] audit: type=1326 audit(1760723639.896:42258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fca171885 code=0x7ffc0000 [ 372.142854][ T29] audit: type=1326 audit(1760723639.896:42259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fca171885 code=0x7ffc0000 [ 372.166774][ T29] audit: type=1326 audit(1760723639.896:42260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 372.191278][ T29] audit: type=1326 audit(1760723639.896:42261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 372.214981][ T29] audit: type=1326 audit(1760723639.896:42262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 372.239686][ T29] audit: type=1326 audit(1760723639.896:42263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 372.371492][T11440] loop4: detected capacity change from 0 to 512 [ 372.378257][T11440] EXT4-fs: Ignoring removed bh option [ 372.383743][T11440] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.391308][T11440] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 372.403937][ T29] audit: type=1326 audit(1760723640.026:42264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe682acefc9 code=0x7ffc0000 [ 372.479267][T11440] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 372.487589][T11440] EXT4-fs (loop4): orphan cleanup on readonly fs [ 372.495662][T11440] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 372.505810][T11440] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 372.515960][T11440] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2729: Failed to acquire dquot type 1 [ 372.547463][T11440] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2729: Invalid block bitmap block 0 in block_group 0 [ 372.562094][T11440] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2729: Invalid block bitmap block 0 in block_group 0 [ 372.577387][T11440] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2729: Invalid block bitmap block 0 in block_group 0 [ 372.591768][T11440] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2729: Failed to acquire dquot type 1 [ 372.604794][T11440] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2729: Failed to acquire dquot type 1 [ 372.617353][T11440] EXT4-fs (loop4): 1 orphan inode deleted [ 372.830096][T11448] 9p: Unknown access argument ¿: -22 [ 372.942257][T11451] loop2: detected capacity change from 0 to 4096 [ 372.949991][T11451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.961864][T11451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.223952][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.234078][T11440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.252684][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.451747][T11459] 9p: Unknown access argument ¿: -22 [ 373.664581][T11474] __nla_validate_parse: 18 callbacks suppressed [ 373.664599][T11474] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2747'. [ 373.850787][T11479] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2750'. [ 373.928789][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.046043][T11484] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2751'. [ 374.065966][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 374.098244][T11482] 9p: Unknown access argument ¿: -22 [ 374.120101][T11484] loop1: detected capacity change from 0 to 4096 [ 374.128310][T11484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.130996][T11484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.169626][T11493] loop2: detected capacity change from 0 to 128 [ 374.265463][T11498] 9p: Unknown access argument ¿: -22 [ 374.276415][T11500] pim6reg: entered allmulticast mode [ 374.308871][T11500] pim6reg: left allmulticast mode [ 374.428689][T11503] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2759'. [ 374.514866][T11510] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2760'. [ 374.555489][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.575431][T11505] loop3: detected capacity change from 0 to 4096 [ 374.583719][T11505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.594678][T11505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.724831][T11527] loop1: detected capacity change from 0 to 512 [ 374.732677][T11527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.753968][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.764222][T11527] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 374.792810][T11527] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 374.807444][T11527] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 374.821600][T11527] EXT4-fs (loop1): 2 truncates cleaned up [ 374.830471][T11527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.848190][T11527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.935868][T11539] 9p: Unknown access argument ¿: -22 [ 375.086442][T11543] loop1: detected capacity change from 0 to 512 [ 375.087033][T11543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.104603][T11543] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 375.116865][T11543] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 375.149576][T11543] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 375.149931][T11543] EXT4-fs (loop1): 2 truncates cleaned up [ 375.150468][T11543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.230063][T11543] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.330176][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 375.443008][T11554] 9p: Unknown access argument ¿: -22 [ 375.503357][T11562] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2777'. [ 375.574722][T11562] loop4: detected capacity change from 0 to 4096 [ 375.575504][T11562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.591876][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 375.618421][T11569] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2779'. [ 375.644015][T11562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.698724][T11573] 9pnet_fd: Insufficient options for proto=fd [ 375.820725][T11586] loop0: detected capacity change from 0 to 512 [ 375.830264][T11586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.846814][T11586] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2787: invalid block [ 375.860235][T11586] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2787: invalid indirect mapped block 4294967295 (level 1) [ 375.878117][T11586] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2787: invalid indirect mapped block 4294967295 (level 1) [ 375.903744][T11584] loop3: detected capacity change from 0 to 8192 [ 375.910584][T11586] EXT4-fs (loop0): 2 truncates cleaned up [ 375.916914][T11586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.940364][T11586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.961623][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.107212][T11607] 9p: Unknown access argument ¿: -22 [ 376.132778][T11609] 9pnet_fd: Insufficient options for proto=fd [ 376.158848][T11608] 9p: Unknown access argument ¿: -22 [ 376.296239][T11617] loop4: detected capacity change from 0 to 4096 [ 376.303423][T11617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.319703][T11617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.436326][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.498566][T11631] 9p: Unknown access argument ¿: -22 [ 376.711217][T11653] 9pnet_fd: Insufficient options for proto=fd [ 376.770153][T11658] 9p: Unknown access argument ¿: -22 [ 376.829252][T11657] loop3: detected capacity change from 0 to 4096 [ 376.829890][T11657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.840252][T11657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.921352][T11671] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 376.921456][T11671] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 376.921564][T11671] veth0_to_bridge: entered allmulticast mode [ 376.922140][T11671] veth0_to_bridge: entered promiscuous mode [ 376.923837][T11671] Ÿë: port 2(veth0_to_team) entered blocking state [ 376.955900][T11671] Ÿë: port 2(veth0_to_team) entered disabled state [ 376.963539][T11671] veth0_to_team: entered allmulticast mode [ 376.964195][T11671] veth0_to_team: entered promiscuous mode [ 376.978229][T11669] 9p: Unknown access argument ¿: -22 [ 377.006117][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.043739][T11671] loop0: detected capacity change from 0 to 8192 [ 377.058482][ T29] kauditd_printk_skb: 1007 callbacks suppressed [ 377.058499][ T29] audit: type=1326 audit(1760723644.866:43268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.089455][ T29] audit: type=1326 audit(1760723644.866:43269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.133787][ T29] audit: type=1326 audit(1760723644.866:43270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.158661][ T29] audit: type=1326 audit(1760723644.866:43271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.187655][ T29] audit: type=1326 audit(1760723644.936:43272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.4.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.211763][ T29] audit: type=1326 audit(1760723644.936:43273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.4.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.236277][ T29] audit: type=1326 audit(1760723644.936:43274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.4.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.260382][ T29] audit: type=1326 audit(1760723644.936:43275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.4.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.262165][T11690] 9p: Unknown access argument ¿: -22 [ 377.285678][ T29] audit: type=1326 audit(1760723644.936:43276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.4.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.316447][ T29] audit: type=1326 audit(1760723644.936:43277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.4.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c03efc9 code=0x7ffc0000 [ 377.466038][T11704] loop0: detected capacity change from 0 to 4096 [ 377.466689][T11704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.480134][T11704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.518890][T11706] loop2: detected capacity change from 0 to 4096 [ 377.519524][T11706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.521617][T11706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.559950][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.606528][T11709] loop1: detected capacity change from 0 to 8192 [ 377.739492][T11718] 9p: Unknown access argument ¿: -22 [ 378.047973][T11733] 9p: Unknown access argument ¿: -22 [ 378.108836][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.371643][T11749] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 378.379323][T11749] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 378.405842][T11749] veth0_to_bridge: entered allmulticast mode [ 378.463017][T11749] veth0_to_bridge: entered promiscuous mode [ 378.483437][T11759] loop0: detected capacity change from 0 to 128 [ 378.491453][T11749] Ÿë: port 2(veth0_to_team) entered blocking state [ 378.498468][T11749] Ÿë: port 2(veth0_to_team) entered disabled state [ 378.506135][T11749] veth0_to_team: entered allmulticast mode [ 378.513437][T11749] veth0_to_team: entered promiscuous mode [ 378.613380][T11749] loop4: detected capacity change from 0 to 8192 [ 378.621288][T11766] pim6reg: entered allmulticast mode [ 378.647175][T11764] loop3: detected capacity change from 0 to 4096 [ 378.655129][T11764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.752298][T11767] loop2: detected capacity change from 0 to 512 [ 378.759544][T11767] EXT4-fs: Ignoring removed bh option [ 378.765169][T11767] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.841779][T11767] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 378.858125][T11767] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 378.867070][T11767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 378.878295][T11767] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2856: Failed to acquire dquot type 1 [ 378.893009][T11767] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2856: Invalid block bitmap block 0 in block_group 0 [ 378.909173][T11767] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2856: Invalid block bitmap block 0 in block_group 0 [ 378.924826][T11767] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2856: Invalid block bitmap block 0 in block_group 0 [ 378.940302][T11764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.953419][T11767] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2856: Failed to acquire dquot type 1 [ 378.968092][T11767] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2856: Failed to acquire dquot type 1 [ 378.991365][T11767] EXT4-fs (loop2): 1 orphan inode deleted [ 379.179922][T11759] pim6reg: left allmulticast mode [ 379.186099][T11772] 9p: Unknown access argument ¿: -22 [ 379.487533][T11778] loop0: detected capacity change from 0 to 8192 [ 379.580102][T11767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.599353][T11774] 9p: Unknown access argument ¿: -22 [ 379.606936][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.849953][T11794] __nla_validate_parse: 16 callbacks suppressed [ 379.849992][T11794] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2867'. [ 379.982028][T11802] 9p: Unknown access argument ¿: -22 [ 380.081680][T11806] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2872'. [ 380.126699][T11806] loop1: detected capacity change from 0 to 4096 [ 380.134410][T11806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.144796][T11806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.227397][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.353242][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.578322][T11824] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2873'. [ 380.603020][T11823] 9p: Unknown access argument ¿: -22 [ 380.727871][T11829] loop4: detected capacity change from 0 to 512 [ 380.734984][T11829] EXT4-fs: Ignoring removed bh option [ 380.740597][T11829] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.780768][T11829] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 380.814608][T11829] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 380.823718][T11829] EXT4-fs (loop4): orphan cleanup on readonly fs [ 380.832050][T11829] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2877: Failed to acquire dquot type 1 [ 380.847005][T11829] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2877: Invalid block bitmap block 0 in block_group 0 [ 380.864375][T11829] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2877: Invalid block bitmap block 0 in block_group 0 [ 380.880319][T11829] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2877: Invalid block bitmap block 0 in block_group 0 [ 380.896995][T11829] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2877: Failed to acquire dquot type 1 [ 380.911387][T11829] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2877: Failed to acquire dquot type 1 [ 380.924799][T11829] EXT4-fs (loop4): 1 orphan inode deleted [ 381.279395][T11837] loop3: detected capacity change from 0 to 8192 [ 381.685572][T11829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.160540][T11845] loop3: detected capacity change from 0 to 512 [ 383.167552][T11845] EXT4-fs: Ignoring removed bh option [ 383.173634][T11845] EXT4-fs: Ignoring removed mblk_io_submit option [ 383.181318][T11827] 9p: Unknown access argument ¿: -22 [ 383.191398][T11845] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 383.206233][T11845] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 383.215097][T11845] EXT4-fs (loop3): orphan cleanup on readonly fs [ 383.222468][T11845] __quota_error: 746 callbacks suppressed [ 383.222484][T11845] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 383.238960][T11845] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 383.249006][T11845] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2885: Failed to acquire dquot type 1 [ 383.261111][T11845] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2885: Invalid block bitmap block 0 in block_group 0 [ 383.275602][T11845] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2885: Invalid block bitmap block 0 in block_group 0 [ 383.297749][T11845] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2885: Invalid block bitmap block 0 in block_group 0 [ 383.312438][T11845] Quota error (device loop3): write_blk: dquota write failed [ 383.320013][T11845] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 383.330043][T11845] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2885: Failed to acquire dquot type 1 [ 383.343638][T11845] Quota error (device loop3): write_blk: dquota write failed [ 383.351255][T11845] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 383.361400][T11845] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2885: Failed to acquire dquot type 1 [ 383.374507][T11845] EXT4-fs (loop3): 1 orphan inode deleted [ 383.389559][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.651973][T11845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.763271][T11858] loop2: detected capacity change from 0 to 512 [ 383.972492][T11871] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2894'. [ 384.026618][T11875] 9p: Unknown access argument ¿: -22 [ 384.036329][T11869] loop4: detected capacity change from 0 to 8192 [ 384.056354][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.142151][ T29] audit: type=1326 audit(1760723651.946:44012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 384.182670][ T29] audit: type=1326 audit(1760723651.946:44013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 384.206852][ T29] audit: type=1326 audit(1760723651.946:44014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 384.231471][ T29] audit: type=1326 audit(1760723651.946:44015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.3.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b145efc9 code=0x7ffc0000 [ 384.295257][T11881] 9p: Unknown access argument ¿: -22 [ 384.343521][T11890] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2899'. [ 384.478172][T11898] 9p: Unknown access argument ¿: -22 [ 384.521392][T11892] 9p: Unknown access argument ¿: -22 [ 384.637776][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 384.703832][T11910] loop0: detected capacity change from 0 to 8192 [ 384.761063][T11916] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2911'. [ 385.073350][T11923] loop3: detected capacity change from 0 to 512 [ 385.080128][T11923] EXT4-fs: Ignoring removed bh option [ 385.085970][T11923] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.885310][T11927] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2914'. [ 386.073454][T11927] loop0: detected capacity change from 0 to 4096 [ 386.081484][T11927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.039311][T11927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.081738][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.098121][T11923] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 387.931327][T11925] loop4: detected capacity change from 0 to 512 [ 387.938215][T11925] EXT4-fs: Ignoring removed bh option [ 387.944278][T11925] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.318077][T11923] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 388.326477][T11923] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.333539][T11923] __quota_error: 255 callbacks suppressed [ 388.333558][T11923] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 388.349797][T11923] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 388.360381][T11925] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 388.371756][T11925] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 388.381088][T11925] EXT4-fs (loop4): orphan cleanup on readonly fs [ 388.387974][T11925] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 388.397992][T11925] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 388.408049][T11925] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2913: Failed to acquire dquot type 1 [ 388.588066][T11923] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2910: Failed to acquire dquot type 1 [ 388.974125][T11925] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2913: Invalid block bitmap block 0 in block_group 0 [ 388.990416][T11925] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2913: Invalid block bitmap block 0 in block_group 0 [ 389.005466][T11925] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2913: Invalid block bitmap block 0 in block_group 0 [ 389.020853][T11925] Quota error (device loop4): write_blk: dquota write failed [ 389.029106][T11925] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 389.039510][T11925] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2913: Failed to acquire dquot type 1 [ 389.054821][T11925] Quota error (device loop4): write_blk: dquota write failed [ 389.062280][T11925] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 389.072535][T11925] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2913: Failed to acquire dquot type 1 [ 389.086878][T11925] EXT4-fs (loop4): 1 orphan inode deleted [ 389.119127][T11923] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2910: Invalid block bitmap block 0 in block_group 0 [ 389.134868][T11923] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2910: Invalid block bitmap block 0 in block_group 0 [ 389.149358][T11923] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2910: Invalid block bitmap block 0 in block_group 0 [ 389.164512][T11923] Quota error (device loop3): write_blk: dquota write failed [ 389.172320][T11923] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 389.183074][T11923] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2910: Failed to acquire dquot type 1 [ 389.196170][T11923] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2910: Failed to acquire dquot type 1 [ 389.209133][T11925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.224443][T11923] EXT4-fs (loop3): 1 orphan inode deleted [ 389.230952][T11923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.307542][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.466224][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 389.778935][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 389.800138][T11955] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2924'. [ 389.846194][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.938562][T11968] 9p: Unknown access argument ¿: -22 [ 390.010262][T11970] loop2: detected capacity change from 0 to 8192 [ 390.141083][T11979] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2930'. [ 390.253226][T11983] loop2: detected capacity change from 0 to 512 [ 390.260184][T11983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.301752][T11983] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 390.301977][T11983] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 390.302309][T11983] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 390.302633][T11983] EXT4-fs (loop2): 2 truncates cleaned up [ 390.303118][T11983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.304178][T11983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.451086][T11994] loop1: detected capacity change from 0 to 512 [ 390.457774][T11994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.516698][T11994] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 390.516926][T11994] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 390.528319][T11994] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 390.574980][T11994] EXT4-fs (loop1): 2 truncates cleaned up [ 390.575424][T11994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.631592][T12008] 9p: Unknown access argument ¿: -22 [ 390.640842][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 390.679862][T11994] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.681910][T12004] loop3: detected capacity change from 0 to 8192 [ 390.893569][T12027] loop4: detected capacity change from 0 to 512 [ 390.901905][T12027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.931578][T12027] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 390.946302][T12027] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 390.965519][T12033] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2951'. [ 390.988061][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 391.009910][T12027] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 391.027776][T12032] loop2: detected capacity change from 0 to 8192 [ 391.047068][T12027] EXT4-fs (loop4): 2 truncates cleaned up [ 391.059182][T12027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.117521][T12045] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2956'. [ 391.147005][T12048] loop1: detected capacity change from 0 to 512 [ 391.157183][T12048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.169156][T12048] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 391.186310][T12045] loop2: detected capacity change from 0 to 4096 [ 391.194241][T12045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.198912][T12048] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 391.215613][T12048] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 391.230948][T12048] EXT4-fs (loop1): 2 truncates cleaned up [ 391.244722][T12052] 9p: Unknown access argument ¿: -22 [ 391.381212][T12059] loop2: detected capacity change from 0 to 4096 [ 391.390225][T12059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.464159][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 391.479653][T12067] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2964'. [ 391.542640][T12072] loop1: detected capacity change from 0 to 8192 [ 391.592733][T12075] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2967'. [ 391.822749][T12091] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2970'. [ 391.874566][T12098] 9p: Unknown access argument ¿: -22 [ 391.892283][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 391.987618][T12106] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2978'. [ 392.018814][T12107] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2979'. [ 392.409864][T12140] bond1: option resend_igmp: invalid value (1024) [ 392.416534][T12140] bond1: option resend_igmp: allowed values 0 - 255 [ 392.487081][T12140] bond1 (unregistering): Released all slaves [ 392.576014][T12141] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.640670][T12141] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.664120][T12164] loop4: detected capacity change from 0 to 8192 [ 392.732232][T12170] loop1: detected capacity change from 0 to 512 [ 392.741735][T12141] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.752765][T12170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.767526][T12170] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 392.791533][T12170] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 392.818303][T12170] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 392.842662][T12141] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.842735][T12170] EXT4-fs (loop1): 2 truncates cleaned up [ 392.936252][ T3629] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.956174][ T3607] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.967428][ T3607] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.002376][ T3607] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.187846][T12199] loop1: detected capacity change from 0 to 8192 [ 393.272029][T12207] loop2: detected capacity change from 0 to 512 [ 393.272520][T12207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.282588][T12207] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 393.282814][T12207] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 393.283028][T12207] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 393.283417][T12207] EXT4-fs (loop2): 2 truncates cleaned up [ 393.339346][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 393.339365][ T29] audit: type=1326 audit(1760723661.146:44913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.392204][ T29] audit: type=1326 audit(1760723661.166:44914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.402733][ T29] audit: type=1326 audit(1760723661.206:44915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.454547][ T29] audit: type=1326 audit(1760723661.206:44916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.479718][ T29] audit: type=1326 audit(1760723661.206:44917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.511409][ T29] audit: type=1326 audit(1760723661.306:44918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.511449][ T29] audit: type=1326 audit(1760723661.306:44919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.511493][ T29] audit: type=1326 audit(1760723661.306:44920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.511567][ T29] audit: type=1326 audit(1760723661.306:44921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.511642][ T29] audit: type=1326 audit(1760723661.306:44922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 393.546779][T12217] 9p: Unknown access argument ¿: -22 [ 394.013078][T12238] loop4: detected capacity change from 0 to 8192 [ 394.125497][T12252] loop2: detected capacity change from 0 to 8192 [ 394.176630][T12254] loop4: detected capacity change from 0 to 8192 [ 394.220525][T12258] loop2: detected capacity change from 0 to 512 [ 394.245981][T12258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.297883][T12258] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 394.337810][T12258] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 394.378498][T12258] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 394.395648][T12258] EXT4-fs (loop2): 2 truncates cleaned up [ 394.505500][T12283] loop4: detected capacity change from 0 to 8192 [ 394.628839][T12299] loop4: detected capacity change from 0 to 4096 [ 394.638302][T12299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 394.772069][T12311] loop2: detected capacity change from 0 to 512 [ 394.788716][T12311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.811906][T12311] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm GPL: invalid block [ 394.830097][T12311] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 394.877049][T12311] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm GPL: invalid indirect mapped block 4294967295 (level 1) [ 394.920210][T12311] EXT4-fs (loop2): 2 truncates cleaned up [ 394.954029][T12327] 9p: Unknown access argument ¿: -22 [ 395.011778][T12329] loop3: detected capacity change from 0 to 8192 [ 395.087441][T12339] loop4: detected capacity change from 0 to 4096 [ 395.095217][T12339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.233047][T12349] loop4: detected capacity change from 0 to 4096 [ 395.240406][T12349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.377132][T12356] loop4: detected capacity change from 0 to 8192 [ 395.500716][T12371] 9p: Unknown access argument ¿: -22 [ 395.857727][T12386] loop1: detected capacity change from 0 to 8192 [ 395.972143][T12396] __nla_validate_parse: 21 callbacks suppressed [ 395.972161][T12396] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3085'. [ 396.027792][T12396] loop3: detected capacity change from 0 to 4096 [ 396.047288][T12396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.075266][T12402] 9p: Unknown access argument ¿: -22 [ 396.206927][T12411] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3090'. [ 396.557835][T12438] loop2: detected capacity change from 0 to 8192 [ 396.603955][T12440] 9p: Unknown access argument ¿: -22 [ 396.615315][T12442] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3102'. [ 396.641800][T12442] loop2: detected capacity change from 0 to 4096 [ 396.649562][T12442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.725607][T12450] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3105'. [ 396.751135][T12450] loop1: detected capacity change from 0 to 4096 [ 396.758773][T12450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.903069][T12455] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3107'. [ 397.044664][T12462] 9p: Unknown access argument ¿: -22 [ 397.290847][T12476] loop3: detected capacity change from 0 to 8192 [ 397.484220][T12489] loop0: detected capacity change from 0 to 512 [ 397.491032][T12489] EXT4-fs: Ignoring removed bh option [ 397.496608][T12489] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.505980][T12489] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 397.538978][T12490] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3116'. [ 397.548942][T12489] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 397.557590][T12489] EXT4-fs (loop0): orphan cleanup on readonly fs [ 397.565587][T12489] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3113: Failed to acquire dquot type 1 [ 397.578868][T12489] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3113: Invalid block bitmap block 0 in block_group 0 [ 397.593200][T12489] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3113: Invalid block bitmap block 0 in block_group 0 [ 397.610573][T12489] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3113: Invalid block bitmap block 0 in block_group 0 [ 397.625577][T12489] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3113: Failed to acquire dquot type 1 [ 397.640195][T12489] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3113: Failed to acquire dquot type 1 [ 397.700296][T12489] EXT4-fs (loop0): 1 orphan inode deleted [ 397.726780][T12488] 9p: Unknown access argument ¿: -22 [ 398.236984][T12501] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3120'. [ 398.314579][T12489] EXT4-fs mount: 27 callbacks suppressed [ 398.314635][T12489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.408132][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 398.511413][ T29] kauditd_printk_skb: 864 callbacks suppressed [ 398.511432][ T29] audit: type=1326 audit(1760723666.316:45781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.567371][ T29] audit: type=1326 audit(1760723666.356:45782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.591615][ T29] audit: type=1326 audit(1760723666.356:45783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.616035][ T29] audit: type=1326 audit(1760723666.356:45784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.640708][ T29] audit: type=1326 audit(1760723666.356:45785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.665430][ T29] audit: type=1326 audit(1760723666.356:45786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.690296][ T29] audit: type=1326 audit(1760723666.356:45787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.715013][ T29] audit: type=1326 audit(1760723666.356:45788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.739201][ T29] audit: type=1326 audit(1760723666.356:45789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.765768][ T29] audit: type=1326 audit(1760723666.356:45790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.1.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca13efc9 code=0x7ffc0000 [ 398.818644][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 398.963215][T12521] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3128'. [ 399.052573][T12523] loop3: detected capacity change from 0 to 4096 [ 399.061629][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.071939][T12521] loop2: detected capacity change from 0 to 4096 [ 399.079706][T12521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.087812][T12523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.105482][T12521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.119145][T12523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.178567][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.201011][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.336723][T12543] 9p: Unknown access argument ¿: -22 [ 399.415044][T12553] loop2: detected capacity change from 0 to 4096 [ 399.423871][T12553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.438316][T12553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.507976][T12564] loop4: detected capacity change from 0 to 4096 [ 399.521866][T12564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.532014][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.588815][T12564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.676027][T12571] loop1: detected capacity change from 0 to 8192 [ 399.685420][T12580] ================================================================== [ 399.696571][T12580] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 399.706234][T12580] [ 399.709312][T12580] read-write to 0xffff8881005f0bb8 of 8 bytes by task 12571 on cpu 1: [ 399.717688][T12580] __filemap_add_folio+0x5b9/0x7d0 [ 399.723093][T12580] filemap_add_folio+0x1d9/0x360 [ 399.728169][T12580] __filemap_get_folio+0x31e/0x650 [ 399.733665][T12580] bdev_getblk+0x14d/0x3b0 [ 399.738321][T12580] __breadahead+0x29/0x170 [ 399.743157][T12580] fat_ent_reada+0x1b7/0x2c0 [ 399.748031][T12580] fat_trim_fs+0x441/0xb80 [ 399.753292][T12580] fat_generic_ioctl+0x48e/0x7d0 [ 399.758438][T12580] fat_dir_ioctl+0xc4/0x1d0 [ 399.763769][T12580] __se_sys_ioctl+0xce/0x140 [ 399.768604][T12580] __x64_sys_ioctl+0x43/0x50 [ 399.773479][T12580] x64_sys_call+0x1816/0x3000 [ 399.778429][T12580] do_syscall_64+0xd2/0x200 [ 399.783238][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.789496][T12580] [ 399.791926][T12580] read to 0xffff8881005f0bb8 of 8 bytes by task 12580 on cpu 0: [ 399.799655][T12580] nr_blockdev_pages+0x7e/0xd0 [ 399.804525][T12580] si_meminfo+0x87/0xd0 [ 399.808813][T12580] handshake_net_init+0x78/0x150 [ 399.813866][T12580] ops_init+0x22a/0x2e0 [ 399.818121][T12580] setup_net+0x83/0x210 [ 399.822617][T12580] copy_net_ns+0x28c/0x3b0 [ 399.827241][T12580] create_new_namespaces+0x20e/0x3d0 [ 399.832556][T12580] unshare_nsproxy_namespaces+0xe8/0x120 [ 399.838487][T12580] ksys_unshare+0x3d0/0x6d0 [ 399.843085][T12580] __x64_sys_unshare+0x1f/0x30 [ 399.847987][T12580] x64_sys_call+0x2915/0x3000 [ 399.852699][T12580] do_syscall_64+0xd2/0x200 [ 399.857225][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.863223][T12580] [ 399.865646][T12580] value changed: 0x0000000000000005 -> 0x0000000000000006 [ 399.872764][T12580] [ 399.875167][T12580] Reported by Kernel Concurrency Sanitizer on: [ 399.881517][T12580] CPU: 0 UID: 0 PID: 12580 Comm: syz.2.3147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 399.891421][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.901500][T12580] ================================================================== [ 399.972351][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.